The Breach News

⚡ THN Weekly Recap: Stolen Google Secrets, Windows Breach, Latest Crypto Scams, and More!

This week’s cybersecurity update delves into various evolving threats, including a sophisticated phishing technique used by Russian threat actors. Covering issues from device code phishing to cloud-based attacks, this summary transforms complex technicalities into comprehensible insights, tailored for tech-savvy professionals. ⚡ Threat of the Week The recent disclosure from Microsoft…

Read More⚡ THN Weekly Recap: Stolen Google Secrets, Windows Breach, Latest Crypto Scams, and More!

Ex-FinWise Employee Allegedly Misappropriated Sensitive Data of 689,000 American First Finance Customers

Data Breach at FinWise Bank Exposes Sensitive Information of 689,000 Customers FinWise Bank, a community bank based in Utah, has reported a significant data breach involving the unauthorized access of sensitive customer information by a former employee, occurring after the individual’s employment had ended. The breach was initially detected on…

Read MoreEx-FinWise Employee Allegedly Misappropriated Sensitive Data of 689,000 American First Finance Customers

Serious mySCADA myPRO Vulnerabilities Could Allow Attackers to Gain Control of Industrial Systems

In a significant cybersecurity revelation, researchers have identified two severe vulnerabilities affecting mySCADA’s myPRO, a Supervisory Control and Data Acquisition (SCADA) system widely utilized in operational technology environments. This discovery poses a critical security threat, as these flaws could enable malicious actors to gain unauthorized control over affected systems, as…

Read MoreSerious mySCADA myPRO Vulnerabilities Could Allow Attackers to Gain Control of Industrial Systems

North Korean Hackers Focus on Europe and Latin America with Enhanced DTrack Backdoor

Recent cybersecurity investigations have unveiled that hackers affiliated with the North Korean government are employing a revamped variant of the backdoor malware known as Dtrack. This malware is specifically targeting a diverse array of sectors across multiple countries, including Germany, Brazil, India, Italy, Mexico, Switzerland, Saudi Arabia, Turkey, and the…

Read MoreNorth Korean Hackers Focus on Europe and Latin America with Enhanced DTrack Backdoor

DHS Data Hub Leaked Sensitive Intelligence to Thousands of Unapproved Users

The Department of Homeland Security (DHS) is facing scrutiny following a significant data breach concerning its intelligence division. This incident, revealed through a data leak, raises critical questions about the agency’s approach to domestic surveillance, a concern already voiced by privacy advocates since the DHS’s establishment post-September 11 attacks. The…

Read MoreDHS Data Hub Leaked Sensitive Intelligence to Thousands of Unapproved Users

Hackers Breach Gucci, Balenciaga, and Alexander McQueen, Compromising Millions of Customer Records

Kering, the French luxury conglomerate that owns prestigious brands such as Gucci, Balenciaga, and Alexander McQueen, has reported a significant data breach affecting the personal information of potentially millions of customers globally. This cyber incident has raised serious concerns about the integrity of consumer data in the luxury retail sector.…

Read MoreHackers Breach Gucci, Balenciaga, and Alexander McQueen, Compromising Millions of Customer Records

CISA Includes NAKIVO Vulnerability in KEV Catalog Following Reports of Active Exploitation

The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog to include a severe security vulnerability affecting NAKIVO Backup & Replication software. This addition arises from confirmed instances of active exploitation, prompting urgency for remedial action across affected enterprises. The specific vulnerability, identified as CVE-2024-48248,…

Read MoreCISA Includes NAKIVO Vulnerability in KEV Catalog Following Reports of Active Exploitation

Hive Ransomware Attackers Extorted $100 Million from More Than 1,300 Global Companies

The Hive ransomware-as-a-service (RaaS) group has executed attacks against more than 1,300 organizations globally, amassing illicit earnings of around $100 million by November 2022. This malicious enterprise has demonstrated an extensive reach, impacting a variety of sectors, most notably healthcare and public health, as well as government facilities and critical…

Read MoreHive Ransomware Attackers Extorted $100 Million from More Than 1,300 Global Companies