The Breach News

Possible Data Breach Reported at Fairbanks Health Clinic, Officials Announce

Potential Data Breach at Foundation Health Partners Raises Concerns FAIRBANKS, Alaska—Foundation Health Partners (FHP), which oversees several healthcare facilities, has alerted patients to a possible data breach that transpired in November. The health system, which encompasses Fairbanks Memorial Hospital, Tanana Valley Clinic, Denali Center, and multiple outpatient clinics serving the…

Read MorePossible Data Breach Reported at Fairbanks Health Clinic, Officials Announce

Hackers Target Federal Agency Servers by Exploiting ColdFusion Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of a high-severity vulnerability in Adobe ColdFusion, identified as CVE-2023-26360. Unidentified cyber actors are reportedly leveraging this flaw to gain unauthorized access to government servers. This vulnerability is categorized as an improper access control…

Read MoreHackers Target Federal Agency Servers by Exploiting ColdFusion Vulnerability

Iranian APT Group Attempts to Compromise Governments in Kuwait and Saudi Arabia

Iranian Cyber Espionage Campaign Targeting Kuwait and Saudi Arabia’s Critical Infrastructure Recent reports from cybersecurity researchers have unveiled a sophisticated Iranian cyber espionage operation aimed at critical infrastructures in Kuwait and Saudi Arabia. The campaign, attributed to the Chafer APT (also referred to as APT39 or Remix Kitten), has been…

Read MoreIranian APT Group Attempts to Compromise Governments in Kuwait and Saudi Arabia

The Latest DOJ Release: What the ‘Epstein’s Suicide’ Video Really Reveals

Emerging Concerns Over a Viral Video Allegedly Linked to Jeffrey Epstein’s Death A recently surfaced 12-second video claiming to depict Jeffrey Epstein’s suicide in his prison cell has begun circulating on social media platforms, following the latest release of documents from the Department of Justice (DOJ). However, the associated documentation…

Read MoreThe Latest DOJ Release: What the ‘Epstein’s Suicide’ Video Really Reveals

South Korea’s Breaches Spotlight Asia’s Identity and IoT Security Vulnerabilities – SC Media

South Korea Cyber Breaches Illuminate Regional Identity and IoT Security Challenges Recent security breaches in South Korea have raised alarming questions about the resilience of the region’s digital infrastructure and the broader implications for identity and IoT security. This development has heightened awareness among businesses regarding existing vulnerabilities and the…

Read MoreSouth Korea’s Breaches Spotlight Asia’s Identity and IoT Security Vulnerabilities – SC Media

New Stealthy ‘Krasue’ Linux Trojan Aiming at Telecom Companies in Thailand

The cybersecurity landscape has been shaken by the emergence of a new Linux remote access trojan (RAT) named Krasue. This malware has been identified as targeting telecommunications companies in Thailand since at least 2021, providing threat actors with covert access to victim networks. Group-IB, a cybersecurity firm, has released findings…

Read MoreNew Stealthy ‘Krasue’ Linux Trojan Aiming at Telecom Companies in Thailand

New ComRAT Malware Leverages Gmail for Command Reception and Data Exfiltration

Recent cybersecurity investigations have revealed an upgraded variant of the ComRAT backdoor, a sophisticated tool initially deployed by the Turla Advanced Persistent Threat (APT) group. This latest iteration utilizes Gmail’s web interface to clandestinely receive commands and exfiltrate sensitive information. Cybersecurity firm ESET reported that ComRAT version 4, first identified…

Read MoreNew ComRAT Malware Leverages Gmail for Command Reception and Data Exfiltration