The Breach News

British Airways Penalized £20 Million for Data Breach Compromising Over 400,000 Customers

British Airways has faced a substantial penalty of £20 million following an extensive investigation by the Information Commissioner’s Office (ICO), stemming from a significant data breach that compromised the personal information of over 400,000 customers in 2018. This fine is noteworthy as it represents the largest issued by the ICO…

Read MoreBritish Airways Penalized £20 Million for Data Breach Compromising Over 400,000 Customers

Warning: CosmicSting Exploit Targeting Adobe Commerce and Magento Stores

Critical Vulnerability Exposes Adobe Commerce and Magento Stores to Exploits Recent cybersecurity research indicates that a significant 5% of all Adobe Commerce and Magento stores have been compromised due to a serious security vulnerability named CosmicSting. This development underscores the escalating risk that online retailers are facing in the digital…

Read MoreWarning: CosmicSting Exploit Targeting Adobe Commerce and Magento Stores

Recognizing, Enduring, and Rebounding from Cyber-Attacks

Cyber Security Landscape Amidst Rising Threats: Insights from the 2024 Breaches Survey The recently released 2024 Cyber Security Breaches Survey paints a concerning picture for UK businesses grappling with escalating cyber threats. As the frequency and sophistication of cyber-attacks continue to rise, particularly targeting larger enterprises, organizations are increasingly challenged…

Read MoreRecognizing, Enduring, and Rebounding from Cyber-Attacks

SolarWinds Addresses 8 Critical Vulnerabilities in Access Rights Manager Software

SolarWinds has recently addressed a series of critical security vulnerabilities within its Access Rights Manager (ARM) software that pose significant risks to users. These vulnerabilities could be exploited by malicious actors to gain unauthorized access to sensitive information or to execute arbitrary code, making this a pressing concern for businesses…

Read MoreSolarWinds Addresses 8 Critical Vulnerabilities in Access Rights Manager Software

U.S. Treasury Identifies Hamas Spokesperson Linked to Cyber Influence Activities

On Friday, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced the imposition of sanctions against Hudhayfa Samir ‘Abdallah al-Kahlut, a 39-year-old individual linked to Hamas, due to his involvement in orchestrating cyber influence operations. Al-Kahlut, who is also known by the name Abu Ubaida, has served as…

Read MoreU.S. Treasury Identifies Hamas Spokesperson Linked to Cyber Influence Activities

Startup Develops Real-Time Deepfake Video Detection Technology

In an alarming development, the capability of real-time deepfakes has expanded far beyond high-profile individuals and public personalities. Research conducted at New York University by Mittal in collaboration with professors Chinmay Hegde and Nasir Memon introduces a possible solution to combat AI-generated impersonations in video calls. Their proposed approach involves…

Read MoreStartup Develops Real-Time Deepfake Video Detection Technology

Millions of US Voter Records Leaked from 13 Improperly Configured Databases

Title: Exposed Databases Reveal 4.6 Million Illinois Voter Records, Raising Security Concerns in Election Data Management In a significant breach of election data security, cybersecurity expert Jeremiah Fowler has exposed 4.6 million sensitive records, including voter details, from misconfigured databases linked to a single county in Illinois. These records, which…

Read MoreMillions of US Voter Records Leaked from 13 Improperly Configured Databases

Data Breach May Compromise Information of Millions from Booking.com and Expedia

Data Breach Exposes Millions of Hotel Customers’ Sensitive Information A significant data breach at Prestige Software, a provider of hotel reservation systems, has potentially compromised the sensitive information of millions of hotel customers. The breach was uncovered by cybersecurity research firm Website Planet, which reported that the company’s Cloud Hospitality…

Read MoreData Breach May Compromise Information of Millions from Booking.com and Expedia

China-Connected CeranaKeeper Focusing on Southeast Asia for Data Exfiltration

Emerging Threat Actor CeranaKeeper Targets Southeast Asia in Data Exfiltration Campaigns A novel cyber threat actor, dubbed CeranaKeeper, has been implicated in a series of data exfiltration attacks focused on Southeast Asian nations, according to Slovak cybersecurity firm ESET. The firm reported that campaigns aimed at governmental organizations in Thailand…

Read MoreChina-Connected CeranaKeeper Focusing on Southeast Asia for Data Exfiltration