The Breach News

YouTube Game Cheats Distribute Arcane Stealer Malware to Russian-Speaking Users

New Malware Targeting Gamers: Arcane Stealer Discovered Recent reports have surfaced regarding a new strain of malware known as Arcane, disseminated through YouTube videos that advertise game cheats. This unique malware, particularly concerning for its sophisticated data collection methods, appears to primarily target Russian-speaking users, signaling a new wave of…

Read MoreYouTube Game Cheats Distribute Arcane Stealer Malware to Russian-Speaking Users

Managing Data Privacy Risks in Biotech: Insights from 23andMe’s Downfall

In March 2025, 23andMe, a notable player in the biotech sector known for genetic testing, declared Chapter 11 bankruptcy, exposing the vulnerabilities that surround firms handling sensitive genetic data. This drastic step followed a credential-stuffing attack in 2023, which compromised the genetic information of approximately 6.4 million users. As the…

Read MoreManaging Data Privacy Risks in Biotech: Insights from 23andMe’s Downfall

Active Exploit: CVE-2025-24054 Targets NTLM Credentials During File Downloads

On Thursday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced the addition of a medium-severity security vulnerability in Microsoft Windows to its Known Exploited Vulnerabilities (KEV) catalog. This decision follows reports indicating that the flaw is actively being exploited in real-world scenarios. The vulnerability, identified as CVE-2025-24054, received a…

Read MoreActive Exploit: CVE-2025-24054 Targets NTLM Credentials During File Downloads

Chinese Tonto Team Hackers’ Second Attempt to Breach Cybersecurity Firm Group-IB Fizzles Out

In June 2022, the advanced persistent threat (APT) group known as Tonto Team attempted to breach the cybersecurity firm Group-IB, although the attack was thwarted. Based in Singapore, Group-IB reported that it successfully detected and blocked a wave of phishing emails aimed at its employees, marking the second attempt on…

Read MoreChinese Tonto Team Hackers’ Second Attempt to Breach Cybersecurity Firm Group-IB Fizzles Out

ID.me Secures $340M in Series E Funding to Expand and Combat Deepfake Fraud

Access Management, Artificial Intelligence & Machine Learning, Identity & Access Management Series E Funding at $2B Valuation Drives Fraud Defense and Identity Technology Expansion Michael Novinson ( @MichaelNovinson) • September 5, 2025 Image: Shutterstock ID.me, a digital identity provider founded by a former U.S. Army platoon leader, has secured $340…

Read MoreID.me Secures $340M in Series E Funding to Expand and Combat Deepfake Fraud

Bridgestone Confirms Cyberattack Disrupting Operations at North American Facilities

Bridgestone has confirmed that a cyberattack has disrupted operations at some of its manufacturing facilities. This article examines the implications for employees, includes expert insights, and highlights the suspected hacking group, Scattered Lapsus$ Hunters. Bridgestone, the leading tire manufacturer globally by output, has launched an investigation into a cyberattack affecting…

Read MoreBridgestone Confirms Cyberattack Disrupting Operations at North American Facilities

Sensitive Customer Data Exposed in Wealthsimple Security Breach

Wealthsimple Reports Security Breach Affecting Customers’ Personal Information Wealthsimple, a prominent FinTech company, has disclosed a security incident that compromised the personal information of certain customers following a breach on August 30. The firm has confirmed that significantly fewer than one percent of its 3 million clients were affected, which…

Read MoreSensitive Customer Data Exposed in Wealthsimple Security Breach

ASUS Acknowledges Serious Vulnerability in AiCloud Routers; Users Advised to Update Firmware Promptly

ASUS has revealed a significant security vulnerability affecting its routers with AiCloud functionality, exposing them to potential remote attacks that can lead to unauthorized execution of commands. This issue, designated as CVE-2025-2492, has attained a critical CVSS score of 9.2 out of 10, indicating a severe level of risk for…

Read MoreASUS Acknowledges Serious Vulnerability in AiCloud Routers; Users Advised to Update Firmware Promptly