The Breach News

Severe Security Vulnerability Discovered in LiteSpeed Cache Plugin for WordPress

Critical Security Flaw Discovered in LiteSpeed Cache Plugin for WordPress Cybersecurity experts have identified a significant vulnerability in the LiteSpeed Cache plugin for WordPress, which could potentially allow unauthorized users to gain control over arbitrary accounts. This weakness, identified as CVE-2024-44000 and carrying a CVSS score of 7.5, affects all…

Read MoreSevere Security Vulnerability Discovered in LiteSpeed Cache Plugin for WordPress

Malicious PyPI Library Targets Solana Users, Hijacks Blockchain Wallet Keys

Cybersecurity experts have unveiled a concerning discovery involving a nefarious package on the Python Package Index (PyPI) that poses as a legitimate library associated with the Solana blockchain. This malicious software is not a benign tool for developers but a sophisticated ploy to steal sensitive information, specifically targeting cryptocurrency wallet…

Read MoreMalicious PyPI Library Targets Solana Users, Hijacks Blockchain Wallet Keys

Credit Card Information of More Than 1.7 Million U.S. Customers Leaked

Data Breach Exposes Credit Card Information of 1.7 Million Customers In a significant cybersecurity incident, credit card details of over 1.7 million customers have been compromised following an attack on an electronic payments platform, SlimCD. This breach raises critical concerns regarding data security and customer privacy, particularly in the realms…

Read MoreCredit Card Information of More Than 1.7 Million U.S. Customers Leaked

LVHN Proposes $65M Settlement in Class-Action Lawsuit Involving Data Breach of 134,000 Patients’ Medical Records – Scranton Times-Tribune

LVHN has announced that it has reached a proposed $65 million settlement in connection with a class-action lawsuit stemming from the data breaches involving the medical records of approximately 134,000 patients. The case, which has garnered significant attention, was reported by the Scranton Times-Tribune and raises important considerations for businesses…

Read MoreLVHN Proposes $65M Settlement in Class-Action Lawsuit Involving Data Breach of 134,000 Patients’ Medical Records – Scranton Times-Tribune

FBI Disbands Dispossessor Ransomware Group by Seizing Servers in the U.S., U.K., and Germany

The U.S. Federal Bureau of Investigation (FBI) has successfully disrupted the online infrastructure supporting the emerging ransomware group known as Radar Announced on Monday, this operation led to the dismantling of multiple servers across several countries, including three in the United States, three in the United Kingdom, and eighteen in…

Read MoreFBI Disbands Dispossessor Ransomware Group by Seizing Servers in the U.S., U.K., and Germany

Progress Software Releases Patch for LoadMaster and MT Hypervisor Vulnerability

Security Updates Released for Critical Flaw in LoadMaster and Multi-Tenant Hypervisor Progress Software has taken decisive action in response to a high-severity vulnerability affecting its LoadMaster and Multi-Tenant (MT) hypervisor. This flaw could potentially allow attackers to execute arbitrary operating system commands, creating significant security risks for users. The vulnerability,…

Read MoreProgress Software Releases Patch for LoadMaster and MT Hypervisor Vulnerability

New Supply Chain Attack ‘Revival Hijack’ Poses Significant Threat to PyPI Takeovers

New Supply Chain Attack Threatens Thousands of Python Packages Cybersecurity firm JFrog has identified a novel attack method that poses a serious threat to the Python Package Index (PyPI) repositories, affecting over 22,000 software packages and potentially endangering a vast number of users. Dubbed “Revival Hijack,” this technique exploits a…

Read MoreNew Supply Chain Attack ‘Revival Hijack’ Poses Significant Threat to PyPI Takeovers

Ransomware Attack Forces Schoolchildren to Leave; Veeam Backup Vulnerability Exposed

The recent surge in ransomware incidents has underscored the vulnerabilities of both public and private sector organizations, with the latest attack impacting the Charles Darwin School in the UK. After experiencing a severe cyber assault on Thursday, the school was compelled to send students home and declare a prolonged holiday…

Read MoreRansomware Attack Forces Schoolchildren to Leave; Veeam Backup Vulnerability Exposed

China-Supported Earth Baku Expands Cyber Attacks Across Europe, the Middle East, and Africa

The China-supported hacking group known as Earth Baku has expanded its operational focus, shifting from mainly Indo-Pacific targets to include nations across Europe, the Middle East, and Africa since late 2022. Countries recently identified as potential targets of this group include Italy, Germany, the United Arab Emirates, and Qatar, with…

Read MoreChina-Supported Earth Baku Expands Cyber Attacks Across Europe, the Middle East, and Africa