The Breach News

Styx Stealer Developer’s OPSEC Breach Exposes Client List and Profit Information

In a notable lapse in operational security (OPSEC), the operator behind the Styx Stealer information theft tool inadvertently leaked sensitive details from their own computer. This data breach exposed client information, profit margins, nicknames, phone numbers, and email addresses. Styx Stealer, emerged in April 2024, is considered a variant of…

Read MoreStyx Stealer Developer’s OPSEC Breach Exposes Client List and Profit Information

Vastaamo Data Leak Victims Pursue Increased Compensation – DataBreaches.net

Thousands of Vastaamo Leak Victims Seek Enhanced Compensation In a significant development regarding the Vastaamo data breach, thousands of victims are actively pursuing higher compensation for the personal data exposed during the incident. This breach, which came to light in late 2020, involved the unauthorized disclosure of sensitive patient information…

Read MoreVastaamo Data Leak Victims Pursue Increased Compensation – DataBreaches.net

Toyota Faces Data Crisis as Hackers Release 240GB of Customer Information – Yahoo! Voices

Recently, Toyota has faced a significant data breach, which has resulted in the leak of an alarming 240GB of customer information. This incident underscores the growing cybersecurity threats that businesses are currently exposed to. As one of the world’s leading automotive manufacturers, Toyota has been a prime target for cybercriminals,…

Read MoreToyota Faces Data Crisis as Hackers Release 240GB of Customer Information – Yahoo! Voices

New PG_MEM Malware Targets PostgreSQL Databases for Cryptocurrency Mining

Cybersecurity experts have recently uncovered a new strain of malware known as PG_MEM, specifically designed to mine cryptocurrency by exploiting vulnerabilities in PostgreSQL database instances. This malicious software employs brute-force tactics, wherein attackers repeatedly attempt to guess the database credentials, typically targeting systems with weak passwords. According to Assaf Morag,…

Read MoreNew PG_MEM Malware Targets PostgreSQL Databases for Cryptocurrency Mining

19-jarige Amersfoorter voor de vierde keer aangehouden voor phishing – DataBreaches.net

In a concerning development for cybersecurity in the Netherlands, a 19-year-old resident of Amersfoort has been apprehended for his involvement in phishing activities for the fourth time. This continued behavior indicates a troubling pattern, underscoring the challenges many organizations face in the realm of cybersecurity. The young individual’s repeated offenses…

Read More19-jarige Amersfoorter voor de vierde keer aangehouden voor phishing – DataBreaches.net

Urgent: GitLab Addresses Critical Vulnerability Enabling Unauthorized Execution of Pipeline Jobs

GitLab Issues Urgent Security Update Following Discovery of Critical Vulnerability On Wednesday, GitLab announced the release of crucial security updates aimed at addressing 17 vulnerabilities, among which is a critical flaw that permits an attacker to execute pipeline jobs as an arbitrary user. This vulnerability, designated CVE-2024-6678, carries a CVSS…

Read MoreUrgent: GitLab Addresses Critical Vulnerability Enabling Unauthorized Execution of Pipeline Jobs

PEAKLIGHT Downloader Used in Attacks Targeting Windows through Malicious Movie Downloads

New Cyber Threat Uncovered: Sophisticated Malware Dropper Targeting Windows Systems Cybersecurity experts have recently identified a previously unknown dropper that acts as a gateway for deploying advanced malware with the ultimate aim of compromising Windows systems. This discovery marks a significant development in the ongoing fight against cyber threats, particularly…

Read MorePEAKLIGHT Downloader Used in Attacks Targeting Windows through Malicious Movie Downloads

Chinese DragonRank Hackers Target Global Windows Servers for SEO Fraud Exploits

DragonRank Hacking Group Compromises Global Windows Servers: A Threat to Cybersecurity A cybercriminal organization known as DragonRank has recently been identified as having breached over 30 Windows servers around the world, including in Thailand, India, Korea, Belgium, the Netherlands, and China. This Chinese-speaking hacking group is primarily focused on exploiting…

Read MoreChinese DragonRank Hackers Target Global Windows Servers for SEO Fraud Exploits