The Breach News

Exploiting Funnel Builder Vulnerabilities for WooCommerce Checkout Skimming

Critical Vulnerability Discovered in WordPress Funnel Builder Plugin A significant security vulnerability affecting the Funnel Builder plugin for WordPress has been actively exploited, allowing malicious actors to inject harmful JavaScript code into WooCommerce checkout pages. This alarming situation has raised concerns over the potential theft of sensitive payment information from…

Read MoreExploiting Funnel Builder Vulnerabilities for WooCommerce Checkout Skimming

Microsoft Uncovers New Lightweight Backdoor Targeting Cryptocurrency Theft

Microsoft Identifies New Malware Targeting Cryptocurrency Credentials Microsoft has reported the emergence of a novel self-propagating malware, dubbed “Crypto Clipper,” which primarily targets cryptocurrency credentials. This malicious software exploits USB drives as its vector of spread, seeking to compromise valuable digital wallet information and relay it to servers controlled by…

Read MoreMicrosoft Uncovers New Lightweight Backdoor Targeting Cryptocurrency Theft

Grafana GitHub Breach: Source Code Exposed Through TanStack npm Attack

Grafana Labs Confirms Limited Data Breach Following GitHub Incident On May 19, 2026, Grafana Labs announced the results of an investigation into a recent security breach. The company clarified that there was no evidence indicating that customer production systems or operations had been compromised. Instead, the incident was confined to…

Read MoreGrafana GitHub Breach: Source Code Exposed Through TanStack npm Attack

Google Security Researcher Unveils New Vulnerability in Linux Kernel with Proof of Concept Exploit

Critical Linux Kernel Vulnerability Exposed; Patches Promptly Released A serious vulnerability in the Linux kernel has recently been uncovered, impacting versions from 3.16 to 4.18.8. The flaw, designated as CVE-2018-17182, was identified by cybersecurity researcher Jann Horn of Google Project Zero. This bug, which can lead to significant security risks,…

Read MoreGoogle Security Researcher Unveils New Vulnerability in Linux Kernel with Proof of Concept Exploit

Inside the Secret Member Ranking System of the Peter Thiel-Connected Dialog Club

Data Breach Exposes Private Network Dialog’s Attendee Data In a significant breach of privacy, internal records from Dialog, a private network co-founded by Peter Thiel, have been leaked, revealing a clandestine grading system used to assess event attendees based on wealth and influence. This information was obtained by WIRED from…

Read MoreInside the Secret Member Ranking System of the Peter Thiel-Connected Dialog Club

GitHub Internal Repositories Compromised by Malicious Nx Console VS Code Extension

GitHub has confirmed a significant breach of its internal repositories, attributed to a compromised employee device that was infected with a malicious version of the Nx Console, a Microsoft Visual Studio Code extension. This incident underscores the vulnerabilities present in commonly used development tools, raising concerns among software developers and…

Read MoreGitHub Internal Repositories Compromised by Malicious Nx Console VS Code Extension

New Exploit Unveiled for MikroTik Router WinBox Vulnerability Granting Complete Root Access

Critical Vulnerability Discovered in MikroTik Routers: Security Risks on the Rise Recent developments in cybersecurity have uncovered a significant vulnerability in MikroTik routers that poses an alarming threat to users and businesses alike. Initially identified and patched shortly after its discovery in April 2023, this flaw, designated as CVE-2018-14847, has…

Read MoreNew Exploit Unveiled for MikroTik Router WinBox Vulnerability Granting Complete Root Access

DragonForce Ransomware Exploits Microsoft Teams to Conceal Malicious Activity

Cybercriminals associated with the DragonForce ransomware group have recently infiltrated a U.S.-based service firm, employing Microsoft Teams’ relay infrastructure to mask their malicious activities effectively. Research conducted by teams from Broadcom’s Symantec and Carbon Black has revealed that the attackers leveraged a newly discovered, specially crafted backdoor to disguise their…

Read MoreDragonForce Ransomware Exploits Microsoft Teams to Conceal Malicious Activity