The Breach News

After Data Breach, Numerous Stalkerware Apps Shut Down – Dark Reading

Multiple Stalkerware Applications Shut Down Following Data Breach In a recent development within the cybersecurity landscape, several stalkerware applications have gone offline in the aftermath of a significant data breach. This event highlights ongoing vulnerabilities in privacy-centric software that collects sensitive user data without consent. With the surge in awareness…

Read MoreAfter Data Breach, Numerous Stalkerware Apps Shut Down – Dark Reading

Malicious Malware Lurked Undetected in NPM Repository for Two Years

Malicious JavaScript Packages Target Developers, Elicit Concern Recent reports have surfaced concerning a series of malicious JavaScript packages uploaded to the NPM (Node Package Manager) registry, raising significant alarms within the software development community. These packages were engineered to activate certain payloads on specified dates in 2023, while one particular…

Read MoreMalicious Malware Lurked Undetected in NPM Repository for Two Years

Database Breach Exposes 184 Million Stolen Emails and Passwords from Infostealers

Cybersecurity researcher Jeremiah Fowler has uncovered a misconfigured cloud server that exposed an astonishing 184 million login credentials, likely gathered through infostealer malware. Jeremiah Fowler, a cybersecurity expert, found an unsecured database housing over 184 million unique usernames and passwords. His findings, which were shared with Hackread.com, reveal that this…

Read MoreDatabase Breach Exposes 184 Million Stolen Emails and Passwords from Infostealers

Survey Reports Third-Party Vendors Account for 41.8% of Fintech Data Breaches

A new report highlights the considerable cybersecurity threat posed by third-party breaches to fintech companies. (Image credit: Shutterstock) Recent analysis from SecurityScorecard reveals that 41.8% of data breaches affecting prominent fintech organizations can be traced back to third-party vendors. This alarming statistic is part of the 2025 sector report, which…

Read MoreSurvey Reports Third-Party Vendors Account for 41.8% of Fintech Data Breaches

Unveiled: Massive Database of 184 Million Records Reveals Extensive Login Credentials

The alarming reality that sensitive data could be unintentionally exposed due to a poorly secured or misconfigured database has long been a significant privacy concern. A recent incident involving a staggering 184 million records—encompassing login credentials for major platforms such as Apple, Facebook, and Google, as well as accounts linked…

Read MoreUnveiled: Massive Database of 184 Million Records Reveals Extensive Login Credentials

Windows Server Vulnerability: A Gateway to Privilege Escalation

Active Directory, Security Operations Akamai Researchers Alert to ‘BadSuccessor’ Vulnerability in Windows Server 2025 Prajeet Nair (@prajeetspeaks) • May 21, 2025 Image: Microsoft A recently identified vulnerability in Windows Server 2025 has been labeled “trivial” to exploit, potentially allowing for privilege escalation and full domain compromise, according to research conducted…

Read MoreWindows Server Vulnerability: A Gateway to Privilege Escalation

Unpacking the SK Telecom Breach: Perpetrators, Stolen Data, and Its Ongoing Significance – Chosun Ilbo

Analyzing the Recent Breach at SK Telecom: Key Takeaways and Implications SK Telecom, a leading telecommunications provider in South Korea, has recently experienced a significant data breach, raising alarms within the cybersecurity community and among business owners globally. The breach underscores the continuing vulnerability of even large corporations to cyber…

Read MoreUnpacking the SK Telecom Breach: Perpetrators, Stolen Data, and Its Ongoing Significance – Chosun Ilbo

Signal Claims Microsoft Leaves No Alternative as It Blocks Windows Recall

In recent developments surrounding Microsoft’s Recall feature, concerns have emerged regarding its potential risks to user privacy. When enabled, Recall indexes a wide array of content, including Zoom meetings, emails, personal photos, medical information, and notably, conversations on Signal. This indexing occurs not only for the user but also for…

Read MoreSignal Claims Microsoft Leaves No Alternative as It Blocks Windows Recall

Ohio Health System Addresses Cyberattack and Fraud Schemes

Fraud Management & Cybercrime, Healthcare, Incident & Breach Response Experts Identify Interlock Ransomware Gang Behind Kettering Health Cyberattack Marianne Kolbasuk McGee (HealthInfoSec) • May 21, 2025 Kettering Health, which manages 14 medical centers and 120 outpatient facilities in Ohio, is addressing a cyberattack detected on Tuesday. (Image: Kettering Health) Kettering…

Read MoreOhio Health System Addresses Cyberattack and Fraud Schemes