The Breach News

AFP Notifies French Authorities of Possible Data Breach – IT Security Guru

In a recent development reported by AFP, French authorities have been alerted to a potential data breach, raising concerns over the security of sensitive information. The incident underscores the continuing threat that data breaches pose to organizations across various sectors, especially in a digitally connected world. While specific details regarding…

Read MoreAFP Notifies French Authorities of Possible Data Breach – IT Security Guru

Serious Vulnerability in WordPress LiteSpeed Cache Plugin Grants Hackers Admin Privileges

Cybersecurity experts have reported a significant vulnerability within the LiteSpeed Cache plugin for WordPress, one of the platform’s most commonly used caching solutions, boasting over five million active installations. This flaw, identified as CVE-2024-28000, has the potential to enable unauthenticated individuals to obtain administrator access to affected WordPress sites, posing…

Read MoreSerious Vulnerability in WordPress LiteSpeed Cache Plugin Grants Hackers Admin Privileges

Introducing Zergeca: A New Golang-Powered Botnet for High-Impact DDoS Attacks

New Botnet ‘Zergeca’ Threatens Cybersecurity Landscape with Advanced DDoS Capabilities Cybersecurity experts have identified a new botnet named Zergeca, which exhibits significant potential to launch distributed denial-of-service (DDoS) attacks. Written in the Golang programming language, the botnet derives its name from a reference to the term "ootheca," which appears in…

Read MoreIntroducing Zergeca: A New Golang-Powered Botnet for High-Impact DDoS Attacks

T-Mobile Reaches $31.5 Million Settlement Regarding Data Breaches – The Business Journals

T-Mobile Reaches Settlement Over Data Breaches Amounting to $31.5 Million In a recent development, T-Mobile USA has agreed to a settlement of $31.5 million connected to allegations of multiple data breaches that compromised the personal information of millions of customers. The settlement aims to address concerns surrounding the effectiveness of…

Read MoreT-Mobile Reaches $31.5 Million Settlement Regarding Data Breaches – The Business Journals

Google Addresses Critical Chrome Vulnerability Under Active Exploitation

Google has announced a series of security updates to address a critical vulnerability in its Chrome browser, identified as CVE-2024-7971. This vulnerability involves a type confusion flaw affecting the V8 JavaScript and WebAssembly engine and has reportedly been actively exploited by malicious actors. According to the National Vulnerability Database (NVD),…

Read MoreGoogle Addresses Critical Chrome Vulnerability Under Active Exploitation

GootLoader Malware Remains Active, Unleashes Updated Versions for More Effective Attacks

The GootLoader malware continues to pose significant risks as cybercriminals exploit it to deploy new payloads onto infected systems. This malware has seen active use by threat actors aiming to target various organizations, particularly in legal and professional sectors, as reported by the cybersecurity firm Cybereason. Recent analysis from Cybereason…

Read MoreGootLoader Malware Remains Active, Unleashes Updated Versions for More Effective Attacks

Signs of Recovery: London NHS Emerges Post-June Cyber Attack – DataBreaches.Net

Cyber Attack on NHS Service Provider: Recovery Underway After Major Ransomware Incident In a significant cybersecurity incident, the NHS service provider Synnovis fell victim to a ransomware attack orchestrated by the cybercriminal group Qilin on June 3. This attack has had far-reaching consequences on hospital operations across South London. As…

Read MoreSigns of Recovery: London NHS Emerges Post-June Cyber Attack – DataBreaches.Net

Hardcoded Credential Vulnerability Discovered in SolarWinds Web Help Desk

SolarWinds has announced critical patches for a newly discovered security vulnerability in its Web Help Desk (WHD) application. This flaw potentially allows remote, unauthorized users to access and modify data within vulnerable systems. According to SolarWinds, the vulnerability—designated as CVE-2024-28987—is categorized with a CVSS score of 9.1, classifying it as…

Read MoreHardcoded Credential Vulnerability Discovered in SolarWinds Web Help Desk

OVHcloud Faces Unprecedented 840 Million PPS DDoS Attack Leveraging MikroTik Routers

Record DDoS Attack Mitigated by OVHcloud In April 2024, French cloud service provider OVHcloud successfully mitigated an unprecedented distributed denial-of-service (DDoS) attack, reportedly peaking at a staggering 840 million packets per second (Mpps). This incident surpasses the previous record of 809 million Mpps, which was inflicted on a significant European…

Read MoreOVHcloud Faces Unprecedented 840 Million PPS DDoS Attack Leveraging MikroTik Routers