The Breach News

New Linux Malware Framework Enables Attackers to Install Rootkits on Targeted Systems

The emergence of a sophisticated new Linux malware named the “Lightning Framework” has raised significant alarms within the cybersecurity community. Researchers from Intezer have classified this threat as a “Swiss Army Knife” due to its modular design and ability to implement rootkits, suggesting a high level of complexity in its…

Read MoreNew Linux Malware Framework Enables Attackers to Install Rootkits on Targeted Systems

Vendors Veradigm and ApolloMD Share Insights on Health Data Breaches

3rd Party Risk Management, Data Breach Notification, Data Security Recent Breaches Uncover Cyber Risks to Patient Records Associated with Third-Party Vendors Marianne Kolbasuk McGee (HealthInfoSec) • September 24, 2025 Healthcare providers frequently face IT interruptions and the cleanup of data breaches involving third-party vendors. (Image: Getty Images) The healthcare sector…

Read MoreVendors Veradigm and ApolloMD Share Insights on Health Data Breaches

Up to 2 Million Cisco Devices Impacted by Actively Exploited Zero-Day Vulnerability

As many as 2 million Cisco devices are reportedly at risk due to an actively exploited zero-day vulnerability that can allow attackers to remotely crash these systems or execute arbitrary code. This vulnerability, identified as CVE-2025-20352, affects all supported versions of Cisco’s IOS and IOS XE, the operating systems that…

Read MoreUp to 2 Million Cisco Devices Impacted by Actively Exploited Zero-Day Vulnerability

Meta Penalized €251 Million Over 2018 Data Breach Affecting 29 Million Accounts

Meta Platforms Fined €251 Million for 2018 Data Breach Meta Platforms, the parent company overseeing Facebook, Instagram, WhatsApp, and Threads, has faced a significant financial penalty of €251 million (approximately $263 million) for a data breach that occurred in 2018. This breach affected millions of users, particularly within the European…

Read MoreMeta Penalized €251 Million Over 2018 Data Breach Affecting 29 Million Accounts

Over 880,000 Government-Linked Phone Numbers Compromised in Data Breach – MSN

In a significant data breach, over 880,000 phone numbers associated with government accounts have been compromised, raising serious concerns in the realm of cybersecurity. This incident highlights vulnerabilities in the data protection mechanisms employed to safeguard sensitive information related to government operations. The breach appears to have targeted government entities,…

Read MoreOver 880,000 Government-Linked Phone Numbers Compromised in Data Breach – MSN

Microsoft Addresses Actively Exploited Privilege Escalation Vulnerability in Power Pages

Microsoft Addresses Critical Vulnerabilities in Bing and Power Pages Microsoft has issued security updates to resolve two critical vulnerabilities affecting its Bing search engine and Power Pages platform, one of which is currently being actively exploited. The release highlights ongoing concerns in the cybersecurity landscape as attackers increasingly target widely…

Read MoreMicrosoft Addresses Actively Exploited Privilege Escalation Vulnerability in Power Pages

Ukrainian Radio Stations Compromised to Spread False Information About Zelenskyy’s Health

On Thursday, TAVR Media, a Ukrainian radio operator, suffered a significant cyberattack that led to the dissemination of false information regarding President Volodymyr Zelenskyy’s health. The attack falsely reported that the President was critically ill and unable to perform his duties, which were supposedly being handled by the Chairman of…

Read MoreUkrainian Radio Stations Compromised to Spread False Information About Zelenskyy’s Health

Unico Acquires OwnID to Enhance Passkey Authentication Offerings

Identity & Access Management, Multi-factor & Risk-based Authentication, Security Operations Unico Acquires OwnID to Enhance Passkey Authentication Integrated with Facial Recognition Michael Novinson (MichaelNovinson) • September 24, 2025 Marcelo Zanelatto, Head of Mergers and Acquisitions, Unico (Image: Unico) Unico has acquired OwnID, a startup specializing in passwordless authentication, led by…

Read MoreUnico Acquires OwnID to Enhance Passkey Authentication Offerings

Brazilian Hacker Indicted for Extorting $3.2M in Bitcoin Following Breach of 300,000 Accounts

In a significant cybersecurity incident, a Brazilian national has been charged in the United States for allegedly threatening to publicly disclose data obtained through hacking. The individual, identified as Junior Barros De Oliveira, 29, from Curitiba, Brazil, faces multiple counts related to extortion and threatening communications, according to an unsealed…

Read MoreBrazilian Hacker Indicted for Extorting $3.2M in Bitcoin Following Breach of 300,000 Accounts