The Breach News

Toys ‘R’ Us Canada Customer Data Breach: Information Exposed Online – SecurityWeek

Toys ‘R’ Us Canada Customer Information Leaked Online In a significant cybersecurity incident, customer information from Toys ‘R’ Us Canada has reportedly been exposed online. The breach raises critical concerns regarding the safety of sensitive consumer data in an era where digital transactions are commonplace. The leaked information, which may…

Read MoreToys ‘R’ Us Canada Customer Data Breach: Information Exposed Online – SecurityWeek

Apple Issues Critical Updates to Address Actively Exploited Zero-Day Vulnerabilities

Apple Addresses Zero-Day Vulnerabilities in Major Security Update In a swift response to emerging threats, Apple has deployed critical security updates across its operating systems, including iOS, iPadOS, macOS, visionOS, and Safari. These updates are aimed at mitigating two zero-day vulnerabilities that have reportedly been exploited by malicious actors in…

Read MoreApple Issues Critical Updates to Address Actively Exploited Zero-Day Vulnerabilities

US Imposes Sanctions on NSO Group and Three Others Over Spyware Sales

On Wednesday, the U.S. Commerce Department announced the addition of four companies, including two Israeli spyware firms—NSO Group and Candiru—to its list of foreign entities implicated in “malicious cyber activities.” This designation follows findings that both companies provided spyware to foreign governments, which in turn have targeted officials, journalists, business…

Read MoreUS Imposes Sanctions on NSO Group and Three Others Over Spyware Sales

The Lasting Impact of the AWS Outage

A significant outage affecting Amazon Web Services (AWS) commenced early Monday morning, severely disrupting various sectors including communication, finance, healthcare, education, and government platforms globally. The incident, originating from AWS’s critical US-EAST-1 region in northern Virginia, highlighted the internet’s intricate and delicate interdependencies. The outage began around 3 am ET…

Read MoreThe Lasting Impact of the AWS Outage

Pompompurin Revealed: Notorious BreachForums Leader Captured in New York

In a significant law enforcement operation, a 21-year-old man from New York has been arrested for allegedly operating the notorious hacking forum BreachForums under the alias “Pompompurin.” The arrest, reported first by Bloomberg Law, follows intensive investigations by federal authorities at a residence in Peekskill, where evidence was confiscated. According…

Read MorePompompurin Revealed: Notorious BreachForums Leader Captured in New York

Breach Roundup: The Qilin Hack Hoax

Cybercrime, Fraud Management & Cybercrime, Incident & Breach Response Envoy Air Confirms Data Compromise Following Clop Extortion Campaign Anviksha More (AnvikshaMore) • October 23, 2025 Image: Shutterstock/ISMG Every week, Information Security Media Group compiles notable cybersecurity incidents from around the globe. Highlights include Qilin’s unfounded claims against a Spanish tax…

Read MoreBreach Roundup: The Qilin Hack Hoax

Prosper Marketplace Data Breach Grows: 17.6 Million Users Affected by Database Intrusion

Prosper Marketplace Suffers Major Data Breach Affecting 17.6 Million Users In a major incident reflecting one of the year’s largest fintech breaches, Prosper Marketplace, the San Francisco-based peer-to-peer lending platform, has confirmed a significant data compromise impacting approximately 17.6 million individuals. Recent disclosures, initially reported by TechRadar and Tom’s Guide,…

Read MoreProsper Marketplace Data Breach Grows: 17.6 Million Users Affected by Database Intrusion

Long-Standing Security Vulnerabilities Discovered in Ubuntu’s Needrestart Package

Recent disclosures have revealed multiple significant security vulnerabilities within the needrestart package, which has been a default component of Ubuntu Server since version 21.04. These flaws pose a threat by enabling local attackers to escalate their privileges to root without the need for user interaction. The Qualys Threat Research Unit…

Read MoreLong-Standing Security Vulnerabilities Discovered in Ubuntu’s Needrestart Package

U.S. Pledges $10 Million for Tips on DarkSide Ransomware Group

On October 5, 2023, the U.S. government announced a substantial $10 million reward for information leading to the identification or location of key figures within the DarkSide ransomware group and its successors. This move underscores the government’s ongoing commitment to addressing the threats posed by these dangerous cybercriminals. Additionally, the…

Read MoreU.S. Pledges $10 Million for Tips on DarkSide Ransomware Group