The Breach News

AllaKore RAT Malware Exploiting Mexican Companies with Financial Fraud Tactics

Mexican financial institutions are currently being targeted by a sophisticated spear-phishing campaign that deploys a modified variant of the open-source remote access trojan known as AllaKore RAT. This attack has been attributed to an unidentified financially motivated actor based in Latin America, with the campaign having been operational since at…

Read MoreAllaKore RAT Malware Exploiting Mexican Companies with Financial Fraud Tactics

The U.S. Will Not Impose Sanctions on China for Salt Typhoon Cyberattacks

A newly emerged AI image creation startup has come under fire for leaving its database exposed, resulting in the unauthorized access of over a million user-generated images and videos. Alarmingly, the majority of the leaked content includes explicit material, with some instances involving minors. This breach raises significant concerns regarding…

Read MoreThe U.S. Will Not Impose Sanctions on China for Salt Typhoon Cyberattacks

500 Million Guest Records from Marriott Compromised in Starwood Data Breach

Marriott International Discloses Major Data Breach Affecting 500 Million Guests Marriott International, the largest hotel chain globally, has reported a significant cybersecurity breach involving its subsidiary, Starwood Hotels. Unknown hackers accessed a guest reservation database, compromising the personal information of approximately 500 million guests. This incident underscores the increasing sophistication…

Read More500 Million Guest Records from Marriott Compromised in Starwood Data Breach

Drug R&D Company Confronts Expenses and Legal Challenges Over Alleged Qilin Attack

Data Breach Notification, Data Security, Healthcare Inotiv Updates SEC on Ongoing Evaluation of Cyberattack Impact Marianne Kolbasuk McGee (HealthInfoSec) • December 10, 2025 Inotiv Inc. recently informed federal regulators and investors of its ongoing assessment of the financial and operational ramifications following an August cyberattack. (Image: Inotiv) Inotiv, a contract…

Read MoreDrug R&D Company Confronts Expenses and Legal Challenges Over Alleged Qilin Attack

Emergence of New Ransomware Gangs: Albabat, Kasseika, and Kuiper Leverage Rust and Go

Cybersecurity researchers have discovered a new variant of the Phobos ransomware family named Faust. This iteration was documented by Fortinet FortiGuard Labs, which detailed its dissemination method involving a Microsoft Excel document (.XLAM) that contains a VBA script capable of executing malicious actions. The attack initiates when the victim opens…

Read MoreEmergence of New Ransomware Gangs: Albabat, Kasseika, and Kuiper Leverage Rust and Go

Nation-State Hackers Exposed for Concealing Espionage Operations Within Crypto Miners

Recent research indicates that a nation-state actor known for prolonged cyber espionage activities has transitioned to using coin mining techniques. This strategic shift, attributed to the hacking group Bismuth, is aimed at evading detection while ensuring persistence within the systems of their targets. The Microsoft 365 Defender Threat Intelligence Team…

Read MoreNation-State Hackers Exposed for Concealing Espionage Operations Within Crypto Miners

Two Men Associated with China’s Salt Typhoon Hacker Group Likely Received Training at a Cisco Academy

Recent investigations into the possible links between two individuals associated with recent cyber incidents have revealed noteworthy findings. Cary, a researcher, examined two databases of Chinese names and collaborated with Yi Fuxian, a professor of Chinese demography at the University of Wisconsin–Madison. He found that the name Qiu Daibing (邱代兵)…

Read MoreTwo Men Associated with China’s Salt Typhoon Hacker Group Likely Received Training at a Cisco Academy