The Breach News

Low-Key ‘Dark Angels’ Achieve Record Ransom Earnings – Krebs on Security

A ransomware group known as Dark Angels has garnered attention following reports of a record-breaking $75 million ransom payment by a Fortune 50 company. Security analysts confirm that Dark Angels has been active since 2021, although they often evade media scrutiny by operating independently and maintaining a low profile, targeting…

Read MoreLow-Key ‘Dark Angels’ Achieve Record Ransom Earnings – Krebs on Security

FCA Acknowledges Accidental Release of Confidential Personal Data on Its Website

The Financial Conduct Authority (FCA), the regulatory body for the financial services sector in the UK, has confirmed a significant data breach involving the unauthorized release of personal information belonging to 1,600 individuals who lodged complaints against it. The sensitive data, which included names, addresses, and phone numbers, was mistakenly…

Read MoreFCA Acknowledges Accidental Release of Confidential Personal Data on Its Website

Kurdish Websites Targeted in Watering Hole Attack Distributing Malicious APKs and Spyware

In a recent cybersecurity incident, approximately 25 websites associated with the Kurdish minority have fallen victim to a sophisticated watering hole attack designed to collect sensitive information over an extended period of time, reportedly lasting more than 18 months. French cybersecurity firm Sekoia disclosed the details of the campaign, labeled…

Read MoreKurdish Websites Targeted in Watering Hole Attack Distributing Malicious APKs and Spyware

Urgent: Major Apache HugeGraph Vulnerability Exploited – Apply Patch Immediately

A recently uncovered security vulnerability in Apache HugeGraph-Server is currently being exploited by cybercriminals, posing a significant risk to users. This critical flaw has the potential to enable remote code execution (RCE) attacks, allowing attackers to gain control of affected systems. The vulnerability, identified as CVE-2024-27348 with a CVSS score…

Read MoreUrgent: Major Apache HugeGraph Vulnerability Exploited – Apply Patch Immediately

Finland Accuses APT31, a Chinese Hacking Group, of Cyber Attack on Parliament

The Finnish Police, known as Poliisi, has officially implicated a state-sponsored actor from China, identified as APT31, in the cyber attack aimed at the Finnish Parliament that took place between late 2020 and early 2021. This development follows a lengthy and complex investigation involving in-depth analysis of the sophisticated criminal…

Read MoreFinland Accuses APT31, a Chinese Hacking Group, of Cyber Attack on Parliament

NationalPublicData.com Breach Exposes Sensitive Information Nationwide – Krebs on Security

On July 21, 2024, a significant data breach was reported involving NationalPublicData.com, a consumer data broker based in Florida known for collecting information for background checks. An alarming 4 terabytes of data were released on Breachforums, an underground platform frequented by cybercriminals. This incident has shaken the trust of many…

Read MoreNationalPublicData.com Breach Exposes Sensitive Information Nationwide – Krebs on Security

Virgin Media Data Breach Exposes Personal Information of 900,000 Customers

Virgin Media has publicly acknowledged a significant data breach that has compromised the personal information of approximately 900,000 customers. The company reported that this breach resulted from a misconfiguration of one of its marketing databases, which inadvertently allowed unauthorized access to sensitive customer data. The affected database, as confirmed by…

Read MoreVirgin Media Data Breach Exposes Personal Information of 900,000 Customers