Hackers breached the MyDr medical platform, potentially compromising sensitive data belonging to nearly 19 million Polish patients. The platform is used by thousands of clinics and medical practices, dramatically increasing the scale and impact of the breach. The stolen information reportedly includes highly sensitive medical data, with politicians and other public figures among those affected. […]
Apparel giant Levi Strauss & Co. recently disclosed a cybersecurity incident after attackers used targeted social engineering tactics to compromise three employees’ company computers. This initial breach allowed the attackers to gain access to internal files and successfully exfiltrate specific corporate information. Thanks to a rapid incident response, Levi’s managed to contain the intrusion effectively. […]
An international operation led by Europol dismantled LeakBase, a major online forum trading stolen databases and login credentials. Active since 2021, the platform had 142,000+ users and served as a key hub for cybercriminals buying and selling leaked data. On 3–4 March, coordinated actions across multiple countries led to arrests, house searches, and about 100 […]
Approximately 400 stolen GenAI account credentials are listed daily on dark web platforms, posing a significant threat to corporate security. Credentials for platforms such as GPT, Quillbot, Notion, HuggingFace, and Replit are highly sought after by cybercriminals. The majority of these credentials are harvested through infostealer malware that infects users’ browsers. Although the LLM Paradise […]
2023 Data Breach Investigations Report of which the dataset currentlycontains 953,894 incidents, of which 254,968 are confirmed breaches shows that the use of stolen credentials forms 44.7% of the cases. But what else can we learn? 74% of all breaches include the human element, with people being involved either via Error,Privilege Misuse, Use of stolen […]
German newspaper Handelsbatt received 100GB of data from informants at Tesla. The data contains information on thousands of complaints regarding Tesla’s Autopilot self-driving feature. The collection of data includes 23,000 internal files from 2015 to 2022. Complaints detail issues with self-acceleration, brake function, involuntary emergency braking, and phantom stops.More than 1,000 crash reports are included […]
Toyota has exposed the location data of 2.3 million customers for over a decade. The information was accessible due to a security breach in their sales module. The data included customers’ names, email addresses, and vehicle identification numbers (VINs). The breach occurred in Japan, but the data of customers from several countries, including the US […]
Terravision, a company that arranges bus transport to and from European airports, has leaked the data of more than two million customers. This concerns names, telephone numbers, e-mail addresses, salted password hashes and in some cases dates of birth and country of origin. Details about the data breach are not yet known. Via ID Control […]
Almost half of all Dutch company websites are vulnerable to attacks by cyber criminals due to vulnerabilities in software, configurations and web services. The result is often data theft or extortion through ransomware. “Entrepreneurs are insufficiently aware of the risks,” says cybersecurity specialist ID Control based on three studies of web shops, government websites and […]
The Bundesamt für Sicherheit in der Informationstechnik (BSI), part of the German Ministry of Internal Affairs, has investigated web shops which show that they are often unsafe. Seven out of ten researched webshop platforms use vulnerable JavaScript libraries. In addition, almost all solutions had inadequate password policies and nearly half of the products use end-of-life […]