-
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency’s initial response provide important lessons that all security teams should absorb.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cyberbit is closing its Israeli operations and laying off local staff as the former Elbit Systems spin-off grows mainly in the US after buying RangeForce.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
LastPass has confirmed it was affected by the Klue supply chain incident, saying an unauthorised actor used stolen…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Around 3 million Texas licence holders face a data breach after hackers targeted a third-party vendor, exposing driver’s licences and passport numbers.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Icarus extortion group used a legacy Klue Battlecards credential to bypass security and steal bulk Salesforce records from affected companies.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Nintendo America employee records were exposed via TinyPulse after Shadowbyt3 claimed theft of HR files, tax forms, bank data, and staff survey responses.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Researchers say FortiBleed used stolen and tested credentials to access exposed Fortinet firewalls, putting major organizations and public agencies at risk now.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Handala hacking group claims it has targeted California Water Service, leaking 5GB of customer database and GPS network files in its latest infrastructure attack.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google says ShinyHunters exploited Oracle PeopleSoft zero-day to steal data from 100+ organisations, with universities making up most victims.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters hackers leak 40GB of University of Nottingham personal and financial data, allegedly impacting 450,000 students and staff records.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
