DataBreaches.net reports: On January 23, 2025, the Bian Lian ransomware gang added the Medical Associates of Brevard (“MAB”) to its dark web leak site. At the time, they listed the types of data they claimed to have acquired, but did not provide any screenshots or proof of claims. Months later, BianLian went offline. What happened […]
The Record reports: The multinational carmaker Stellantis said unauthorized access to a third-party provider’s platform resulted in the potential exposure of customer data. In a statement released on Sunday, the company said the incident affected a provider supporting the North American branch’s customer service. “The personal information involved was limited to contact information,” Stellantis said. “Importantly, the […]
We wouldn’t call this a “glitch.” It appears to have been a ransomware attack on Collins Aerospace, although there has been no announcement as to who is responsible for the attack and whether any ransom demand has been received. Reuters reports: Some of Europe’s biggest airports battled to restore normal operations on Sunday after hackers […]
AnewZ reports: Passengers were left stranded at Europe’s major airports after a cyberattack targeted check-in and boarding systems on Friday, airport authorities say. Brussels airport London Heathrow and Berlin’s Brandenburg airport were among those affected with manual check-in and boarding causing delays after the incident. “There was a cyberattack on Friday night 19 September against […]
The Daily Times reports: The personal data of nearly 300,000 people who applied for Hajj has been leaked to the dark web, the Pakistan Telecommunication Authority (PTA) chairman revealed on Friday. Major General (R) Hafeez ur Rehman made the disclosure during a Senate IT Committee meeting, chaired by Senator Palwasha Khan. The PTA chief said […]
Autocar reports: The UK government has officially stepped in to help JLR as it looks to restart car production following a cyber attack that has severely affected the firm’s operations. On Tuesday, the Jaguar and Land Rover company said it would attempt to restart production lines from 24 September. No cars have been built globally since the 1 September hack. A […]
Bleeping Computer reports: The ShinyHunters extortion group claims to have stolen over 1.5 billion Salesforce records from 760 companies using compromised Salesloft Drift OAuth tokens. For the past year, the threat actors have been targeting Salesforce customers in data theft attacks using social engineering and malicious OAuth applications to breach Salesforce instances and download data. The stolen data […]
The Record reports: Shares in a British automaker supplier plummeted 55% Wednesday as it warned that a cyberattack on Jaguar Land Rover (JLR) was impacting its business, adding to concerns that the incident is sending a “shockwave” through the country’s industrial sector, according to a senior politician. Shares in Autins, a company providing specialist insulation components for Jaguar […]
The Korea Herald reports that 2.97 million users, almost one third of the payment card’s 9.6 million customers, had their payment card data breached in an attack on Lotte Card’s online payments server: The stolen information comprises that which was generated and collected during online transactions processed through the compromised server between July 22 and […]
Self-Replicating Worm Hits 180+ Software Packages
KrebsOnSecurity.com reports: At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and publishes those secrets on GitHub, experts warn. The malware, which briefly infected multiple code packages from the security vendor CrowdStrike, steals and publishes even more credentials every time an infected package is installed. […]