FortiBleed Turns Stolen Fortinet Credentials Into Persistent Network Access
U.S. authorities warn FortiBleed remains active against exposed FortiGate firewalls and SSL VPNs, using stolen credentials for persistent network access.
Data Breaches
More news
Page 3 / 9 · 78 articles
ASOS Confirms Unauthorized Access After Attackers Abuse Its App Notification Channel
ASOS confirmed unauthorized access to third-party messaging platforms after a rogue app alert, with possible exposure of names and contact details.
Two Nikkei Email Accounts Breached Across Google Workspace and Microsoft 365
Nikkei disclosed breaches of two employee emails on Google Workspace and Microsoft 365, exposing 1,646 contacts and sending 9,000 phishing emails.
Vasilek Backdoor Gave Hackers Prolonged Access to a Russian Healthcare Network
Solar links Belarusian Cyber Partisans to a 2024-2025 intrusion in Russian healthcare using Vasilek Telegram backdoor to access medical data.
Reported Detention of “Rey” Adds Pressure to the ShinyHunters Network
Saif al-Din Khader 'Rey' reportedly detained in Jordan aiding FBI ShinyHunters probe amid unverified FBI hack claims and leak-site disruption.
Stolen Credentials Open DTU Identity Platform to Large-Scale Data Download
Attacker used stolen credentials to breach DTU's DTUBasen identity system, potentially exposing data of 200,000 people including CPR numbers.
Microsoft’s X Account Was Used to Boost a Clippy-Branded Crypto Token
Microsoft confirmed its X account was hijacked to promote $Clippy crypto token. It removed posts, secured account, disavowed endorsement.
Public GitHub Code Still Contained 543,699 Working Credentials
Truffle Security found 543,699 active credentials in public GitHub repositories, highlighting gaps in secret detection, coverage, and revocation.
Former Airmen Imprisoned After Hijacking Corporate Payments Through Email Fraud
Two ex-Airmen sentenced to 111 and 78 months for phishing and BEC scheme targeting 15 firms, diverting $1.68M and $720K payments.