New Cleo zero-day RCE flaw exploited in data theft attacks

December 10, 2024 at 10:11AM Hackers are leveraging a zero-day vulnerability in Cleo managed file transfer software to infiltrate corporate networks and execute data theft attacks. This highlights the urgent need for organizations to address security weaknesses and implement protective measures against such threats. **Meeting Notes Takeaways:** 1. **Current Threat:** Hackers are exploiting a zero-day … Read more

Over 2,000 Palo Alto firewalls hacked using recently patched bugs

November 21, 2024 at 02:47PM Hackers have compromised thousands of Palo Alto Networks firewalls by exploiting two recently patched zero-day vulnerabilities. **Meeting Takeaways:** 1. **Security Breach**: A significant number of Palo Alto Networks firewalls have been compromised by hackers. 2. **Exploited Vulnerabilities**: The attacks are utilizing two recently patched zero-day vulnerabilities. 3. **Urgency for Action**: … Read more

Ford Says Leaked Data Comes From Supplier and Is Not Sensitive

November 20, 2024 at 04:52AM Ford’s investigation into alleged customer data theft by hackers revealed no breach of its systems. The claimed 44,000 records, primarily public dealer addresses, originated from a third-party supplier. Ford confirmed the issue is resolved, stating the information leaked was not sensitive and belonged to publicly available business addresses. ### Meeting … Read more

Ford ‘actively investigating’ after employee data allegedly parked on leak site

November 18, 2024 at 07:05PM Ford Motor Company is investigating allegations of a data breach where 44,000 customer records were reportedly stolen and shared online. Meanwhile, Maxar Space Systems reported a hacking incident compromising employee personal data, with access occurring for about a week before detection. Both companies are addressing the breaches. ### Meeting Takeaways … Read more

Free, France’s second largest ISP, confirms data breach after leak

October 28, 2024 at 01:49PM French ISP Free confirmed a data breach affecting 19.2 million customers, with personal information, including 5.11 million IBAN numbers, stolen. The company has filed a criminal complaint and notified authorities. Although no passwords or bank card details were accessed, impacted subscribers are being informed and advised to monitor for unusual … Read more

Cisco Confirms Security Incident After Hacker Offers to Sell Data

October 21, 2024 at 08:11AM Cisco confirmed a security incident involving stolen files from its DevHub environment after a hacker attempted to sell the information. The company is addressing the situation following the breach. **Meeting Notes Summary:** 1. **Incident Confirmation**: Cisco has acknowledged that a security breach occurred, resulting in the theft of certain files … Read more

Tech giant Nidec confirms data breach following ransomware attack

October 18, 2024 at 12:41PM Nidec Corporation announced that hackers from a recent ransomware attack stole and leaked data on the dark web. **Meeting Takeaways: Nidec Corporation Ransomware Attack Update** 1. **Incident Overview**: Nidec Corporation has confirmed that it suffered a ransomware attack earlier this year. 2. **Data Breach**: Hackers involved in the attack have … Read more

Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach

September 24, 2024 at 05:15AM A hacker known as IntelBroker announced the theft of data from Deloitte’s improperly secured server on the BreachForums cybercrime forum. The stolen data includes email addresses, intranet communications, and internal settings and is available for download to forum users. Deloitte has confirmed the breach but states that client data is … Read more

Construction firms breached in brute force attacks on accounting software

September 17, 2024 at 03:45PM Hackers are using brute-force tactics to obtain passwords for highly privileged accounts on Foundation accounting servers, common in the construction industry, in order to infiltrate corporate networks. Based on the meeting notes, it appears that hackers are using brute force methods to crack passwords for important accounts on Foundation accounting … Read more

Hackers mint 1.7 billion crypto tokens from PlayDapp gaming platform

February 14, 2024 at 11:15AM Hackers used a stolen private key to mint and steal over 1.79 billion PLA tokens from the PlayDapp ecosystem. The unauthorized wallet minted 200 million PLA tokens initially, and when PlayDapp offered a reward for returning the stolen contracts and assets, the hackers minted an additional 1.59 billion PLA tokens. … Read more