A common web server misconfiguration has left tens of thousands of Git repositories publicly accessible, exposing keys to cloud services, payment systems, and other critical resources along with them. Researchers at Intruder scanned 3.5...
An enterprising researcher successfully compelled Apple Find My to operate within an environment completely unsupported by the corporation. A 22-year-old security specialist, operating under the pseudonym Zerotistic, cleverly registered a Linux machine within Apple’s...
Israeli cryptocurrency company Bits of Gold has warned customers of a personal data leak following an incident within a third-party support system. Attackers may have obtained names, national ID numbers, email addresses, phone numbers,...
A Massive Dark Web Data Sale Threat actors recently listed 3.64 million corporate records for sale on the dark web. A seller known as “TheHatman” claims these databases originate from Microsoft Azure and Entra...
France’s tax authority has begun warning hundreds of thousands of citizens after its systems were compromised twice, granting attackers access to the tax records of individuals and companies alike. 350,000 Citizens Notified, 678,000 Total...
The personal data of nearly 14,000 Trezor hardware wallet customers was stolen by exploiting a critical zero-day vulnerability in Metabase, the business intelligence platform used by Trezor’s logistics partner ShipMonk. The incident drew immediate...
Far-right internet communities have begun transforming doxxing into a nearly automated process. Users of the anonymous imageboard Soyjak Party engineered several new applications. These instruments actively hunt for data leaks. Furthermore, they cross-reference information...
Analog Devices, a leading semiconductor manufacturer for industrial, automotive, and telecommunications sectors, recently disclosed a corporate security incident. Consequently, unauthorized actors gained access to internal systems and stole company files. Unauthorized Access Discovered in...
The veracity of a Virtual Private Network’s (VPN) promotional promises can only be authenticated through its internal telemetry. Consequently, rigorous analysis of the recent SplitVPN data leak corroborated a foundational suspicion. The service provider...
Even a prayer app proved unable to keep others’ secrets. Click To Pray, the official app of the Pope’s Worldwide Prayer Network, exposed the names, email addresses, and other data of hundreds of thousands...
A link intended for a colleague can unexpectedly transform into a public showcase for the entire internet. Consequently, hundreds of private user dialogues from Claude AI recently materialized within Google search results. Search Engines...
South Korea’s Ministry of Foreign Affairs has disclosed a leak of personal data belonging to staff at headquarters, overseas missions, and other users of the National Diplomatic Academy’s training system. Unknown attackers exploited a...
