Car-sharing giant Zoomcar has disclosed a data breach that impacted approximately 8.4 million people after a threat actor contacted the company claiming to have accessed its data.
A new set of 16 billion login credentials is not an intentional public leak or data breach. It was accidentally exposed to the internet via improperly secured Elasticsearch and object storage instances for a short period, but long enough for security researchers to hit upon it.
Google Threat Intelligence Group is now reporting "multiple intrusions" at US-based insurance firms by Scattered Spider, which in some cases has caused outages and business disruptions.
The Reddit suit claims that Anthropic began regularly scraping the site in December 2021. After being asked to stop, Anthropic issued a public statement in July 2024 indicating that it had stopped all crawling of Reddit for AI training data.
Apparently numerous of these companies have a website search feature that will list what is already printed within a URL linking from the ad to the page. In this case, that means that the search bar is pre-filled with fake support numbers when the target arrives at the page.
The DOJ, the FBI, and the U.S. Secret Service have collaborated with private partners to execute the largest seizure of crypto assets related to pig butchering investment scams.
A massive data leak stemming from a cyber attack on a third-party subcontractor has affected Swiss banks UBS and Pictet, as well as over a dozen other multinational companies, potentially including auditing firm KPMG.
A new CISA-NSA joint report follows many calls by both members of the cybersecurity industry and government agencies for a transition to memory-safe languages like Rust, Ruby, Java and C# due to their inherent minimization of memory-related classes of vulnerabilities.
U.S. Insurance giant American Family Life Assurance Company (Aflac) suffered a cyber attack that exposed extensive sensitive information, including SSNs and health information.
European automotive giant Scania has confirmed a data breach that leaked insurance claim documents after a threat actor contacted employees and demanded a ransom.
