3+ day, 13+ hour ago   (750+ words) Researchers found 220.8 million passenger and crew records exposed through default credentials in a Vietnam-linked database containing sensitive travel data. Changing default credentials should be a no-brainer, yet researchers still found a route into a database holding more than 220 million passenger…...

5+ day, 18+ hour ago   (411+ words) IDScan faces four proposed class actions after a dark-web service claimed to hold more than 153 million U.S. and Canadian driver’s license records. At least four proposed class-action lawsuits have been filed against New Orleans-based IDScan.net in the U.S. District Court…...

1+ week, 1+ day ago   (416+ words) A Lenovo ID verification flaw let attackers compromise 5,000 Dropbox accounts without passwords. Learn what happened and how users can stay protected. Dropbox confirmed this week that attackers compromised roughly 5,000 user accounts during a 17-day intrusion between Aug. 4 and Aug. 21, 2026, with…...

2+ week, 3+ day ago   (499+ words) ASOS says attackers used credentials stolen elsewhere to access customer accounts, exposing personal data belonging to an estimated 138,828 people. ASOS says attackers used login credentials obtained outside the company to access customer accounts, exposing personal information belonging to an estimated…...

3+ week, 1+ day ago   (604+ words) Alation confirms unauthorized activity in one of its systems, leaving key questions about customer exposure, stolen data, and the attack’s scope. Alation has confirmed unauthorized activity inside its systems, turning an earlier service disruption into a much bigger security question....

3+ week, 2+ day ago   (338+ words) Federal agencies warn that Medusa ransomware has hit more than 500 victims and can exploit newly disclosed vulnerabilities within 24 hours of release. According to the joint advisory, Medusa has affected organizations in the medical, education, legal, insurance, technology, and manufacturing industries....

3+ week, 5+ day ago   (531+ words) Malicious LiteLLM releases may have exposed credentials from more than 2,500 organizations and hundreds of thousands of CI/CD pipelines. A March supply-chain attack involving malicious versions of the LiteLLM Python package may have exposed credentials belonging to more than 2,500 organizations…...

3+ week, 5+ day ago   (458+ words) Philips and GE are investigating Clop data theft claims potentially linked to a PTC vulnerability. Philips and General Electric (GE) are investigating incidents after the Clop ransomware group claimed to have stolen data from both companies. The companies are among…...

3+ week, 5+ day ago   (468+ words) SafePal says a security flaw exposed personal and order information for nearly 40,000 customers, increasing the risk of targeted phishing attacks. Nearly 40,000 SafePal customers had their personal and order information exposed after a security flaw allowed unauthorized access to the cryptocurrency…...

4+ week, 1+ day ago   (380+ words) Shell is investigating a potential security incident after Clop claimed it stole 89 GB of data. “We are aware of a potential incident. We are working with our security teams and relevant experts to investigate,” a Shell spokesperson told BleepingComputer. BleepingComputer…...