Cyber Breaches

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database that they allege contains the personal information of 500,000 sneaker buyers in the United States. According to the seller’s post, the data is offered in an Excel sheet format for $1,000, payable ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to have leaked order data that they allege was stolen from KuaiShou, a major Chinese social video platform. According to the seller’s post, the data leak is the result of an incident where a live broadcast ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a database that they allege contains the employee data of Bank of America, one of the world’s largest financial institutions. According to the seller’s post, the database contains a rich set of sensitive employee ...

Dark Web News Analysis A threat actor on a known cybercrime forum is making an extremely serious claim to be selling a zero-day exploit that they allege targets Cloudflare’s Content Delivery Network (CDN). According to the seller’s post, the exploit enables a chain of high-impact attacks, including Host Header Injection ...

Dark Web News Analysis Google has officially confirmed that a threat actor successfully created a fraudulent account in its Law Enforcement Request System (LERS), a sensitive portal used by police and government agencies to submit official data requests. The company stated that after identifying the fraudulent account, it was disabled ...

Dark Web News Analysis Automotive manufacturer Jaguar Land Rover (JLR) announced it is extending its production shutdown for another week, until September 24, 2025, as it continues to grapple with the aftermath of a devastating cyberattack. The incident, first disclosed on September 2, has severely disrupted the company’s global operations ...

Supply Chain Attack Analysis A large-scale, self-propagating supply chain attack, nicknamed ‘Shai-Hulud,’ is actively compromising packages on the npm JavaScript registry. Security researchers report that the campaign has already hit at least 187 packages, beginning with the compromise of the popular @ctrl/tinycolor package, which has over 2 million weekly downloads, ...

Dark Web News Analysis TransUnion, one of the three major US credit bureaus, has reported a data breach that affects more than 4 million people nationwide, including over 69,000 residents of Wisconsin. According to the company, the breach occurred on July 28 and resulted in unauthorized access to highly sensitive ...

Dark Web News Analysis A threat actor on a known cybercrime forum is claiming to sell a massive database that they allege was stolen from Fundline Finance Corporation, a loan and credit provider in the Philippines. According to the seller’s post, the database is extensive, containing over 1.1 million phone ...