Franco

TIMES CAR BREACH EXPOSES 6.6 MILLION ACCOUNTS, INCLUDING 1.6 MILLION IDENTITY DOCUMENTS

Leave a Comment / Latest Threat Feed / /

COMPANY CONFIRMS LARGE-SCALE DATA THEFT Times Mobility has confirmed that an attacker stole personal information associated with approximately 6.6 million current, former and prospective Times Car accounts. In a September 29, 2026 update, the Japanese car-sharing operator disclosed that roughly 1.6 million affected accounts included copies of identity documents. The exposed files may contain driver’s-license

TIMES CAR BREACH EXPOSES 6.6 MILLION ACCOUNTS, INCLUDING 1.6 MILLION IDENTITY DOCUMENTS Read More »

Latest Threat Feed

FBI ASSUMES ALL EMPLOYEES MAY BE AFFECTED BY SHINYHUNTERS DATA BREACH

Leave a Comment / Home Main / /

The FBI is treating every employee as potentially affected by a breach linked to the ShinyHunters hacking group, according to an internal memo reported by Reuters. The full scope of the breach remains under investigation, so that precaution does not mean the FBI has confirmed that every employee’s records were stolen. Reuters reviewed leaked records

FBI ASSUMES ALL EMPLOYEES MAY BE AFFECTED BY SHINYHUNTERS DATA BREACH Read More »

Home Main

SHINYHUNTERS BYPASSES WAF RULES IN RENEWED ORACLE PEOPLESOFT ATTACKS

Leave a Comment / Latest News / /

ShinyHunters has resumed widespread attacks against Oracle PeopleSoft servers, using a simple change to web requests to get past some web application firewall (WAF) rules. Mandiant and Google Threat Intelligence Group say the campaign targets systems that remain vulnerable to CVE-2026-35273, a critical PeopleTools flaw Oracle patched in June. How the PeopleSoft WAF bypass works

SHINYHUNTERS BYPASSES WAF RULES IN RENEWED ORACLE PEOPLESOFT ATTACKS Read More »

Latest News

CISA FLAGS RANSOMWARE USE OF CRITICAL JETBRAINS TEAMCITY VULNERABILITY

Leave a Comment / Latest Threat Feed / /

A critical vulnerability in JetBrains TeamCity On-Premises is now known to be used in ransomware campaigns, according to an update to CISA’s Known Exploited Vulnerabilities catalog. The flaw, tracked as CVE-2026-63077, gives organizations running unpatched TeamCity servers an urgent reason to update and investigate possible intrusion. An attacker who can reach a vulnerable TeamCity server

CISA FLAGS RANSOMWARE USE OF CRITICAL JETBRAINS TEAMCITY VULNERABILITY Read More »

Latest Threat Feed

KITEWORKS URGES PRECAUTIONARY SERVER SHUTDOWN AFTER CYBERATTACK WARNING

Leave a Comment / Home Main / /

Kiteworks has advised customers to temporarily shut down their systems after receiving credible intelligence from federal authorities that a threat actor may attempt to target some Kiteworks systems. In a September 25 advisory, the secure file sharing company recommended a nine-hour precautionary shutdown window over the weekend, based on each customer’s local time zone. Which

KITEWORKS URGES PRECAUTIONARY SERVER SHUTDOWN AFTER CYBERATTACK WARNING Read More »

Home Main

SALESBLEED FLAWS LET SALESFORCE AI AGENTS LEAK CRM DATA AND SEND PHISHING MESSAGES

Leave a Comment / Latest Threat Feed / /

Security researchers have disclosed three vulnerabilities in Salesforce Agentforce that could have allowed attackers to steal sensitive CRM data and distribute phishing messages through trusted enterprise AI agents. Collectively named SalesBleed, the flaws were discovered by Zenity Labs. Researchers found that an attacker could place malicious instructions inside a Salesforce Web-to-Lead submission. When an employee

SALESBLEED FLAWS LET SALESFORCE AI AGENTS LEAK CRM DATA AND SEND PHISHING MESSAGES Read More »

Latest Threat Feed

CHECK POINT ZERO-DAY EXPLOITED IN ATTACKS AGAINST FIREWALLS AND MANAGEMENT SERVERS

Leave a Comment / Latest News / /

Check Point has released emergency security fixes for two critical vulnerabilities actively exploited against its firewall and management products. The flaws, tracked as CVE-2026-85102 and CVE-2026-93616, both carry CVSS severity scores of 9.8 and can be exploited before authentication. CVE-2026-85102 affects certificate handling during VPN negotiations. Successful exploitation could allow an unauthenticated attacker to execute

CHECK POINT ZERO-DAY EXPLOITED IN ATTACKS AGAINST FIREWALLS AND MANAGEMENT SERVERS Read More »

Latest News

ASTRANA HEALTH DATA BREACH EXPOSES CONFIDENTIAL INFORMATION AFTER SOCIAL ENGINEERING ATTACK

Leave a Comment / Latest Threat Feed / /

Astrana Health has disclosed a material cybersecurity incident involving unauthorized access to private and confidential information stored on company servers. According to a September 23 filing with the U.S. Securities and Exchange Commission, attackers impersonated Astrana Health personnel and spoofed the company’s main telephone number while contacting employees. The social engineering campaign was designed to

ASTRANA HEALTH DATA BREACH EXPOSES CONFIDENTIAL INFORMATION AFTER SOCIAL ENGINEERING ATTACK Read More »

Latest Threat Feed

SOLARWINDS PATCHES CRITICAL UNAUTHENTICATED RCE FLAWS IN OBSERVABILITY PLATFORM

Leave a Comment / Latest Threat Feed / /

SolarWinds has released an urgent security update addressing two remote code execution vulnerabilities in its Observability Self-Hosted platform. The flaws could allow unauthenticated attackers to execute malicious code on affected systems under specific configurations. The vulnerabilities are tracked as CVE-2026-28324 and CVE-2026-28325. SolarWinds fixed both issues in Observability Self-Hosted version 2026.2.3, released on September 22,

SOLARWINDS PATCHES CRITICAL UNAUTHENTICATED RCE FLAWS IN OBSERVABILITY PLATFORM Read More »

Latest Threat Feed