Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

Description: Researchers have determined that Coinbase was the primary target in a recent GitHub Actions cascading supply chain attack that compromised secrets in hundreds of repositories. [...]
Source: BleepingComputer
March 21st, 2025 (3 months ago)
Description: Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from the company's Oracle Cloud federated SSO login servers [...]
Source: BleepingComputer
March 21st, 2025 (3 months ago)
Description: Federal prosecutors said Matthew Weiss, a former assistant football coach at the University of Michigan, learned hacking skills to breach online databases, primarily targeting "female college athletes."
Source: The Record
March 20th, 2025 (3 months ago)
Description: A data breach at the spyware operation SpyX has exposed nearly 2 million user accounts, including thousands of Apple customers, revealing personal information such as email addresses, IP addresses, and even plaintext iCloud credentials. The breach, which dates back to June 2024 but has only now come to light, underscores the ongoing risks associated with … The post SpyX Spyware Breach Exposes Thousands of Apple iCloud Passwords appeared first on CyberInsider.
Source: CyberInsider
March 20th, 2025 (3 months ago)
Description: In June 2024, spyware maker SpyX suffered a data breach that exposed almost 2M unique email addresses. The breach also exposed IP addresses, countries of residence, device information and 6-digit PINs in the password field. Further, a collection of iCloud credentials likely used to monitor targets directly via the cloud were also in the breach and contained the target's email address and plain text Apple password.
Source: HaveIBeenPwnedLatestBreaches
March 19th, 2025 (3 months ago)
Description: A malware operation dubbed 'DollyWay' has been underway since 2016, compromising over 20,000 WordPress sites globally to redirect users to malicious sites. [...]
Source: BleepingComputer
March 19th, 2025 (3 months ago)
Description: Alleged Data Breach of Silent Prospector
Source: DarkWebInformer
March 19th, 2025 (3 months ago)
Description: The Pennsylvania State Education Association (PSEA), the largest public-sector union in Pennsylvania, is notifying over half a million individuals that attackers stole their personal information in a July 2024 security breach. [...]
Source: BleepingComputer
March 19th, 2025 (3 months ago)
Description: Several major companies in the finance sector were impacted by the third-party breach, prompting them to notify thousands of customers of their compromised data.
Source: Dark Reading
March 19th, 2025 (3 months ago)
Description: More than 500,000 people were impacted by a cyberattack on the Pennsylvania State Education Association (PSEA) that took place in July 2024.
Source: The Record
March 19th, 2025 (3 months ago)