ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “compromise”

352 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllMalware 5868Ransomware 5522Vulnerability 5037Data breach 3848Exploit / PoC 2523Threat actor 2339Phishing & fraud 1661Policy & legal 1078Industry 852AI safety & security 192Research 179Advisory 161AI tools & infra 128Tools 68
SeverityAllcritical 11172high 10421medium 5353low 2119info 485

Revolut Data Leak May Trace Back to Compromised Italian Government Accounts

Attackers using a compromised Italian government PEC account impersonated law enforcement to obtain data on ~680 Revolut customers.

Revolut confirmed its systems were not breached; fraudulent data requests came from a compromised PEC mailbox tied to the Prefecture of Reggio Calabria on the pec.interno.it domain. Per the Financial Times, roughly 680 customers had identity documents, addresses, banking information, verification selfies and cryptocurrency transaction histories exposed. Researcher Korra of Duel described a 'spray and pray' operation using hundreds of crypto transaction IDs and fraudulent European Investigation Orders. Threat actor IAmNotAVillain claims six months of access and 147 GB exfiltrated from Italian law-enforcement systems, though this remains unverified.

Security Affairs · 18h agoData breach in the wild

Personal Info Possibly Compromised at Japan’s Digital Agency

Japan's Digital Agency says unauthorized access to a network system may have compromised personal data of about 246,000 government employees.

Japan's Digital Agency reported that approximately 246,000 sets of personal information, including names and email addresses of government employees, may have been compromised through unauthorized access to a network system operated by the agency. The agency said no secondary damage, such as misuse of the potentially breached data, has been identified so far.

DataBreaches.net · 5d agoData breach

ReliaQuest Rejects Compromise Claims After ShinyHunters Incident

ReliaQuest detailed a ShinyHunters-linked social engineering attack and denied reports that the threat actor successfully compromised its systems.

Cybersecurity services firm ReliaQuest disclosed a social engineering attack attributed to activity linked to the ShinyHunters group. The company denied reports that the threat actor successfully compromised its systems, stating the incident did not result in a breach.

Infosecurity Magazine · 22d agoData breach in the wild