Search: “database”

3 stories in the last 3d

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 17 Vulnerability 10 Advisory 9 Threat actor 8 Data breach 7 Tools 6 Industry 5 Malware 5 AI industry 4 Research 4 Policy & legal 3 AI safety & security 3 AI research 1

SeverityAll critical 9 high 25 medium 21 low 4 info 23

UCQ Leak, Israeli GlobalProtect Access, Digital Nirvana Dump, 32baar, and Ghorer Bazar

SOCRadar flags underground posts selling an alleged Universidad Cuauhtémoc database, Israeli GlobalProtect VPN access, and Digital Nirvana data dumps.

SOCRadar's Dark Web Team identified several new underground posts, including an alleged database leak from Universidad Cuauhtémoc (UCQ), a Mexican university. Additional listings include access to an Israeli organization's Palo Alto GlobalProtect VPN, a data dump attributed to Digital Nirvana, and marketplace posts tied to 32baar and Ghorer Bazar. The leaks are alleged and unverified at this stage.

SOCRadarSep 14, 09:44 UTC · 2d agoData breach

Nonprofit that tracks meteors taken down by "critical blow" from a cyberattack

The International Meteor Organization says a cyberattack dealt a critical blow to its infrastructure, taking much of its site offline for weeks.

The International Meteor Organization (IMO), a nonprofit coordinating amateur and professional meteor observations since 1988, reported a cyberattack that took much of its website offline. The organization expects several weeks of partial downtime while transitioning to new infrastructure and is prioritizing fireball reporting through alternate channels. The attack vector and whether any data was accessed remain undisclosed; the IMO's observation databases and WGN journal are widely used in the field.

Ars Technica · SecuritySep 16, 21:08 UTC · 6h agoData breach in the wild 2 sources

Forgery of C2PA on a Pixel 10

Researcher forged a Google Pixel 10 C2PA content credential with genuine signatures, showing root-level attackers can fake photo provenance.

A Hacker Factor blog post demonstrates an AI-generated 'unicorn glitter milk' news photo carrying a valid, cryptographically signed C2PA manifest traceable to Google's Pixel camera certificate chain, passing validation in Adobe Inspect and the CAI Verify tool with a verified timestamp. The author, working with UMBC's PASAWG working group, reported to Google and C2PA in November 2025 that root access on a Pixel device could sign arbitrary images as camera captures; after 90 days without resolution, details were published. The finding undermines C2PA Assurance Level 2 claims made for Pixel 10 Content Credentials.

Lobsters · securitySep 16, 13:24 UTC · 14h agoResearch