Search: “BleepingComputer”

648 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 340 Data breach 115 Malware 44 Vulnerability 39 Threat actor 34 Exploit / PoC 31 Phishing & fraud 21 Industry 9 Policy & legal 9 Research 4 Advisory 2 Tools 1 AI safety & security 1

SeverityAll critical 150 high 391 medium 61 low 46 info 2

220 million traveler records exposed in Vietnam-linked APIS leak

Vietnam-linked APIS Elasticsearch leak exposed 220 million passenger and crew records with passport numbers and flight details spanning 2017 to 2026.

Kinryū Labs discovered an exposed Elasticsearch cluster named 'pax-info' holding 210,318,069 passenger records and 10,465,631 crew records (roughly 107 GB across 29 indices) hosted in Viettel-assigned IP space in Hanoi. The database, apparently operated by a Vietnamese organization, was reachable via a chain of two misconfigurations: a cloud-based path that bypassed an HTTP 401 block and acceptance of default credentials. Exposed data included names, dates of birth, nationalities, passport numbers, and detailed flight information for travelers of many nationalities from January 2017 to April 2026. Access was remediated on June 8 after Kinryū Labs notified Vietnamese authorities, airlines, and CERTs, with Singapore Airlines' security team helping coordinate the response; it remains unknown whether any data was copied by malicious actors.

BleepingComputerSep 8, 07:35 UTC · 8d agoData breach1

Garmin allegedly paid for a decryptor for WastedLocker ransomware

Security AffairsAug 2, 13:14 UTC · Aug 2, 2020Ransomware

Maze ransomware gang leaked Canon USA's stolen files

Security AffairsAug 14, 08:05 UTC · Aug 14, 2020Ransomware

ShinyHunters hackers claim breach of Florida "DAVID" DMV database

ShinyHunters claims it breached Florida's DAVID DMV database via a password-reset flaw, stealing 200,000+ driver records including SSNs.

The ShinyHunters extortion gang added Florida FLHSMV to its leak site, claiming theft of over 200,000 driver records from the DAVID platform since September 3. As proof, the group published a screenshot of Jeffrey Epstein's DMV record showing address, Social Security number, driver's license ID, and registered vehicles. The gang says it compromised DMV employee and FBI agent accounts via a password-reset flaw and iterated through records by ID. Access has reportedly been lost and the flaw is being patched, but ShinyHunters expects to announce breaches of other states' DMV platforms.

BleepingComputerSep 8, 16:35 UTC · 7d agoData breach

Novel phishing technique uses Morse code to compose malicious URLs

Security AffairsFeb 8, 13:02 UTC · Feb 8, 2021Phishing & fraud

Alleged Master Keys for the Dharma Ransomware Leaked on BleepingComputer

Security AffairsDec 29, 09:16 UTC · Dec 29, 2017Ransomware

IDScan confirms breach tied to 153 million stolen driver’s licenses

IDScan confirmed hackers accessed customer data in its cloud, linked to over 153 million stolen driver's license scans offered on a dark-web platform.

Identity verification firm IDScan disclosed on September 4 that an unauthorized third party may have accessed or copied customer data in its IDScan.net cloud, including full names and government-issued ID numbers. The incident was linked to a dark-web 'Nexus' platform advertising over 153 million US and Canadian driver's license scans, plus 10 million ID cards, 3 million travel documents, and 579,000 medical cards. Multiple lawsuits have been filed, the FBI confirmed it is investigating, and IDScan is offering free credit monitoring to potentially affected individuals.

BleepingComputerupdated Sep 11, 09:59 UTC · 5d agofirst Sep 10, 14:55 UTC · 5d agoData breach 4 sources

Internet Archive was breached twice in a month

Security AffairsOct 21, 13:36 UTC · Oct 21, 2024Data breach

Avaddon ransomware gang shuts down their operations

Security AffairsJun 11, 22:12 UTC · Jun 11, 2021Ransomware

Ziggy ransomware admin announced it will refund victims who paid the ransom

Security AffairsMar 29, 08:33 UTC · Mar 29, 2021Ransomware

Canon publicly confirms August ransomware attack and data breach

Security AffairsNov 27, 15:14 UTC · Nov 27, 2020Ransomware

IPG Photonics high-performance laser developer hit with ransomware

Security AffairsSep 20, 09:13 UTC · Sep 20, 2020Ransomware

Technology giant Konica Minolta hit by ransomware attack

Security AffairsAug 17, 08:12 UTC · Aug 17, 2020Ransomware

Are Maze operators behind the attack on the IT services giant Cognizant?

Security AffairsApr 19, 08:56 UTC · Apr 19, 2020Ransomware

SNAKE Ransomware is targeting business networks

Security AffairsJan 8, 11:16 UTC · Jan 8, 2020Ransomware

GermanWiper, a data

Security AffairsAug 5, 15:44 UTC · Aug 5, 2019Malware

Hackers infect Linux servers with JungleSec Ransomware via IPMI Remote console

Security AffairsDec 27, 08:45 UTC · Dec 27, 2018Ransomware

Extortion Group FulcrumSec Claims 86GB Manchester Airports Data Theft

Extortion group FulcrumSec claims stealing 86GB of Manchester Airports Group data, exposing 8.7 million customers' personal and booking details.

Manchester Airports Group disclosed a breach on August 27 affecting parking, lounge, Fast Track and WiFi registrations at Manchester, London Stansted and East Midlands airports, impacting 8.7 million customers, most exposed only email addresses. FulcrumSec claims it stole about 86GB via airport-specific Iterable API credentials exposed in client-side JavaScript, including a 21.5GB Manchester export with booking histories, marketing data and nearly 200,000 records on upcoming 2026 travel. BleepingComputer verified sample records against a real traveler's Fast Track history; MAG declined to address the group's specific claims. Researchers warn the combination of UK postcodes, vehicle registrations and booking details could enable convincing targeted phishing, and MAG says no payment card or banking data was exposed.

Security AffairsAug 30, 17:23 UTC · 16d agoData breach in the wild