Data Breaches
FBI Arrests Another Suspect Linked to ShinyHunters Jobs Portal Breach
FBI Director Kash Patel announced on October 9 that authorities have detained another individual suspected of conspiring with the ShinyHunters extortion group.
Data Breaches
Data Breaches
Password Rotation Checklist: When to Change and When to Stop
Mandatory password rotation often increases risk by encouraging users to choose weaker, predictable variations of their previous credentials.
Data Breaches
Detecting Credential Dumps in Enterprise Environments
Credential dumps often bypass perimeter defenses by exploiting legitimate authentication protocols, leaving traces only in internal log aggregation and behavioral anomalies.
Data Breaches
Implement Full Disk Encryption: A Step-by-Step Technical Guide
Full disk encryption protects data at rest but leaves it vulnerable while in memory, creating a specific attack window that many organizations overlook during implementation.
Data Breaches
Digital Forensics: Real Benefits and Hard Limitations
Forensic analysis reveals attacker movement but often fails to identify the initial entry point due to log retention limits.
Data Breaches
User Access Provisioning for Small Teams: Secure Identity at Scale
Unmanaged user access creates hidden data exposure that grows faster than revenue, requiring automated identity controls rather than manual oversight.
Data Breaches
Ransomware Affiliate Steals Profits; Exposed Server Leaks Hacker Tools
A ransomware affiliate kept illicit gains while another attacker left a server exposed with intrusion tools, highlighting security failures on both sides.
Data Breaches
Users report light leak issues on Amazon’s new base-model Kindle e-readers
Owners of the latest flush-bezel Kindles say a light leak problem is visible in dark mode, undermining the device's sleek design.
Data Breaches
Senator Questions FCC Authorization After Trump Mobile Data Breach
Lawmakers are asking why Trump Mobile lacks certain FCC filings following a recent security incident involving customer data.
Data Breaches
Senator Questions FCC Authorization for Trump Mobile Following Data Breach
Lawmakers are asking why Trump Mobile lacks required FCC filings after a recent hack exposed subscriber data.
Data Breaches
Leader of 764 Extremist Network Pleads Guilty, Faces Up to 30 Years in Prison
Prasan Nepal, who ran the violent extremist group for nearly four years, pleaded guilty to charges involving the exploitation of minors.
Data Breaches
Dutch and Israeli researchers find thousands of exposed wind and solar systems in Europe
A joint study by Modat and NCSC-NL reveals over 8,500 internet-facing renewable energy systems across 35 countries that lack proper access controls.
Data Breaches
Empire Market Co-Founder Sentenced to 40 Years; Tensorlake SDK Compromised
SecurityWeek reports a major sentencing for the Empire Marketplace, alongside news of a compromised npm package and exposed GPU telemetry data.
Data Breaches
FBI Director Kash Patel Announces Arrest of ShinyHunters Member
The FBI has detained another member of the ShinyHunters hacking group, signaling ongoing efforts to dismantle the organization responsible for recent data breaches.
Data Breaches
iRhythm Notifies States of Summer Data Breach Impacting Hundreds of Thousands
Wearable cardiac sensor firm iRhythm has begun notifying state authorities about a data breach that occurred this summer and affected hundreds of thousands of individuals.
Data Breaches
Cloudflare Launches On-Demand CPU and Memory Profiling for Workers
Cloudflare has released on-demand profiling tools for Workers and Durable Objects, enabling developers to generate flamegraphs in production to identify performance bottlenecks.
Data Breaches
ShinyHunters Claims Leak of 435,963 Neogen Records After Extortion Bid
The threat group ShinyHunters published corporate contact data from Neogen after a pay-or-leak attempt failed in August 2026.
Data Breaches
ShinyHunters publishes 373k CyrusOne records after failed extortion bid
Extortion group ShinyHunters released corporate contact data and support tickets from data centre operator CyrusOne after the company did not pay a ransom.
Data Breaches
423,947 Medela Accounts Exposed in Data Breach
The breach dates to September 7, 2026 and was added to Have I Been Pwned on September 30, 2026. Exposed data includes email addresses, employers, job titles.