Stolen UpdraftCentral Keys Let Attackers Backdoor WordPress Sites
A breach at TeamUpdraft exposed remote-management keys that attackers used to push malicious plugins to connected WordPress sites. Administrators should update UpdraftPlus, remove old connection keys and hunt...
Compromised eMudhra CA Keys Force Emergency Trust-Store Updates
Eight eMudhra intermediate certificate-authority keys were shown to be compromised, triggering emergency blocks across browsers and software ecosystems. Browsers update quickly, but applications with bundled or stale trust...
SBI Breach Claim Puts KYC Records of Hundreds of Thousands of Customers in Question
A threat actor calling themselves Siriusim claims to be selling a dataset of roughly 375,000 rows of State Bank of India customer records and thousands of supporting documents...
OpenCode Breach Puts Third-Party AI API Keys at Risk
OpenCode says unauthorized access to a legacy system may have exposed third-party AI provider keys belonging to 1.4% of Console users. Affected customers should rotate credentials, audit usage...
Burger King Japan App Breach Exposes 11.18 Million Member Records
Burger King Japan says an intruder accessed the system behind its official app, exposing roughly 11.18 million member records. Payment card data was not held in the affected...
How a ‘123456’ Password Exposed Nearly 9 Million Danes’ National ID Records
A trusted Danish IT vendor reportedly protected administrator access to the national CPR population register with the password "123456," letting an attacker harvest records tied to roughly 8.8...
Weak Admin Password Tied to Exposure of 8.8 Million Danish Identity Records
A breach involving authorized access to Denmark’s CPR register reportedly exposed records linked to about 8.8 million identification numbers. Reporting connects the incident to weak credentials at IT...
AT&T’s $177 Million Settlement Resolves Claims From Two Massive Data Breaches
A federal judge has approved AT&T’s $177 million settlement covering two 2024 breaches that exposed personal information and communications metadata. The agreement closes the litigation without an admission...