Leaked Control Panel Exposes 50,000 Stolen Credentials Harvested From WordPress Backups
Researchers at LevelBlue uncovered TIKTOUK, a credential-harvesting toolkit that scans for exposed WordPress backups, configuration files, and JavaScript secrets. A leaked operator panel contained roughly 50,000 real credentials...
South Korea Orders Financial-Sector Security Review After Wave of Data Breaches
South Korea has ordered a broad security review after banks and other financial firms disclosed breaches affecting customers, employees and contractors. Investigators are also examining signs of shared...
Pentagon Data Breach Exposes Personal Records of Nearly 3 Million Service Members and Veterans
A file-sharing flaw in the Defense Department's personnel records system went unnoticed for roughly nine months, exposing unencrypted Social Security numbers and other personal data for 2.76 million...
Pentagon Personnel System Breach Exposes Data on More Than 3 Million People
A breach of a Defense Manpower Data Center system exposed sensitive information tied to more than three million living and deceased people. The long intrusion window and the...
Bitget Freezes Withdrawals After $351.6 Million Hot-Wallet Breach
Bitget says unauthorized transfers exposed about $351.6 million in assets held in parts of its hot- and warm-wallet infrastructure. The exchange has paused withdrawals, while its cold wallets...
FBI Investigates Jobs Portal Intrusion as ShinyHunters Claims Sensitive Data Theft
The FBI is investigating unauthorized activity involving FBIjobs.gov after a defacement and expansive breach claims attributed to ShinyHunters. Some sample records reportedly matched real people, but the alleged...
Suspected Chinese-Speaking Hackers Chain Two WordPress Bugs to Loot a Government Database
A likely Chinese-speaking threat actor strung together two WordPress vulnerabilities to breach at least 49 organizations in 29 countries, with one Western government agency losing 18,566 records, including...
TanStack Supply-Chain Breach Exposes 170 Private CrowdSec Repositories
CrowdSec says attackers cloned roughly 170 private GitHub repositories after stealing an OAuth token through the TanStack npm supply-chain compromise. The incident remained hidden for months and highlights...