Kodak Confirms Data Breach as ShinyHunters Claims 2.2 Million Customer Records Stolen
Iconic imaging company Kodak has confirmed a data breach following claims by the notorious ShinyHunters hacking group that it stole over 2.2 million customer records containing personally identifiable...
Novo Nordisk Confirms Cyberattack: Patient Clinical Trial Data and Proprietary AI Models Stolen
Novo Nordisk has confirmed a cyberattack that exposed pseudonymized patient data from clinical trials. The threat group Dragonfly claims to have also stolen a 16.7 GB proprietary AI...
Dark Web Brokers Flood Forums With Recycled Breach Data Disguised as Fresh Corporate Leaks
Cybercriminals operating in Chinese-language dark web ecosystems are repackaging data from old breaches and selling it as fresh corporate intelligence, according to new research from Group-IB. The scam...
Grafana Labs Security Breach: Hackers Steal GitHub Token, Download Private Codebase, and Demand Ransom
A threat actor infiltrated Grafana Labs GitHub environment using a stolen privileged token to download the company private codebase. The attacker then attempted to extort Grafana with a...
Foxconn Confirms Cyberattack: Nitrogen Ransomware Gang Claims 8TB Stolen From North American Plants
Foxconn has confirmed a ransomware attack on its North American factories after the Nitrogen gang claimed to have stolen 8TB of data including technical drawings and network topology...
ShinyHunters Breaches Canvas LMS: Student Data from 9,000 Schools Exposed in Extortion Campaign
ShinyHunters has breached Instructure's Canvas LMS by exploiting the Free-For-Teacher account program, exposing data from an estimated 285 million users across 9,000 schools including Harvard, MIT, and Oxford....
Vercel Data Breach: ShinyHunters Exploit OAuth Supply Chain Attack to Steal Customer Credentials for $2M Sale
Vercel has confirmed a security breach originating through a compromised third-party AI tool (Context.ai), where attackers used stolen OAuth tokens to access internal systems and enumerate customer environment...
Trellix Source Code Breach: Hackers Gain Unauthorized Access to Internal Repository of Major XDR Vendor
Cybersecurity vendor Trellix has confirmed unauthorized access to part of its internal source code repository. The company says no evidence of product tampering or active exploitation has been...