18 results
According to FTV News, Kang Chiao International School's Linkou campus confirmed to parents that its network systems were breached, and several parents and staff received threatening emails signed by the "Osiris ransomware group" .
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
ESET said on November 10 that it found a previously undocumented modular .
BleepingComputer reports that researcher Sean Bales publicly disclosed more than 30 N-able N-central vulnerabilities on Nov 8 without notifying the vendor and released proof-of-concept exploits in a GitHub repository called Able2Shell, the most critical chain using an unauthenticated XXE flaw to run commands on the server and create an admin account .
Vanderbilt University said on Nov 9 it is responding to an active cybersecurity incident that may impact university devices, systems and cloud-based services, and that its IT team is investigating and working to contain it .
Taiwan Fund for Children and Families (TFCF) announced on November 7 that starting November 6, donors reported receiving fraudulent messages impersonating the foundation and directing them to add a fake official LINE account .
The Record reports that pro-Russian hackers published the personal information of Italian Foreign Minister Antonio Tajani and other senior European officials on the dark web, offering cryptocurrency rewards for more details about them and their families .
The Japan Network Security Association (JNSA) announced on November 6 that its "Information Security Comprehension Test Service" suffered unauthorized third-party access, potentially exposing personal data for up to approximately 15,128 users .
QiAnXin XLab says it captured a suspicious script, cwpsrv_update.
Kyocera Communication Systems (KCCS) issued a second update on November 6 stating that a web server operated by its subsidiary MOTEX suffered unauthorized access, potentially exposing customer information including company names, personal names, email addresses, and phone numbers .
BleepingComputer reports that Russian cloud and hosting provider Beget said an attacker gained access to the management systems of its entire architecture on the night of Nov 1 and deployed malware that erased server data, after which Beget disconnected all servers .
Fortinet FortiGuard Labs published research on Nov 2 saying it has tracked, over several months, a campaign targeting South Asian organizations that uses PowerShell scripts and a custom remote access trojan it calls PapRAT for persistent access, attributing it to BITTER with high confidence .
According to iThome, e-commerce cloud ERP provider Mallbic stated that routine daily security checks on October 31 uncovered host anomalies and confirmed that unauthorized malicious commands had been executed on certain hosts; attackers entered through a brand website service portal, potentially affecting consumer and transaction data imported by merchants from other e-commerce platforms .
According to ITmedia, Iris Plaza announced on November 5 that following unauthorized access to an external cloud service used by the company, personal data of approximately 7.
PayCloud Holdings subsidiary Arara said its email delivery service Arara Message suffered unauthorized access; it first disclosed the incident on Oct 29, and its Nov 6 third report put the deduplicated number of taken (or possibly taken) email addresses at 81,329,467 .
GMO Internet said that on October 20 it confirmed a third party had planted a malicious program on some customer servers of its Onamae.
An alert from France's CERT-FR warned of widespread compromises affecting Danfoss AK-SM/AK-SC and Copeland/Dixell XWEB refrigeration remote controllers, with attackers primarily exploiting internet-exposed management interfaces .
Have I Been Pwned says ShinyHunters targeted Carhartt in an August "pay or leak" extortion campaign and later published data including about 12.