A supply chain attack via a third-party supplier exposed LNER customer data, including personal contact details and travel history, but…
Read More »supply chain attack
A phishing campaign compromised at least 18 widely used JavaScript npm packages, injecting malicious code to hijack cryptocurrency transactions and…
Read More »
A data breach at Wealthsimple compromised sensitive client information due to a supply chain attack, but no account passwords or…
Read More »
Tenable and Qualys experienced unauthorized access to their Salesforce data due to stolen OAuth tokens from the Salesloft Drift application,…
Read More »
A data breach at Salesloft originated from a March intrusion into its GitHub account, allowing attackers to steal authentication tokens…
Read More »
Cloudflare experienced a supply chain attack via its Salesforce customer support system, exposing API tokens and sensitive customer data, including…
Read More »
A malicious npm package named "nodejs-smtp" impersonates the legitimate nodemailer library, compromising cryptocurrency wallets by altering transaction details to redirect…
Read More »
A zero-day vulnerability in AI coding tools (e.g., Cursor, Windsurf) exposed developers to machine hijacking via compromised extensions, with attackers…
Read More »
Glasgow City Council experienced major service disruptions due to a cybersecurity breach affecting a key supplier, prompting system isolation and…
Read More »
CoinMarketCap suffered a cyberattack where hackers used deceptive Web3 popups to steal funds from users' crypto wallets by exploiting a…
Read More »