Strivehawk

📊🔐 aura breach exposes data of 900k marketing contacts An unauthorized access incident led to the exposure of names and email addresses from nearly 900,000 records. learn more bleepingcomputer.com #databreach #privacy #security #infosec

📲🕵️ new perseus android malware steals secrets from notes The Perseus malware scans user notes to extract sensitive data like passwords and recovery phrases. learn more bleepingcomputer.com #android #malware #datatheft #security

🛡️📱 cisa warns orgs to secure intune after wiper attack abuse Following the Stryker incident, organizations are urged to harden Microsoft Intune configurations against misuse. learn more bleepingcomputer.com #cisa #intune #endpointsecurity #cybersecurity

📡🔓 critical unifi flaw could lead to account takeover A max severity vulnerability in Ubiquiti UniFi may allow attackers to hijack user accounts if left unpatched. learn more bleepingcomputer.com #ubiquiti #unifi #vulnerability #cybersecurity

🔐⚠️ password resets remain a major privilege escalation risk Weak reset flows are becoming a prime target for attackers to escalate access often easier than breaking logins. learn more bleepingcomputer.com #identitysecurity #privilegeescalation #cyberrisk #infosec

🇷🇺🎯 russian hackers exploit zimbra flaw in govt attacks APT28 is leveraging a Zimbra vulnerability to target government entities in cyberespionage campaigns. learn more bleepingcomputer.com #apt28 #zimbra #cyberespionage #security #infosec

🚨fbi seizes handala leak sites after destructive cyberattack Authorities took down websites used by the Handala group following a wiper attack that impacted thousands of devices at a healthcare company. more bleepingcomputer.com #fbi #cybercrime #hacktivism #security #infosec

🧬📦 glassworm supply-chain attack hits 400+ dev repositories Malware campaign targets GitHub, npm, and VSCode ecosystems to infect developers. learn more bleepingcomputer.com #supplychain #github #npm #devsecurity #infosec

🍎🩹 apple rolls out background security updates for webkit flaw Critical WebKit vulnerability patched without requiring a full OS update. learn more bleepingcomputer.com #apple #webkit #patching #infosec

🍎🕵️‍♂️ darksword ios exploit used in infostealer attacks New iOS exploit kit targets sensitive data, including cryptocurrency wallet information. learn more bleepingcomputer.com #apple #iossecurity #infostealer #cybersecurity

💸🛒 refund fraud becomes scalable cybercrime model Fraudsters industrialize return and chargeback abuse using tutorials and underground marketplaces. learn more bleepingcomputer.com #fraud #cybercrime #ecommerce #infosec

📉💳 marquis breach exposes data of 672k people A ransomware attack disrupted dozens of U.S. banks and led to massive personal data theft. learn more bleepingcomputer.com #databreach #ransomware #fintech #infosec

🧨🛜 ransomware gang exploits cisco zero-day since january Interlock group abused a critical RCE flaw in Cisco Secure Firewall Management Center in active attacks. learn more bleepingcomputer.com #cisco #zeroday #ransomware #cybersecurity

🖥️🔓 connectwise patches screenconnect hijacking flaw A cryptographic verification bug could allow attackers to gain unauthorized access and escalate privileges. learn more bleepingcomputer.com #connectwise #rce #vulnerability #infosec

🏑🧨 england hockey probes ransomware data breach The sports governing body is investigating after the AiLock gang listed it on its ransomware leak site. learn more bleepingcomputer.com #ransomware #databreach #cybercrime #infosec

🛒🔐 canadian retailer loblaw warns of possible breach Customers were logged out of accounts as a precaution following a suspected security incident. learn more bleepingcomputer.com #databreach #retailsecurity #privacy #infosec

🌐🩹 google patches two chrome zero-days in emergency update High-severity vulnerabilities actively exploited in attacks have been fixed in the latest Chrome security release. learn more bleepingcomputer.com #google #chrome #zeroday #patchmanagement

☕📉 starbucks reports employee data breach Hackers accessed Starbucks Partner Central accounts, exposing data belonging to hundreds of employees. learn more bleepingcomputer.com #databreach #privacy #cybersecurity #infosec

🎣🛜 fake enterprise vpn sites steal corporate credentials Storm-2561 spreads fake VPN clients posing as Ivanti, Cisco, and Fortinet software to harvest login credentials. learn more bleepingcomputer.com #phishing #vpn #credentialtheft #cybersecurity

🌐🚔 45,000 ip addresses sinkholed in cybercrime crackdown Operation Synergia III disrupted global cybercrime infrastructure by seizing servers and redirecting thousands of malicious IPs. learn more bleepingcomputer.com #cybercrime #lawenforcement #botnet #infosec