Tag: data-breach

Dark Web Claims 375TB Lockheed Martin Breach, strongSwan VPN Flaw Exposed, HIBP Adds Passkeys

Threat actors claim to have breached Lockheed Martin with 375TB of data for sale on dark web markets for $600M. Meanwhile, a 15-year-old vulnerability in strongSwan VPN software allows denial-of-service attacks.

Mar 31, 2026Hackread, Troy Hunt

data-breachdark-webvpn-vulnerability

🇺🇸Lockheed Martin

highIndustry & Policy

F5 BIG-IP RCE Under Active Exploitation, Telegram Disputes Critical Flaw Claims

A previously disclosed F5 BIG-IP denial-of-service vulnerability has been reclassified as remote code execution and is now under active exploitation. Meanwhile, Telegram disputes claims of a critical no-click vulnerability despite a 9.8 CVSS score assignment.

Mar 31, 2026Dark Reading, Infosecurity Magazine

f5big-ipremote-code-execution

🇦🇪Telegram

highMalware & Threats

European Commission Breached, FBI Director's Email Compromised, WordPress Plugin Flaw Affects 500K Sites

High-profile breaches hit the European Commission and FBI Director Patel's personal email, while a Smart Slider WordPress plugin vulnerability threatens 500,000 sites with arbitrary file access.

Mar 30, 2026BleepingComputer, Malwarebytes Labs

data-breachwordpressvulnerability

🏴ShinyHunters

highNation-State & APT

Nation-State Roundup: Iran-linked Handala Targets FBI Director, ShinyHunters Breaches EU Commission, Apple Warns of Active Web Exploits

Iran-linked threat actor Handala reportedly compromised FBI Director Kash Patel's systems while ShinyHunters claims to have breached the European Commission's mail servers. Apple is simultaneously warning users of active web-based exploits targeting unpatched iOS devices.

Mar 29, 2026Security Affairs

iran-apthandalashinyhunters

🏴ShinyHunters

🇺🇸Apple

criticalMalware & Threats

Critical Infrastructure Under Fire: Router Flaws, Supply Chain Attacks, and Music Streaming Fraud Plague March

A critical TP-Link router authentication bypass vulnerability threatens network infrastructure while TeamPCP compromised the popular LiteLLM Python package in a supply chain attack. Meanwhile, courts sentenced a Russian botnet operator used in BitPaymer ransomware campaigns, and novel AI-powered fraud schemes target music streaming platforms and hiring processes.

Mar 25, 2026BleepingComputer, Graham Cluley, Malwarebytes Labs, SecureList (Kaspersky)

router-vulnerabilitiessupply-chain-attacksauthentication-bypass

🏴ShinyHunters

🇨🇳TP-Link

mediumData Breaches & Incidents

Security Roundup: FBI Warns of Iranian Fake App Campaign, OVHcloud Denies Major Breach Claims

The FBI warned about Iran's Handala Hack Group distributing malicious fake WhatsApp and Telegram apps to Windows users. Meanwhile, OVHcloud denied claims of a massive 590TB data breach affecting millions of sites.

Mar 25, 2026Hackread

iran-aptfake-appsovhcloud

🇺🇸Meta Platforms🇦🇪Telegram

highMalware & Threats

Weekly Threat Roundup: Government Breaches, Geopolitical Wiper Attacks, and Mass Data Exposures

This week saw significant breaches at the Dutch Ministry of Finance and Mazda, while hackers claimed to steal 6.8 million Crunchyroll user records. Meanwhile, the TeamPCP group deployed Iran-targeted wipers through compromised Kubernetes clusters.

Mar 24, 2026BleepingComputer, Cisco Talos, Checkpoint Research, Malwarebytes Labs

data-breachgovernment-securitymalware

🏴Play

🇺🇸Google🇺🇸Apple

highData Breaches & Incidents

LAPSUS$ Claims AstraZeneca Breach While Zoom Phishing Campaign Spreads

The LAPSUS$ ransomware group claims to have breached pharmaceutical giant AstraZeneca, allegedly offering source code, credentials, and employee data for sale. Separately, Sublime Security researchers have identified a new phishing campaign using realistic JavaScript-based Zoom meeting invites to distribute malware on Windows systems.

Mar 21, 2026Hackread

lapsusastrazenecazoom-phishing

🏴Lapsus$

highNation-State & APT

Magento Under Siege: PolyShell Zero-Day Fuels Mass Defacements, AI Fraud Tactics Emerge

Security researchers disclosed the PolyShell vulnerability affecting Magento and Adobe Commerce platforms, enabling unauthenticated file uploads. Concurrent mass exploitation campaigns have compromised over 7,500 Magento sites since February, while threat actors increasingly leverage AI agents for sophisticated retail fraud operations.

Mar 21, 2026Security Affairs, Palo Alto Unit 42

magentoadobe-commercepolyshell

highMalware & Threats

Critical Infrastructure Under Siege: Lazarus Strikes, FBI Raids, and Zero-Days in Production

This week saw coordinated law enforcement action against massive DDoS botnets, while state-sponsored groups like Lazarus and APT28 launched destructive attacks on medical technology and government infrastructure. Multiple zero-day vulnerabilities in enterprise systems add to the threat landscape.

Mar 20, 2026BleepingComputer, Graham Cluley, Cisco Talos, Malwarebytes Labs

botnet-disruptionstate-sponsoredransomware

🇰🇵Lazarus🇰🇵BlueNoroff🇷🇺APT28

🇺🇸Google🇺🇸Amazon🇺🇸Apple

criticalMalware & Threats

Critical SharePoint Exploits, Mobile Malware, and Data Breaches Hit Major Organizations

Critical SharePoint and Zimbra vulnerabilities are being actively exploited in the wild, prompting CISA warnings to federal agencies. Meanwhile, new Android and iOS malware campaigns target personal data and cryptocurrency wallets.

Mar 19, 2026BleepingComputer, Graham Cluley, Cisco Talos, SentinelOne Labs, Malwarebytes Labs, Bitdefender Labs

sharepointandroid-malwareios-exploits

🇺🇸Apple

highData Breaches & Incidents

HIPAA Breach Tracker: 301 Million Healthcare Records Exposed in 2025

A comprehensive analysis shows that 301 million healthcare records were compromised in HIPAA-reportable breaches throughout 2025. The scale suggests endemic security issues across healthcare organizations handling protected health information.

Mar 14, 2026Hacker News (filtered)

hipaahealthcaredata-breach