Thought Leadership
Hacker Forum
A new ransomware group has published nearly 2,800 records containing the names and email addresses of Disney employees on a hacker forum.
Trail via Signal Chats
According to KrebsOnSecurity, a consultant who represented victims in extortion cases allegedly co-operated the hacker group’s leak site.
Three-Day Deadline
Attackers are threatening H&M with a leak. Data samples point to warehouse management software GreyOrange. H&M currently sees no indications of a compromise.
Security Incident
Using stolen credentials, attackers breached Meta’s GitHub repositories and stole source code as well as data belonging to 1,500 employees.
Data Leak
An unsecured database linked to an Indian AI company aggregated passwords and banking details from previous leaks, including lists related to Amazon and PayPal.
Spam Sent to 50 Communities
Attackers breached the Discord security bot through an old server, stealing IP addresses and location data and sending spam.
Ransomware
The ransomware group Everest claims to have exfiltrated data belonging to 2,862 employees, training materials for pilots, and Boeing source code. Proof has not yet been provided.
Pixel 10 Also Targeted
Japanese company Ikotas executed code on a Galaxy S26 at Pwn2Own Ireland. The Pixel 10 is also reportedly affected.
No Sensitive Information Affected
The ransomware group SafePay claims to have attacked T-Systems, the IT subsidiary of Deutsche Telekom, and has set a two-day deadline. According to a company spokesperson, only a small test system was affected and no sensitive data was exfiltrated.
Phone Numbers and Passenger Names
A hacker is allegedly offering data from Airbnb, Uber, and PayPal. According to Cybernews, it originates from an SMS service provider.