Wiz and Permiso have analyzed the AI agent social network and found serious security issues and threats. The post Security Analysis of Moltbook Agent Network: Bot-to-Bot Prompt Injection and Data Leaks appeared first on SecurityWeek .
ShinyHunters has claimed the theft of 14 million records from the US bakery-cafe chain’s systems. The post Hackers Leak 5.1 Million Panera Bread Records appeared first on SecurityWeek .
Other noteworthy stories that might have slipped under the radar: Apple updates platform security guide, LastPass detects new phishing wave, CISA withdraws from RSA Conference. The post In Other News: Paid for Being Jailed, Google’s $68M Settlement, CISA Chief’s ChatGPT Leak appeared first on SecurityWeek .
Crunchbase was targeted alongside SoundCloud and Betterment in a ShinyHunters campaign. The post Crunchbase Confirms Data Breach After Hacking Claims appeared first on SecurityWeek .
The WorldLeaks cybercrime group claims to have stolen information from the footwear and apparel giant’s systems. The post Nike Probing Potential Security Incident as Hackers Threaten to Leak Data appeared first on SecurityWeek .
Under Armour is investigating a recent data breach that purloined customers’ email addresses and other personal information. The post Under Armour Looking Into Data Breach Affecting Customers’ Email Addresses appeared first on SecurityWeek .
The incident impacted the personal information of CIRO member firms and their registered employees. The post 750,000 Impacted by Data Breach at Canadian Investment Watchdog appeared first on SecurityWeek .
Hackers stole patients’ personal, treatment, and health insurance information from the organization’s IT systems. The post Central Maine Healthcare Data Breach Impacts 145,000 Individuals appeared first on SecurityWeek .
Hackers stole the personal and reservation information of people with a Eurail pass and those who made a seat reservation with the company. The post Traveler Information Stolen in Eurail Data Breach appeared first on SecurityWeek .
A threat actor breached Betterment’s systems, accessed customer information, and sent scam crypto-related messages. The post Robo-Advisor Betterment Discloses Data Breach appeared first on SecurityWeek .
The law firm Fried Frank seems to be informing high-profile clients about a recent data security incident. The post After Goldman, JPMorgan Discloses Law Firm Data Breach appeared first on SecurityWeek .
Hackers stole complete customer information, including contact details, national identity numbers, and payment details. The post Spanish Energy Company Endesa Hacked appeared first on SecurityWeek .
Other noteworthy stories that might have slipped under the radar: Jaguar Land Rover sales crash, hundreds of gen-AI data policy violations, and Chinese cyberattacks against Taiwan intensified. The post In Other News: 8,000 Ransomware Attacks, China Hacked US Gov Emails, IDHS Breach Impacts 700k appeared first on SecurityWeek .
Gulshan Management Services has informed authorities about a recent data breach resulting from a ransomware attack. The post 377,000 Impacted by Data Breach at Texas Gas Station Firm appeared first on SecurityWeek .
The VPN company has conducted an investigation after a threat actor claimed to have hacked its systems. The post NordVPN Denies Breach After Hacker Leaks Data appeared first on SecurityWeek .
WhatsApp device fingerprinting can be useful in the delivery of sophisticated spyware, but impact is very limited without a zero-day. The post Researcher Spotlights WhatsApp Metadata Leak as Meta Begins Rolling Out Fixes appeared first on SecurityWeek .
The ShinyHunters threat actor claims to have breached US cybersecurity firm Resecurity, allegedly gaining internal access as evidenced by screenshots shared publicly. This breach involves unauthorized access to sensitive internal systems of a cybersecurity company, which could expose confidential client data and internal security methodologies. Although detailed technical specifics and affected versions are not disclosed, the breach is considered high severity due to the nature of the victim and potential data sensitivity. No known exploits or patches are currently available, and the discussion around this incident remains minimal. European organizations relying on Resecurity’s services or sharing threat intelligence with them could face indirect risks from this breach. Mitigation requires heightened vigilance around any data or communications linked to Resecurity, enhanced monitoring for suspicious activity, and verification of the integrity of shared threat intelligence. Countries with strong cybersecurity sectors and significant use of Resecurity’s services, such as the UK, Germany, and France, are more likely to be impacted. Given the breach involves unauthorized internal access without known exploitation details, the suggested severity is high due to potential confidentiality and integrity impacts and the strategic importance of the victim. Defenders should prioritize incident response readiness and scrutinize any data originating from Resecurity until further details emerge.
A critical security threat has emerged involving over 10,000 Fortinet firewalls that are vulnerable to an actively exploited two-factor authentication (2FA) bypass. This vulnerability allows attackers to circumvent the additional security layer provided by 2FA, potentially gaining unauthorized access to firewall management interfaces. The exploitation of this flaw can lead to severe consequences including network compromise, data breaches, and disruption of services. European organizations using Fortinet firewalls are at significant risk, especially those in sectors with high reliance on secure perimeter defenses. The threat is rated high severity due to the potential impact on confidentiality, integrity, and availability, combined with the ease of exploitation without requiring user interaction. Immediate mitigation steps include applying vendor patches once available, restricting administrative access via VPN or IP whitelisting, and enhancing network monitoring for suspicious activities. Countries with high Fortinet market penetration and critical infrastructure sectors, such as Germany, France, the UK, and the Netherlands, are likely to be most affected. Defenders must prioritize this threat to prevent widespread compromise and maintain network security.
A hacker claims to have stolen over 3 million records from Tokyo FM, a major Japanese radio broadcaster, indicating a significant data breach. The breach was reported via Reddit and linked to an external news source, but technical details and affected systems remain undisclosed. No known exploits or patches have been identified yet. The breach poses a high risk to confidentiality due to the volume of data compromised, potentially including personal information of listeners or employees. European organizations may face indirect impacts through partnerships or data sharing with affected entities. Mitigation focuses on enhanced monitoring, incident response readiness, and reviewing data sharing agreements. Countries with strong media sectors and close business ties to Japan, such as Germany, the UK, and France, are more likely to be affected. Given the scale and nature of the breach, the suggested severity is high due to the potential for identity theft, reputational damage, and regulatory consequences. Defenders should prioritize verifying the breach scope, securing exposed systems, and preparing for possible secondary attacks leveraging stolen data.
The Qilin ransomware group hacked the healthcare organization and stole data from its systems in May 2025. The post Covenant Health Data Breach Impacts 478,000 Individuals appeared first on SecurityWeek .
