Hidden comments allowed full control over Copilot responses and leaked sensitive information and source code. The post GitHub Copilot Chat Flaw Leaked Data From Private Repositories appeared first on SecurityWeek .
Discord has denied reports of a massive breach but confirmed a limited exposure involving approximately 70,000 ID photos. The incident appears to be contained and does not involve a widespread compromise of user data or systems. No known exploits related to this exposure are currently active in the wild. The breach primarily affects user privacy due to the exposure of sensitive identification images. European organizations using Discord for communication may face privacy compliance challenges and reputational risks. Mitigation should focus on user awareness, reviewing Discord security settings, and monitoring for suspicious activity. Countries with high Discord usage and strong data protection regulations are more likely to be impacted. The severity is assessed as high due to the sensitivity of exposed data and potential regulatory consequences. Defenders should prioritize verifying the scope of exposure and enhancing data protection measures.
The company said there is no evidence that confidential client data was stolen from its systems. The post Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day appeared first on SecurityWeek .
Hackers claim to have breached Discord, exposing data of approximately 5.5 million users. The breach reportedly involves unauthorized access to user data, though specific technical details and the nature of the exposed data remain limited. No known exploits are currently active in the wild, and the discussion around this incident is minimal. The breach is considered high severity due to the scale of affected users and the potential sensitivity of the data involved. European organizations and users relying on Discord for communication may face risks related to data privacy and potential phishing or social engineering attacks leveraging the leaked information. Mitigation involves monitoring official Discord communications, enforcing strong authentication, and educating users on recognizing phishing attempts. Countries with high Discord usage and significant tech or gaming communities, such as the UK, Germany, France, and the Netherlands, are likely to be most impacted. The severity is assessed as high given the large user base affected, potential confidentiality impact, and ease of exploitation through social engineering. Defenders should prioritize incident response readiness and user awareness campaigns.
The hackers claim the theft of over 2 million photos of government identification documents provided to Discord for age verification. The post Discord Says 70,000 Users Had IDs Exposed in Recent Data Breach appeared first on SecurityWeek .
The Crimson Collective hacker group has been reported targeting AWS cloud instances with the intent of stealing data. This threat involves unauthorized access to cloud environments, specifically those hosted on Amazon Web Services, aiming to exfiltrate sensitive information. Although detailed technical specifics and exploited vulnerabilities are not disclosed, the high severity rating indicates significant risk. European organizations using AWS cloud infrastructure are at risk of data breaches, potentially impacting confidentiality and operational integrity. The threat does not currently have known exploits in the wild, and minimal public discussion limits detailed understanding. Mitigation requires enhanced cloud security posture, including strict access controls, continuous monitoring, and incident response readiness. Countries with high AWS adoption and critical cloud-dependent sectors, such as the UK, Germany, France, and the Netherlands, are more likely to be affected. Given the potential for data theft without requiring user interaction, the threat severity is assessed as high. Defenders should prioritize securing AWS environments against unauthorized access and data exfiltration attempts.
Active Directory (AD) domain join accounts, commonly used during system build processes, are frequently exposed and inherit over-privileged access control lists (ACLs). These excessive permissions enable attackers to exploit Local Administrator Password Solution (LAPS) disclosures, Resource-Based Constrained Delegation (RBCD), and other high-impact attacks. Even with Microsoft's recommended mitigations, residual risks remain due to replication lag and Active Directory Certificate Services (AD CS) interactions that can allow recovery of pre-reset machine secrets. Hardening requires layered controls including restricting machine account creation to privileged users, ensuring Domain Admins own computer objects, and applying deny Access Control Entries (ACEs) for sensitive attributes like ms-Mcs-AdmPwd and msDS-AllowedToActOnBehalfOfOtherIdentity. The threat is high severity due to the potential for privilege escalation and lateral movement within AD environments. Detection and mitigation require careful monitoring and tailored ACL configurations. European organizations relying heavily on AD infrastructure are at risk, especially those with complex domain join automation and build pipelines. Countries with large enterprise sectors and advanced IT infrastructure such as Germany, France, the UK, and the Netherlands are likely most affected. The threat is rated high severity due to the broad impact on confidentiality, integrity, and availability, ease of exploitation via exposed accounts, and the critical role of AD in enterprise security.
Salesforce has been targeted by widespread data theft attacks involving remote code execution (RCE) attempts. Despite the severity and scale of these breaches, Salesforce has publicly refused to pay ransom demands. The attacks indicate a significant compromise risk to customer data and internal systems, highlighting vulnerabilities in cloud service security. No specific affected versions or patches have been disclosed, and there are no known exploits in the wild yet. The threat is considered high severity due to the potential impact on confidentiality and integrity of sensitive data. European organizations relying on Salesforce services could face indirect impacts through data exposure or service disruption. Mitigation requires enhanced monitoring, strict access controls, and incident response readiness. Countries with high Salesforce adoption and critical cloud infrastructure are most at risk. The threat underscores the importance of robust cloud security practices and ransomware resilience strategies.
Avnet, a major electronics distributor, has confirmed a security breach involving unauthorized access to its data. Although the company states that the stolen data is unreadable, the breach itself is classified as high severity due to potential risks associated with data exposure. There are no known exploits in the wild related to this incident, and technical details remain limited, with the primary source being a Reddit InfoSec news post linking to a BleepingComputer article. European organizations that rely on Avnet for electronics supply chain services could face indirect impacts, including operational disruptions or risks from compromised supplier data. Mitigation should focus on verifying supply chain integrity, enhancing monitoring for suspicious activity, and ensuring robust encryption and data protection measures. Countries with significant electronics manufacturing and distribution sectors, such as Germany, France, and the Netherlands, are likely to be most affected. Given the lack of detailed technical information and the unreadability of stolen data, the suggested severity is high, reflecting the breach's potential impact on confidentiality and supply chain trust. Defenders should prioritize incident response readiness and supply chain risk assessments related to Avnet services.
XWorm 6.0 is a newly resurfaced malware strain featuring over 35 plugins that significantly enhance its data theft capabilities. This modular malware enables attackers to customize their operations, targeting a wide range of data types and systems. Although no known exploits are currently reported in the wild, its high severity rating and advanced features pose a substantial risk. European organizations, especially those handling sensitive or financial data, could face serious confidentiality breaches and operational disruptions. The malware's extensibility allows it to adapt to various environments, increasing the likelihood of successful infiltration and prolonged persistence. Mitigation requires proactive detection strategies, including monitoring for unusual network activity and employing advanced endpoint protection tailored to detect modular malware behaviors. Countries with high adoption of Windows-based enterprise systems and significant financial or industrial sectors, such as Germany, France, and the UK, are particularly at risk. Given the malware's potential impact on confidentiality and ease of plugin-based expansion, the suggested severity is high. Defenders should prioritize threat intelligence sharing and implement strict access controls to reduce exposure.
A significant data breach has occurred at Red Hat, a major provider of open-source software solutions. The breach has escalated with the involvement of the threat actor group ShinyHunters, who are now engaging in extortion attempts using the stolen data. While specific technical details about the breach vector or compromised data have not been disclosed, the incident is classified as high severity due to the potential exposure of sensitive information and the reputational impact on Red Hat and its customers. No known exploits are currently reported in the wild, and the discussion around this breach remains minimal on public forums. European organizations relying on Red Hat products could face indirect risks, including supply chain exposure and targeted extortion attempts. Immediate mitigation involves monitoring for suspicious activity, reviewing access controls, and preparing incident response plans tailored to potential extortion scenarios. Countries with strong Red Hat market presence and critical infrastructure depending on its software are more likely to be affected. Given the breach's impact on confidentiality and the involvement of extortion, the suggested severity is high.
Names, usernames, email addresses, contact information, IP addresses, and billing information was compromised. The post Discord Says User Information Stolen in Third-Party Data Breach appeared first on SecurityWeek .
Doctors Imaging Group is informing customers about a cybersecurity incident nearly a year after it occurred. The post Data Breach at Doctors Imaging Group Impacts 171,000 People appeared first on SecurityWeek .
The Salesloft-Drift breach is a high-severity security incident involving unauthorized access to data from two prominent SaaS providers. Although detailed technical specifics are limited, the breach is considered one of the largest SaaS breaches reported in 2025, highlighting significant risks to customer data and service integrity. The breach was initially discussed on Reddit's NetSec community with minimal details but has been flagged as highly newsworthy. No known exploits are currently active in the wild, and no patches or affected software versions have been disclosed. European organizations using Salesloft or Drift services may face data confidentiality and operational risks. Mitigation requires enhanced monitoring of SaaS integrations, strict access controls, and verification of data integrity. Countries with high SaaS adoption and strategic reliance on these platforms, such as the UK, Germany, France, and the Netherlands, are most likely to be impacted. Given the breach's scale and potential data exposure without requiring user interaction or authentication bypass, the severity is assessed as high. Defenders should prioritize incident response readiness and vendor communication to manage potential fallout.
ParkMobile pays... $1 each for 2021 data breach that hit 22 million
Source: https://www.bleepingcomputer.com/news/security/parkmobile-pays-1-each-for-2021-data-breach-that-hit-22-million/
Discord Data Breach: Hackers Access IDs, Billing Details and Support Chats
Source: https://hackread.com/discord-data-breach-hackers-ids-billing-support-chats/
New Study Warns Several Free iOS and Android VPN Apps Use Outdated Software and Leak User Data
Source: https://hackread.com/studyfree-ios-android-vpn-apps-leak-data/
This SecurityWeek roundup highlights multiple cybersecurity issues including new Android spyware targeting UAE users, a data breach at FEMA via Citrix exploitation, and vulnerabilities in Tile trackers. The Android spyware, disguised as legitimate apps, requires manual installation and exfiltrates sensitive data. The FEMA breach involved exploitation of a Citrix vulnerability dubbed CitrixBleed 2, leading to employee data theft and organizational repercussions. Tile tracker vulnerabilities allow unauthorized location tracking and compromise anti-theft features. Additional concerns include phishing campaigns abusing industrial routers and evolving post-quantum cryptography adoption. While no single exploit is widespread, these combined threats pose medium-level risks, especially to organizations with exposed infrastructure or users in affected regions. European entities should be vigilant about supply chain and endpoint security, particularly regarding mobile devices and IoT trackers. Mitigations include strict app installation policies, patching Citrix products, network segmentation, and enhanced monitoring of IoT devices. Countries with significant Citrix deployments, industrial infrastructure, and mobile user bases, such as Germany, the UK, France, Belgium, and the UAE-linked diaspora, are most likely affected.
