A researcher from Group-IB has connected a Telegram account involved in sending unauthorized notifications to ASOS customers with prior activities in trading gaming items. This incident raises concerns about the potential misuse of customer data, as the rogue notifications could mislead customers into thinking they are receiving official communications from ASOS. The implications of this finding suggest that the account may be part of a larger scheme that exploits customer trust for malicious purposes. As online shopping continues to grow, incidents like this remind users to be cautious about unexpected notifications and to verify their authenticity. Companies like ASOS must strengthen their security measures to protect customer data and prevent similar occurrences in the future.
Advantest Corporation has confirmed that a ransomware attack earlier this year resulted in the theft of personal information belonging to some individuals. The company is reaching out to those affected to inform them about the breach and the types of data that were compromised. While specific details about the data stolen have not been disclosed, such incidents can lead to identity theft and other serious consequences for the victims. This attack serves as a reminder of the ongoing risks posed by ransomware and the importance of strong cybersecurity measures. Individuals who receive notifications from Advantest should monitor their financial accounts and consider taking steps to protect their personal information.
ASOS has confirmed that it was targeted in a cyberattack that compromised a third-party communication platform. As a result, hackers were able to send unauthorized notifications to ASOS users. This incident raises concerns about the security of third-party services that companies rely on for communication, as they can become potential entry points for attackers. Users of ASOS may have received misleading messages, which could lead to confusion or even phishing attempts. The situation underscores the need for companies to closely monitor their third-party vendors and ensure robust security measures are in place to protect customer information.
ASOS, the UK-based fashion retailer, has confirmed a data breach after hackers sent unauthorized push notifications through its mobile app. The attackers claimed to have accessed customer data from ASOS's Snowflake environment, raising concerns over the security of user information. While specific details about the stolen data have not been disclosed, the incident highlights vulnerabilities in the company's app security. Users of the ASOS mobile app should be on alert for potential phishing attempts or unusual activity in their accounts. This breach serves as a reminder for companies to prioritize data protection and for consumers to stay vigilant about their personal information online.
The FBI has terminated a contract with Accenture after a data breach that compromised the personal information of thousands of its employees. The breach was attributed to a failure to apply a critical security patch by the contractor, which allowed hackers known as ShinyHunters to access sensitive data. This incident underscores the risks associated with third-party vendors and their security practices, as the breach not only affected the bureau but potentially exposed sensitive information about its employees. The FBI is now facing scrutiny over its contractor management and data security protocols, highlighting the need for stronger oversight in safeguarding personal information.
Nikkei has reported that two employee cloud accounts were compromised, with one of the accounts being used to send out around 9,000 phishing emails. This incident raises concerns about the security of employee accounts in cloud services and the potential for widespread phishing attacks targeting other organizations or individuals. The unauthorized access could lead to further breaches if sensitive information is exposed or misused. Companies should ensure that their employees are trained on security best practices and that robust measures are in place to protect cloud accounts from unauthorized access. This incident serves as a reminder of the ongoing risks associated with email-based attacks and the importance of vigilance in cybersecurity.
ASOS customers are reporting unusual push notifications claiming that the retailer's IT systems have been compromised, possibly linked to a breach involving Snowflake, a cloud-based data platform. These notifications appear legitimate, which raises concerns about the potential for phishing attacks or misinformation. Customers are advised to be cautious and verify any communications they receive from ASOS. This incident underscores the risks associated with third-party data services and the importance of robust security measures for both companies and their users. As of now, it is unclear how many customers are affected or the full extent of the breach.
Atlassian has disclosed a serious vulnerability, identified as CVE-2026-21589, affecting eight of its self-hosted Data Center products. This flaw allows unauthenticated attackers to read specific files from the web application root directory, provided they know the exact file names and paths. However, the attackers cannot enumerate the directory's contents, which limits their ability to exploit the vulnerability without prior knowledge of the file structure. Rated at 9.3 out of 10 on the severity scale, this issue impacts organizations using these products, potentially exposing sensitive information if not addressed promptly. Companies should prioritize patching their systems to mitigate this risk.
The FBI has terminated an Accenture contractor following a security breach linked to the hacker group ShinyHunters, which resulted in the exposure of personal information for thousands of FBI employees. According to reports, this breach occurred due to a failure to properly implement security patches. The removal of the contractor indicates serious repercussions for those involved in maintaining cybersecurity at federal agencies. This incident raises concerns about the handling of sensitive information within government organizations and the potential risks posed by third-party contractors. Ensuring robust security measures is critical to protecting employee data and maintaining public trust.
On October 5, Denmark's digitalization ministry reported that unauthorized individuals accessed sensitive data from the Central Person Register (CPR), affecting approximately 8.8 million people, both living and deceased. The attackers exploited a private Danish company's legal right to access these records. The compromised information includes names, addresses, and personal identification numbers, raising serious privacy concerns. The ministry has urged citizens to remain vigilant and take precautions to protect their personal information. This incident highlights vulnerabilities in data access protocols and the potential for misuse of legitimate access rights.
Denmark's Central Population Register (CPR) has reported a significant data breach affecting the personal information of around 8.8 million individuals. This breach compromises sensitive data, potentially including names, addresses, and other identifying details of nearly all citizens and residents registered in Denmark. The incident raises serious concerns about privacy and security, as such extensive exposure can lead to identity theft and fraud. Authorities are urging individuals to monitor their personal information closely and consider taking protective measures. The scale of this breach makes it one of the largest in Denmark's history, prompting discussions about data security practices and the need for stronger protective measures.
Rey, a suspected leader of the ShinyHunters extortion group, has been arrested in Jordan. This group is known for stealing data from various companies and then extorting them for ransom. Following his arrest, Rey is reportedly cooperating with the FBI to help identify other members of the group, which could lead to further arrests and disrupt their criminal activities. The ShinyHunters have been linked to multiple high-profile data breaches, affecting both businesses and consumers, making this development significant in the ongoing fight against cybercrime. The arrest may also provide insights into the methods and operations of this notorious group, potentially preventing future attacks.
A 16-year-old security researcher discovered a significant vulnerability in Titan, an internal analytics service used by Microsoft. This flaw potentially allowed unauthorized users to access a massive database containing 17 trillion rows of sensitive data, including employee records and Bing search analytics. Meanwhile, Citrix has been dealing with the fallout from two zero-day vulnerabilities in its NetScaler product, which have reportedly been exploited globally for weeks. Citrix has released patches for eight critical and high-severity vulnerabilities, but the ongoing exploitation raises concerns for organizations using these systems. The incidents serve as a reminder of the vulnerabilities that can exist even in well-established services and the need for constant vigilance in cybersecurity.
Authorities in Jordan have detained a suspect linked to the ShinyHunters digital extortion group, a notorious outfit known for hacking and selling stolen data. The suspect, identified as Saif al-Din Khader, also known as 'Rey,' was taken into custody on September 29, 2026. Reports indicate that he is cooperating with the FBI to help identify other members of the group. ShinyHunters has been responsible for several high-profile data breaches, impacting various companies and putting sensitive information at risk. This development could lead to further arrests and a crackdown on the group's activities, which have affected numerous organizations worldwide.
Hackread – Cybersecurity News, Data Breaches, AI and More
A hacker known as 'Rey' from the group ShinyHunters has been detained in Jordan. This individual is reportedly cooperating with the FBI following claims that ShinyHunters was involved in significant data breaches affecting both the FBI and various corporations. The implications of this detention could be far-reaching, as ShinyHunters has a history of selling stolen data from high-profile breaches. If Rey provides valuable information to the FBI, it could lead to further arrests or a crackdown on similar hacking groups. This situation emphasizes the ongoing battle between law enforcement and cybercriminals in the realm of data security.