Hackread – Cybersecurity News, Data Breaches, AI and More
Actively Exploited
A hacker is reportedly selling a massive database containing the personal information of 340 million OnlyFans users. This database appears to have been created by combining data from previous breaches and matching it with public profiles to identify real OnlyFans accounts. The implications are serious, as this kind of data leak can lead to identity theft, harassment, or other malicious activities targeting the users involved. OnlyFans users should be particularly cautious about their online security and consider changing their passwords and enabling two-factor authentication. This incident raises broader concerns about the security of online platforms and the risks associated with sharing personal information.
The 2026 Data Breach Investigations Report (DBIR) from Verizon reveals that the healthcare sector is increasingly facing social engineering attacks, which are becoming more sophisticated. While ransomware and vendor breaches continue to be significant threats, the report indicates that the tactics used by attackers are changing, making it easier for them to trick healthcare organizations and their employees. This shift in strategy raises concerns about the security of sensitive patient data and the overall integrity of healthcare systems. As these social engineering tactics evolve, it is crucial for healthcare providers to enhance their security training and awareness programs to better protect against these types of attacks. The ongoing challenges highlight the need for vigilance in safeguarding against both traditional and emerging cybersecurity threats.
Drupal has issued a warning about a significant SQL injection vulnerability that is currently being targeted by hackers. This flaw, which was announced earlier in the week, poses a serious risk to websites running on the Drupal content management system. Attackers can exploit this vulnerability to gain unauthorized access to databases, potentially leading to data breaches or site compromises. Users and administrators of Drupal sites are urged to take immediate action to secure their systems, as the risk of exploitation is high. It is crucial for affected parties to stay vigilant and apply any available patches to mitigate this threat.
Keepnet, a platform focused on human risk management, has provided data on voice and SMS phishing simulations to the 2026 Verizon Data Breach Investigations Report (DBIR). This edition marks the first time such data has been included at this scale, revealing a notable 40% increase in the median click rate for phone-centric phishing attempts compared to traditional email-based simulations. This indicates a growing trend in phishing tactics that exploit voice and SMS channels, which could pose significant risks to users and organizations alike. As cybercriminals diversify their methods, understanding these new threats becomes essential for companies aiming to protect themselves and their employees. The inclusion of this data in a reputable report like the DBIR emphasizes the need for heightened awareness and training regarding these types of attacks.
Grafana recently reported that hackers accessed its GitHub repositories, stealing code and other sensitive data. This breach occurred due to a compromised token linked to the TanStack supply chain attack, which was not rotated in time to mitigate the threat. As a result, attackers gained unauthorized access to Grafana's internal resources. This incident raises concerns about the security of software development processes and the potential risks associated with supply chain vulnerabilities. Companies using Grafana's software should be vigilant and review their security practices to prevent similar attacks in the future.
Grafana Labs has reported that a recent data breach they experienced was linked to the TanStack supply chain attack. This breach raises significant concerns for users of Grafana's services, as it indicates that attackers exploited vulnerabilities within third-party components to gain unauthorized access. The specifics of the data compromised have not been detailed, but such incidents often lead to sensitive information being exposed. This breach not only affects Grafana Labs but also any organizations relying on their software, highlighting the importance of scrutinizing supply chain security. Companies using affected services should take immediate action to assess their security posture and mitigate potential risks.
Ukrainian cyberpolice, in collaboration with U.S. law enforcement, have apprehended an 18-year-old man from Odesa who is believed to be behind an infostealer malware operation. This operation specifically targeted users of an online store based in California, resulting in the theft of approximately 28,000 accounts. The malware was designed to harvest sensitive information from victims, raising concerns about the security of online shopping platforms. This incident serves as a stark reminder of the ongoing risks associated with online transactions and the importance of robust cybersecurity measures for both users and businesses. Authorities are continuing to investigate the scope of the operation and its potential connections to other cybercrimes.
GitHub has confirmed that it experienced a significant data breach resulting in the theft of approximately 4,000 internal repositories. The hacker group TeamPCP has claimed responsibility for the attack, raising concerns about the security of open source projects hosted on the platform. This incident affects not only GitHub but also the developers and organizations that rely on these repositories for their software projects. The stolen data could potentially expose sensitive code and vulnerabilities, which may lead to further exploitation. Users and companies utilizing GitHub should review their security practices and be vigilant about any unusual activity related to their accounts.
An analysis of recent data breaches has revealed that despite existing state laws aimed at improving cybersecurity practices, many organizations are still struggling with fundamental issues. Researchers found that inadequate processes and a lack of a strong security culture are significant contributors to these incidents. Many companies are failing to adopt best practices, leading to vulnerabilities that can be exploited by attackers. This situation poses risks not only to the businesses involved but also to their customers, as sensitive data remains at risk. The findings emphasize the need for organizations to prioritize cybersecurity training and implement more effective security protocols to protect against breaches.
The Grafana data breach occurred due to a failure in rotating a GitHub workflow token after a recent npm supply-chain attack involving TanStack. This oversight allowed unauthorized access to Grafana's systems, potentially exposing sensitive data. The incident raises concerns about the importance of maintaining secure token management practices, especially in the wake of supply-chain vulnerabilities. Companies using Grafana may be at risk if they rely on outdated or improperly managed tokens. This breach serves as a reminder for organizations to regularly review and update their security protocols to prevent similar incidents.
According to the 2026 Verizon Data Breach Investigations Report (DBIR), vulnerability exploitation has surpassed stolen credentials as the main method attackers use to gain initial access to networks. This marks a significant shift, as it's the first time in nearly two decades that credential theft has not held the top position in the report. The findings are based on real-world data and reflect the evolving tactics used by cybercriminals. Companies should be aware that their defenses may need to adapt to this change, focusing more on identifying and patching vulnerabilities in their systems. The report serves as a crucial reminder for organizations to prioritize vulnerability management in their cybersecurity strategies.
According to Verizon's latest Data Breach Investigations Report (DBIR), mobile phishing is on the rise, surpassing email as the preferred method for cyber attackers. This shift is largely due to improved defenses against email phishing, prompting attackers to increasingly use texts and phone calls to trick users into revealing sensitive information. Businesses are encouraged to enhance their security measures, particularly by training employees to recognize these types of attacks and implementing stronger verification processes. This trend is concerning because mobile phishing can catch users off guard, making it easier for attackers to succeed. Companies need to act quickly to protect themselves and their customers from these evolving threats.
Hackread – Cybersecurity News, Data Breaches, AI and More
Actively Exploited
According to the Verizon Data Breach Investigations Report (DBIR) for 2026, software vulnerabilities have surpassed stolen passwords as the leading cause of cyberattacks. The report highlights that attackers are increasingly using artificial intelligence to exploit these vulnerabilities, often within hours of their discovery. This shift in tactics poses a significant risk to organizations, as it allows hackers to bypass security measures more efficiently. Companies need to prioritize patching software vulnerabilities and implementing robust security practices to defend against such rapid exploitation. The findings serve as a wake-up call for businesses to reassess their cybersecurity strategies in an environment where AI is being weaponized by cybercriminals.
A dark web carding forum known as B1ack’s Stash has made headlines by releasing 4.6 million stolen credit card records for free. This move follows the forum's decision to suspend sellers, which has raised questions about the motivations behind the release. Unlike typical incidents where law enforcement or security breaches prompt such disclosures, B1ack’s Stash appears to be acting independently. This massive dump of sensitive financial information poses a significant risk to anyone whose data is included, as it can lead to identity theft and fraudulent transactions. Users and financial institutions should remain vigilant and monitor for any suspicious activity related to these compromised cards.
According to the latest Verizon Data Breach Investigations Report (DBIR), 31% of data breaches in the past year were triggered by software vulnerabilities. This marks a significant shift, as exploits of these vulnerabilities have surpassed credential theft as the primary method for attackers to gain access to systems. The findings suggest that organizations need to prioritize patch management and vulnerability assessments to protect their data. With software flaws being a major entry point for data breaches, companies should be vigilant in monitoring their systems and applying necessary updates promptly. The report serves as a wake-up call for businesses to fortify their defenses against these increasingly common attacks.