Cyber News

Applebee's Exposes Customer Data via Hardcoded Password

The restaurant chain left a database password hardcoded in its mobile app, a basic security mistake that exposed customers' personal information online.

Read the case

CISA Confirms PHP2Shell Flaws Now Actively Exploited

Attackers are chaining two newly discovered PHP bugs with a flaw in Palo Alto firewalls, and at least 25 servers have already been compromised worldwide.

Read the case

Capcom Breach Exposes 11.7 Million Player Records

The game publisher confirmed attackers accessed CAPCOM ID databases, taking emails, login IDs and IP addresses, though no passwords or payment details.

Read the case

Supplier Breach Exposes 8.8 Million Danish Records

Denmark's population register was breached via a small IT supplier's search access; the attacker claims the supplier's admin accounts used the password "123456".

Read the case

Amadeus Breach Exposes Airline Passengers Across Asia

Attackers used valid credentials for an Amadeus account for about three years, exposing passenger data at JAL, ANA, Cathay Pacific and others.

Read the case

AWS AgentCore Agents Leaked Credentials via Prompt

Zenity Labs showed that a single prompt could extract an AgentCore agent's AWS credentials and hijack other agents; AWS has since fixed it.

Read the case

Railway Urges Developers to Rotate All Secrets

An attacker abused CI credentials to decrypt customers' stored secrets at the cloud developer platform Railway, potentially affecting up to 100,000 workspaces.

Read the case

GMO Cloud Breach Could Hit 26,700 Servers

Hackers breached GMO's Onamae.com Desktop Cloud, used by financial traders, and posted stolen customer data, with up to 26,739 servers potentially affected.

Read the case

Ransomware on Japanese Cloud Disrupts 495 Organisations

A ransomware attack on SoftBank's cloud subsidiary IDC Frontier disrupted hundreds of client organisations, including rail operators JR East and JR Kyushu.

Read the case

Napoleon Perdis Breach Exposes Nearly 340,000 Customers

The Australian cosmetics brand confirmed customer data was exposed through a compromise at its retail software supplier, Retail Express, a supply-chain attack.

Read the case

NSW Health Hit by Major Cyber Incident

Police are investigating unauthorized access to a NSW Health website, where 4GB of dentist details were taken; no patient data was affected.

Read the case

Binance Loses $6.3 Billion in Record Heist

Attackers linked to North Korea drained hot wallets in the largest crypto theft ever, reportedly starting from one compromised DevOps engineer's laptop.

Read the case

Get in Touch

Let’s book a discovery session to see how we can help with you AWS cloud needs