Breach - Bennett Tech Innovation

Valid certificates, stolen accounts: how attackers broke npm's last trust signal

Security Breach: How Attackers Compromised npm’s Trust Signal

Security Breach Highlights Vulnerabilities in Developer Tools Recently, a series of malicious attacks targeting developer tools have raised concerns about the security of the software supply...

Security4 months ago

Ukrainian Infostealer Operator Linked to Massive Data Breach: 28,000 Accounts Compromised

Ukraine Identifies Infostealer Operator Tied to 28,000 Stolen Accounts The cyberpolice in Ukraine, collaborating with U.S. law enforcement, have uncovered an 18-year-old individual from Odesa who...

Security4 months ago

Lessons Learned: The Grafana Breach and the Importance of Token Rotation

Grafana Data Breach: Missed Token Rotation Leads to GitHub Compromise The recent Grafana data breach has been attributed to a GitHub workflow token that was not...

Security4 months ago

Grafana Security Breach: A Tale of Stolen Code and Extortion

Grafana Discloses Unauthorized Access to Codebase Grafana recently announced that an unauthorized party managed to obtain a token that allowed access to the company’s GitHub environment,...

Security4 months ago

Node-IPC Security Breach: Hackers Exploit Vulnerabilities to Steal User Credentials

Popular node-ipc npm Package Compromised to Steal Credentials Recently, hackers have injected malware designed to steal credentials into new versions of node-ipc, a widely used inter-process...

Security4 months ago

Security Breach: How a Funnel Builder WordPress Plugin Flaw Led to Credit Card Theft

Critical Vulnerability in Funnel Builder WordPress Plugin Exploited to Steal Credit Cards An ongoing exploitation of a critical vulnerability in the Funnel Builder plugin for WordPress...

Security4 months ago

West Pharmaceutical Data Breach: Cyberattackers Encrypt Systems and Steal Sensitive Information

West Pharmaceutical Services recently revealed that it fell victim to a cyberattack, leading to data theft and system encryption. The breach was first detected on May...

Security4 months ago

Instructure Strikes Deal with ShinyHunters to Halt Massive Canvas Data Breach

American EdTech Company Instructure Pays Ransom to Cybercriminals Instructure, the parent company of Canvas, an American educational technology company, has confirmed that it paid a ransom...

Security4 months ago

NVIDIA Acknowledges Security Breach Impacting Armenian Users on GeForce NOW

Confirmation has been provided by NVIDIA to BleepingComputer regarding a data breach that has impacted users of GeForce NOW in Armenia. The tech giant stated that...

Canvas is down as ShinyHunters threatens to leak schools’ data

Security4 months ago

The Data Breach Dilemma: ShinyHunters Target Schools in Cyberattack

The Recent Data Breach and Outage of Canvas Learning Management Platform Canvas, the popular learning management platform owned by Instructure, is currently experiencing an outage following...