44 casos · pág. 1/3
Tenable Holdings announced that Japanese retail group H₂O Retailing has deployed the Tenable One Exposure Management Platform across its multi-cloud and hybrid infrastructure. The group operates Hankyu Hanshin Department Stores, Izumiya, Hankyu Oasis and Kansai Super. It previously relied on annual, outsourced vulnerability assessments fo…
Ahold Delhaize, the Dutch-Belgian grocery group, is restoring services disrupted by a cyberattack that began on October 12, when it took systems offline in response to a security issue. The outage hit online orders and deliveries for most of its brands across Europe and the United States, though all stores stayed open. The company has not…
Ahold Delhaize, one of the world's largest food retailers, confirmed that a cyberattack discovered last week forced it to take systems offline, including brand websites and apps, in Europe and the United States. Affected brands include Albert Heijn, Etos and Gall & Gall in the Netherlands, Delhaize in Belgium, and Stop & Shop in the US, w…
In August 2026, Australian beauty retailer Oz Hair and Beauty was targeted in an extortion attack by the group xpl0itrs. The group subsequently published data allegedly stolen from the company. The leak contains roughly 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchase recor…
In August 2026, clothing retailer Carhartt was targeted in a ShinyHunters "pay or leak" extortion campaign. The group published data allegedly taken from the company, including 12.9M unique email addresses, names, phone numbers and physical addresses. The leaked corpus also held millions of synthetic records unrelated to real individuals,…
Troy Hunt of Have I Been Pwned (HIBP) analysed the leak that ShinyHunters attributed to Carhartt. The leak was claimed to hold more than 50 GB of customer and employee records. The initial extraction showed 24,876,077 unique email addresses. Closer review showed that a large share came from the TPC-DS benchmark dataset (tpcdssf1000) store…
A cyber-attack that began on October 11 against refrigeration controllers in French supermarkets is larger than first reported. It now appears to affect Dixell Electronics (a Copeland brand) temperature regulation devices as well as Danfoss controllers. CERT-FR named Danfoss AK-SC and AK-SM series, Dixell xweb and Copeland xweb as affecte…
SafeDep announced SafeDep Threat Intel, an add-on to any paid plan that gives SOC and cyber defense teams the malicious package intelligence behind its platform. It is a product announcement, not a security incident. Customers can query the data directly or push it into existing tooling to defend against software supply chain attacks. It …
On October 6, 2026, ASOS app users received a push notification stating the company had been hacked, sent by attackers who gained access to third-party customer messaging platforms used by ASOS. The note, addressed to ASOS's DPO and IT team, claimed the Snowflake instance was "fully compromised" and threatened a leak unless ASOS engaged. …
Proofpoint disclosed an active campaign, tracked as UNKCondorFiltration, that used the TeamFiltration offensive framework against more than 5,700 accounts across 28 Microsoft 365 tenants. It focused mainly on Chilean retail and financial institutions and originated from 1,487 unique AWS EC2 IP addresses. Seven accounts were compromised, a…
Episode 484 of the Smashing Security podcast, hosted by Graham Cluley with guest Danny Palmer, covers several security stories. The lead item is audio fingerprinting: a user named Matt found that an open AliExpress page, playing silent audio at zero volume, kept his multipoint Bluetooth headphones from switching to his phone. The episode …
Episode 486 of the Smashing Security podcast (host Graham Cluley, guest Dave Bittner) covers two main stories. An Auckland store's vibe-coded website reportedly let the public edit its inventory, and bogus listings appeared within hours, including socks, an $850 banana and New Zealand's national parks. A hacker collective also physically …
Episode 488 of the Smashing Security podcast, hosted by Graham Cluley with guest Paul Ducklin, covers several recent security stories. The lead item is the arrest by the FBI of an executive at a ransomware negotiation firm, reportedly at a cybersecurity conference, in connection with the investigation into the ShinyHunters gang. The hosts…
A breach of the Mindbox marketing automation platform in August 2024 exposed data belonging to Burger King Russia customers. News of the incident broke in October 2024, and the dataset was added to Have I Been Pwned on 21 Sep 2026. It contains 3.2M unique email addresses along with names, genders, dates of birth, phone numbers and approxi…
A coordinated attack on the operational technology behind supermarket refrigeration hit hundreds of stores in France from the night of 11-12 October 2026. Intermarché/Netto reported at least 300 affected shops, Coopérative U more than 100 and Carrefour 80, with Monoprix, E.Leclerc and Auchan also reporting impacted stores. Per BFM TV, att…
An actor using the handle malconguerra2 claims to be sharing a dataset allegedly from KFC Venezuela, advertised at roughly 1.55 million records. The detailed description lists 1,542,021 JSON records totaling 17.5 GB. A visible sample shows customer and transaction fields: full names, email addresses, phone numbers, physical addresses, ord…
Hundreds of EU grocery stores reportedly lost millions of euros because the outdated OT firmware running their cooling systems was left unpatched. The stores had outsourced management of these systems to third-party providers. The source text is only a short teaser, so it does not name the affected vendors, the retailers, the firmware fla…
Unknown attackers compromised thousands of internet-exposed refrigeration controllers late on Sunday, raising temperatures to as high as 122°F (50°C), spoiling food and causing fires at nearly 700 French supermarkets. France's ANSSI warned of widespread compromises of Danfoss controllers and a day later added Copeland and its Dixell brand…
Ahold Delhaize, the Dutch grocery group behind Food Lion, Giant Food, Stop & Shop, Hannaford, Martin's and Albert Heijn, confirmed that a cyberattack caused by "malicious actions of others" forced it to proactively take IT systems offline, including websites and apps. The incident was first disclosed on October 12 and affected most of the…
Burger King Japan, the Japanese subsidiary of Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. The article excerpt does not say how the intrusion happened, who was responsible, or exactly which data fields were exposed. The scale makes this a mass customer-data exposur…
