ReliaQuest has confirmed that threat actor ShinyHunters exploited a phishing attack against an employee to gain access to a dashboard within the company's systems. The company claims that the scope of the breach was limited, though the specific data accessed or exposed was not detailed in the report.
Read full article at SecurityWeek ↗Latvia's Road Traffic Safety Directorate (CSDD) suffered a significant breach exposing payment records for over 1.2 million individuals—approximately two-thirds of the country's population—alongside data from 200,000 organizations. Check Point Research's latest threat intelligence bulletin documents this incident alongside other notable cyber discoveries and attacks from the week of August 24th.
The private equity firm appears to have been targeted as part of a campaign focusing on major financial companies. The post Personal Information Exposed in Apollo Global Data Breach appeared first on SecurityWeek.
Truffle Security discovered over 9,000 publicly accessible and active AWS key pairs, representing a significant exposure risk for affected organizations. The leaked credentials could potentially allow attackers unauthorized access to cloud infrastructure and sensitive data stored in Amazon Web Services environments.
Researchers have discovered methods to bypass Windows 11's strongest security defenses without physical access to the machine, though the attack requires the attacker to already possess privileged system access. Last week also saw reports of records allegedly stolen from Azure tenants and Medusa ransomware targeting over 500 organizations, along with law enforcement actions against cybercrime operations.