Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Phishing Attack
OpenAI Admits Data-Breach After Analytics Partner Hit By Phishing Attack
OpenAI Admits Data-Breach After Analytics Partner Hit By Phishing Attack Authored by John Dunn via InfoWorld.com, OpenAI has suffered a significant data breach after hackers broke into the systems of its analytics partner Mixpanel and successfully stole customer profile information for its API portal, the companies have said in coordinated statements.
OpenAI Admits Data-Breach After Analytics Partner Hit By Phishing Attack
OpenAI Admits Data-Breach After Analytics Partner Hit By Phishing Attack Authored by John Dunn via InfoWorld.com, OpenAI has suffered a significant data breach after hackers broke into the systems of its analytics partner Mixpanel and successfully stole customer profile information for… This story appeared on zerohedge.com , 2025-11-27 22:00:00.
OpenAI Reveals 2025 Data Breach via Mixpanel, Exposing API User Info
WebProNews 27 Nov 2025 0 shares 1 views OpenAI Reveals 2025 Data Breach via Mixpanel, Exposing API User Info Published 27 Nov 2025 OpenAI notified users of a November 2025 data breach via third-party analytics provider Mixpanel, exposing names, emails, and other details for some API users but sparing ChatGPT data. The incident highlights supply chain vulnerabilities in AI. OpenAI is investigating and emphasizing transparency to rebuild trust. Full Article You might like
🔒 Popular npm Package Compromised in Phishing Attack
🕵️ The npm installer for PureScript package has been compromised 📈 30.94 Punkte 🕵️ Hacking 📰 High-Value NPM Developers Compromised in New Phishing Campaign 📈 28.23 Punkte 📰 IT Security Nachrichten 🕵️ The popular xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack 📈 25.67 Punkte 🕵️ Hacking 🕵️ NPM ‘is’ Package with 2.8M Weekly Downloads Exploited in Attack on Developers 📈 25.01 Punkte 🕵️ Hacking
Byju's EGM Disrupted by Phishing Attack
Friday, 23 February, 2024 The Extraordinary General Meeting (EGM) of Byju's faced disruption due to a phishing attack, causing delays in a crucial investor-led meeting aimed at removing CEO Raveendran. Sharp noises were reported during the cloud-based meeting, impacting its proceedings. The incident highlights the vulnerabilities of virtual meetings to cyber threats and raises concerns about the security of remote corporate events amidst growing reliance on digital platforms.
Jake Gallen Hit By Phishing Crypto Attack, $100K Crypto Lost
Jake Gallen, CEO of crypto firm Emblem Vault and a reputed name in the NFT and podcasting space, has confirmed that he was targeted by a phishing attack over Zoom call that led to the loss of more than $100,000 in Bitcoin and Ethereum. The attack reportedly occurred after a deceptive Zoom interview, during which attackers gained unauthorized access to his computer.
Uncover the Default Passwords Lurking in Your Active Directory
Default passwords are a major security vulnerability for businesses, when in use they are leveraged as an entry point for attacks and can allow unauthorized access to systems and sensitive data. In this article, we will explain how this issue presents itself within Active Directory, how you can find default passwords in your organization and what steps you can take to secure your environment going forward. What are default passwords and why are they a security concern?
Researchers Uncover 700+ Malicious Open Source Packages
Security researchers have discovered another sizeable haul of malicious packages on the npm and PyPI open source registries, which could cause issues if unwittingly downloaded by developers. In January, Sonatype said it found 691 malicious npm packages and 49 malicious PyPI components containing crypto-miners, remote access Trojans (RATs) and more.
MoneyGram Fraud Victims Get $115m in Compensation
Tens of thousands of victims of fraud schemes that used money transfer service MoneyGram are to be compensated to the tune of $115m, according to the US authorities. Nearly 40,000 consumers will be handed their share of the funds, which were forfeited by MoneyGram in 2018 as part of a deferred prosecution agreement (DPA). That action was led by the FTC and the Department of Justice (DoJ).
Namecheap Customers Flooded with Phishing Emails
Customers of a popular domain name registrar have been hit with a wave of unsolicited emails over the past day, after a suspected issue with a supplier. Namecheap, which claims to have over 16 million domains under management, released a brief statement on Sunday to explain what happened. “We have evidence that the upstream system we use for sending emails (third-party) is involved in the mailing of unsolicited emails to our clients.
CISA Warns of Active Attacks Exploiting Fortra MFT, TerraMaster NAS, and Intel Driver Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday additional 3 flaws to its Regarded Exploited Vulnerabilities (KEV) catalog, citing proof of energetic abuse in the wild. Integrated among the 3 is CVE-2022-24990, a bug impacting TerraMaster network-hooked up storage (TNAS) units that could lead to unauthenticated remote code execution with the best privileges. ✔ Approved From Our Partners Protect and backup your data using AOMEI Backupper.
How video evidence is presented in court can hold sway in cases like the beating death of Tyre Nichols
How video evidence is presented in court can hold sway in cases like the beating death of Tyre Nichols 2023-02-10 19:02 Video surveillance footage may help courts better judge past events, but viewers can still be influenced by their own biases and even the way video is presented, an expert says. This article has been indexed from GCN – All Content Read the original article: Related
Reddit Hit By Phishing Attack, Source Code Stolen
Reddit Hit By Phishing Attack, Source Code Stolen 2023-02-10 19:02 Reddit said there was “no indication” of a breach of the company’s primary production systems This article has been indexed from http://www.infosecurity-magazine.com/rss/news/76/application-security/ Read the original article: Related
Attacker Allure: A Look at the Super Bowl’s Operational Cyber-Risks
Attacker Allure: A Look at the Super Bowl’s Operational Cyber-Risks 2023-02-10 19:02 Event organizers should be exercising various cyberattack scenarios to ensure they have the proper checks and balances in place to respond accordingly and maintain resilience. This article has been indexed from Dark Reading Read the original article: Related
Reddit Hit By Phishing Attack, Source Code Stolen
Reddit suffered a cyber-attack immediately after its interior techniques were breached on February 05 because of to a “sophisticated” and “highly-targeted” phishing attack that led to employee credential compromise. “The attacker sent out plausible-sounding prompts pointing personnel to a web site that cloned the behavior of our intranet gateway in an attempt to steal credentials and 2nd-factor tokens,” the business wrote on Thursday.
Reddit Hit By Phishing Attack, Source Code Stolen
Reddit suffered a cyber-attack after its internal systems were breached on February 05 due to a “sophisticated” and “highly-targeted” phishing attack that led to employee credential compromise. “The attacker sent out plausible-sounding prompts pointing employees to a website that cloned the behavior of our intranet gateway in an attempt to steal credentials and second-factor tokens,” the company wrote on Thursday.
Reddit Hit By Phishing Attack, Source Code Stolen
Reddit suffered a cyber-attack after its inside methods have been breached on February 05 resulting from a “subtle” and “highly-targeted” phishing assault that led to worker credential compromise. “The attacker despatched out plausible-sounding prompts pointing staff to an internet site that cloned the conduct of our intranet gateway in an try and steal credentials and second-factor tokens,” the corporate wrote on Thursday.
Are Business Logic Flaws Leaving Your APIs at Risk?
Short answer – yes. Most application programming interface (API) attacks are not the familiar password hack or injection-based kind. A good example is the recent Facebook hack, which exposed tens of millions of user data. In this instance, API logic allowed the exploit, and the attacker took advantage of it. It was unauthorized use of API. Attackers don't need to hack the API. They discover inherent business logic issues and exploit vulnerabilities like BOLA. Are you vulnerable to business logic flaws?
Episode 1247 - Twilio Hit By Phishing Attack
Twilio confirmed recently they were a victim of a SMS phishing attack. This attack led to customer data being accessed after a few employees were tricked into entering credentials into a hacker-controlled fake website. This epsiode talks about how it happened and the things you can do to slow down or prevent these types of attacks. *** Support the podcast with a cup of coffee *** - Ko-Fi Security In Five Don't forget to subscribe to the Security In Five Newsletter.
Polygon trying to stand in the crypto industry as a Web3 leader, Here is how?
Click here to view original web page at bitcoinik.com Polygon network introduced its Polygon ID platform to make Web3 and Metaverse perfectly accessible for people. The current trend in the crypto industry is the Web3 concept. Interestingly no new projects are showing interest to launch their crypto project as a leading actor to become leader in Crypto & Web3 but some old crypto projects showed better steps and Web3 related activities, out of which the Polygon team is standing uniquely.
Trezor Victimized By Phishing Attack; Warns Users Not to Open Emails
Hardware wallet maker Trezor has confirmed to users that it was the subject of a recent phishing attack that occurred on Saturday. This came after bad actors masquerading as the firm, sent out an email stating that [Trezor] experienced a security breach that exposed some customers’ data. The email then asked users to download the latest version of Trezor Suite and change their pin. To many users, the email looked very real, as it was shared across Twitter.
World's Largest NFT Marketplace OpenSea Hit By Phishing Attack, Users Lost NFTs
World’s largest NFT (non-fungible token) marketplace, OpenSea on Sunday confirmed that it has been hit by a phishing attack and at least 32 users had lost their valuable NFTs worth $1.7 million. OpenSea Co-Founder and CEO, Devin Finzer acknowledged the phishing attack, confirming that 32 users have lost NFTs so far.
Links 31/5/2021: Firefox 89 and Public Holidays
In the May 2021 survey we received responses from 1,218,423,991 sites across 259,596,021 unique domains and 11,051,830 web-facing computers. This reflects a gain of 6.28 million sites and 112,000 computers, but a loss of 4.87 million domains. nginx gained the largest number of hostnames, active sites, and computers this month; but also suffered the largest loss of 4.73 million domains. Its most notable gain was of 78,900 computers (+2.03%), which increased its leading share to 36.0%.
Canada Revenue Agency Hit By Phishing Attack, Locks 800,000 Accounts
Advertisment The Canada Revenue Agency (CRA) says it has locked 800,000 accounts after it found that the login information was available to "unauthorized individuals." The tax agency says impacted users will be locked out of their accounts as a preventive measure until they create a new user identification and new password. The CRA says the accounts were not compromised because of a breach of the federal agency's online systems.
Over 100 NHS Accounts Compromised By Phishing Attack
113 NHSmail mailboxes were hacked at the beginning of the month, sending malicious emails to external recipients, according to a spokesperson from NHS Digital. The NCSC has confirmed that this activity is part of a widespread credential-harvesting phishing campaign that is targeting a broad range of organisations across the UK, and are working with the NHS to mitigate against cyber-attacks.
A quantitative analysis of current security concerns and solutions for cloud computing
Abstract Abstract The development of cloud computing services is speeding up the rate in which the organizations outsource their computational services or sell their idle computational resources. Even though migrating to the cloud remains a tempting trend from a financial perspective, there are several other aspects that must be taken into account by companies before they decide to do so.
Oregon Judicial Department Hit By Phishing Attack
SALEM, Ore. (AP) – Personal information of more than 6,000 people became exposed in a phishing attack on the Oregon Judicial Department. The department said Thursday the attack occurred at 4:30 a.m. on July 15, resulting in email accounts of five users being compromised. The accounts were disabled within four hours. The department is sending notices and providing credit monitoring services to the 6,607 affected people.
Oregon Judicial Department Hit By Phishing Attack
SALEM, Ore. (AP) – Personal information of more than 6,000 people became exposed in a phishing attack on the Oregon Judicial Department. The department said Thursday the attack occurred at 4:30 a.m. on July 15, resulting in email accounts of five users being compromised. The accounts were disabled within four hours. The department is sending notices and providing credit monitoring services to the 6,607 affected people.
Oregon Judicial Department Hit By Phishing Attack
SALEM, Ore. (AP) – Personal information of more than 6,000 people became exposed in a phishing attack on the Oregon Judicial Department. The department said Thursday the attack occurred at 4:30 a.m. on July 15, resulting in email accounts of five users being compromised. The accounts were disabled within four hours. The department is sending notices and providing credit monitoring services to the 6,607 affected people.
Oregon Judicial Department Hit By Phishing Attack
Aug 29, 2019 @ 3:49pm SALEM, Ore. (AP) – Personal information of more than 6,000 people became exposed in a phishing attack on the Oregon Judicial Department. The department said Thursday the attack occurred at 4:30 a.m. on July 15, resulting in email accounts of five users being compromised. The accounts were disabled within four hours. The department is sending notices and providing credit monitoring services to the 6,607 affected people.
Phishing Attack on Electrum Wallet Nets Hacker Almost $1 Million in Hours, Report
We encourage you to use comments to engage with users, share your perspective and ask questions of authors and each other. However, in order to maintain the high level of discourse we’ve all come to value and expect, please keep the following criteria in mind: Enrich the conversation Stay focused and on track. Only post material that’s relevant to the topic being discussed. Be respectful. Even negative opinions can be framed positively and diplomatically. Use standard writing style.
Malware Infecting Docker Containers With Monero Miners
Juniper Threat Labs has just posted new findings on malware that hunts and infects Docker services: Container malware: Miners go Docker hunting in the cloud. The in-the-wild malware hunts for misconfigured publicly exposed Docker services in the cloud and infects them with containers that run Monero miners. Mounir Hahad, Head of Juniper Threat Labs at Juniper Networks: “The advent of microservices has led to us witnessing containers take the cloud by storm.
Russian Central Bank Targeted By Phishing Attack
Banks in Russia today were the target of a massive phishing campaign that aimed to deliver a tool used by the Silence group of hackers. The group is believed to have a background in legitimate infosec activities and access to documentation specific to the financial sector. The fraudulent emails purported to come from the Central Bank of Russia (CBR) and contained a malicious attachment.
Essential Phone Gets Another Price Cut, Drops Down To $450
When the Essential Phone was announced, many were expecting great things from it. This is because as a new company, Essential was not constrained by expectations that companies like Apple or Samsung face when launching a new smartphone. The company was also helmed by Android’s Andy Rubin, who before that was behind Danger Inc., the company behind the Sidekick mobile phone.
Essential Phone Update Gives It Fingerprint Sensor Gestures
Given that a lot of our phones these days seem to pack similar hardware specs, one of the ways to differentiate phones from each other would be in terms of features, whether it be software or hardware. The good news for Essential Phone owners is that it looks like the company has recently pushed out an update that will introduce fingerprint gestures.
Essential Phone Has Reportedly Only Sold 5,000 Units So Far
Considering who is behind the Essential Phone, you would think that there would be many flocking to it, however given that it is also a brand new device, some skepticism wouldn’t be surprising. However could there have been too much skepticism? According to a report by BayStreet Research, the Essential Phone appears to have only sold 5,000 units to date.
Essential Phone Now Supported On Verizon
Essential’s first smartphone has finally received approval on Verizon which means that the Essential Phone is now compatible with the country’s largest mobile network. Verizon didn’t guarantee initially if the Essential Phone would work on its network, adding that the handset hadn’t cleared the certification process. That is no longer the case now, Essential Phone owners can start using their handset on Verizon.
Essential Customers Hit By Phishing Attack
Android co-founder Andy Rubin’s new smartphone company Essential recently started shipping out its first smartphone. The company actually missed its own release deadline due to certification issues. Customers were made to wait for longer than they expected and now that their units have started shipping, some of them have been hit by a phishing attack. That’s really no fault of the company itself, though.
Andy Rubin Apologizes For Essential Email Snafu
Recently you might have heard how Essential customers might be facing a phishing attack after there were reports that a few customers were receiving emails from the company asking them for additional verifying information about their orders. Given that this almost never happens, it did seem a bit suspicious even though the emails did seem to come from Essential themselves.
Essential Customers Hit By Phishing Attack
Android co-founder Andy Rubin’s new smartphone company Essential recently started shipping out its first smartphone. The company actually missed its own release deadline due to certification issues. Customers were made to wait for longer than they expected and now that their units have started shipping, some of them have been hit by a phishing attack. That’s really no fault of the company itself, though.
Torrance Memorial Breached In Phishing Incident
Torrance Memorial Medical Center said this morning that it has had an email security incident, which has allowed access to two email accounts containing sensitive personal information including names, dates of birth, address information, telephone numbers, medical record numbers, Social Security numbers, health insurance information, and other clinical/diagnostic information for patients.
Gmail Users Targeted By Phishing Attack
SAN FRANCISCO -- A phishing campaign targeting Gmail users took place Wednesday, prompting Google, the provider of the service, to disable what it called "offending accounts" that initiated the attack, China's Xinhua news agency reported. Like all phishing practices, the attack was carried out by sending an email to Gmail users, with the attacker pretending to be someone they may know. However, unlike other phishing practices, the email was posed as an invitation to join a Google Doc.
Pure White Essential Phone Is Finally Available
The Essential Phone was introduced in two color options but the company only released the one in black initially. Apparently, it required more time to put the finishing touches on the white model, that’s because it has taken the company two months to finally offer the Pure White color option for the Essential Phone. Those who have been waiting for one can finally get their hands on a Pure White Essential Phone starting today.
Sprint Starts Selling Essential Phone At Retail Stores
Andy Rubin’s new smartphone company Essential unveiled its first handset a few months back. Aptly called the Essential Phone, the handset was released weeks after its original release date. Essential is selling it directly to customers and it has chosen Sprint as its exclusive carrier partner for the handset. Starting today, Sprint is selling the Essential Phone at its retail stores across the nation.
Unlocked Essential Phone Available Now From Best Buy
Essential, Andy Rubin’s smartphone startup, recently released its first smartphone ever. The Essential Phone was finally released over a month ago after the company missed its own initial release timeframe. Those who have been meaning to get their hands on one can now pick up the Essential Phone from a variety of sources. Best Buy now has the unlocked Essential Phone available for customers across the country. Customers can always head over to Essential’s website and purchase the Essential Phone.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Phishing
Contact Phishing, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack