Convertr Card Skimmer Stole Cards From Dozens of Brands
Shoppers at dozens of Brazilian fashion brands handed their card details to criminals this month. They clicked nothing suspicious. The Convertr card skimmer sat inside an analytics file that every store on the platform already trusted and loaded on its own payment page. From October 24, those checkouts copied card numbers, security codes and taxpayer IDs, then shipped them to
ENGIE Data Breach Exposes Customer Details via Partner Tool
Letters have been arriving at French households carrying an uncomfortable message: a system most recipients never knew existed was holding their personal details, and no longer holds them alone. The sender is ENGIE. Criminals got into a prospecting tool that the supplier’s sales partners rely on, and the ENGIE data breach that followed pushed names, addresses and contract references into
Time4Popcorn Vulnerability Left Millions of PCs Wide Open
Millions of computers around the world spent years calling home to a domain that nobody owned. The machines ran Time4Popcorn, an old fork of the Popcorn Time streaming app, and most of the people who installed it had long since forgotten it was there. A Time4Popcorn vulnerability in the update system left all of them open to full takeover. Researchers
Onamae Desktop Cloud Hack Hits Up to 27,000 Servers
Thousands of Japanese server renters woke up to dead machines on October 21. The cause was an Onamae Desktop Cloud hack that hit the host company itself, not the customers above it. Up to 26,739 servers may now carry malware left behind by an intruder. So the provider powered the whole service down rather than let that code keep running.
PHP2Shell Vulnerability Puts Most of the Web at Risk
PHP runs about three quarters of the web, so a bug in it rarely stays small for long. On October 21 the PHP team shipped emergency patches for two critical flaws now known as PHP2Shell, and each PHP2Shell vulnerability hands a remote attacker code execution on a server without any login. Details leaked days early. By the time most admins
Zeabur Data Breach Hits 321,810 Accounts, Platform Closing
Zeabur built its business on taking the messy parts of deployment off a developer’s hands, which meant holding the keys to thousands of other people’s systems. Those keys now belong to someone else. The Zeabur data breach exposed 3.2 million environment variable records and account data for 321,810 users, nine weeks after the first attack. Days later, the firm decided
Rank Math Backdoor Hit Paid WordPress Sites for 11 Hours
Site owners who paid for a premium WordPress SEO plugin ended up installing malware instead. The Rank Math backdoor shipped inside an official build of Rank Math PRO 3.0.123, pulled straight from the vendor’s own download servers, where it sat for roughly 11 hours. Nothing looked off. Anyone who activated that version during the window now owns a hacked website.
Hirudo Android Malware Swaps Banking Apps For Fake Copies
Most people trust their banking app more than anything else on their phone. Hirudo, a new Android malware family, goes straight after that trust. Instead of faking a login screen, it deletes the real app and installs a rigged copy. The copy looks the same and works the same, but its security checks no longer do. How Hirudo Android malware
OpenAI Engineer Arrested Over Hidden Office Microphone
Federal prosecutors say a software engineer hid a microphone inside OpenAI’s San Francisco offices. Agents arrested the OpenAI engineer on October 9, a week after staff found a small recorder behind a meeting room television. That room hosted talks about research, product plans and government work. He then went back to check on the device, with no idea that the
Ahold Delhaize Cyberattack Disrupts 9,400 Stores Worldwide
One of the world’s biggest grocery operators kept its doors open all week and still could not deliver groceries, price items correctly, or tell staff when to show up. A supermarket can keep its doors wide open and still fail at almost everything else. Ahold Delhaize spent this week proving it, after a cyberattack reached the network behind more than
