Cybersecurity

Iranian crypto exchange Bit24.cash leaks user passports and IDs

Iranian crypto exchange Bit24.cash leaks user passports and IDs Pierluigi Paganini January 07, 2024 Bit24.cash has inadvertently exposed sensitive data belonging to nearly 230,000 users, as revealed by Cybernews research. Due to its limited access to foreign financial markets, Iran has embraced cryptocurrency significantly. Last year, Iranian crypto exchanges facilitated transactions totaling nearly $3 billion. […]

Cybersecurity

MyEstatePoint Property Search Android app leaks user passwords

MyEstatePoint Property Search Android app leaks user passwords Pierluigi Paganini January 05, 2024 The MyEstatePoint Property Search app leaked data on nearly half a million of its users, exposing their names and plain-text passwords, the Cybernews research team has found. The all-in-one real estate app MyEstatePoint Property Search left a publicly accessible MongoDB server containing […]

Cybersecurity

Iranian Food Delivery Giant Snappfood Cyber Attack: 3TB of Data Stolen

A hacker or hacker group, identified as “irleaks” (presumably indicating Iran Leaks), publicly disclosed the Snappfood cyber attack on Breach Forums and Telegram over New Year’s Eve. Snappfood, a prominent online food delivery service in Iran, has fallen victim to a major data breach, during which cybercriminals stole personal information of millions of customers, Hackread.com […]

Cybersecurity

Misconfigured WBSC server leaks thousands of passports

Misconfigured WBSC server leaks thousands of passports Pierluigi Paganini September 29, 2023 The World Baseball Softball Confederation (WBSC) left open a data repository exposing nearly 50,000 files, some of which were highly sensitive, the Cybernews research team has discovered. On June 5th, our researchers discovered a misconfigured Amazon Web Services (AWS) bucket storing nearly 48,000 […]

Cybersecurity

DarkBeam leaks billions of email and password combinations

DarkBeam leaks billions of email and password combinations Pierluigi Paganini September 27, 2023 DarkBeam left an Elasticsearch and Kibana interface unprotected, exposing records from previously reported and non-reported data breaches. The leaked logins present cybercriminals with almost limitless attack capabilities. DarkBeam, a digital risk protection firm, left an Elasticsearch and Kibana interface unprotected, exposing records […]

Cybersecurity

FBI hacker USDoD leaks highly sensitive TransUnion data

FBI hacker USDoD leaks highly sensitive TransUnion data Pierluigi Paganini September 18, 2023 Researchers from vx-underground reported that FBI hacker ‘USDoD‘ leaked sensitive data from consumer credit reporting agency TransUnion. TransUnion is an American consumer credit reporting agency. TransUnion collects and aggregates information on over one billion individual consumers in over thirty countries, including “200 million files […]