domain name news
Every article and link on tldlog tagged “data-breach”, newest first.
Meta has paused a Muse feature that lets users share AI chat links after security firm Claroc found more than 6,800 such links through public DNS records. Some exposed conversations contained business financial and personal details.
Source: theverge.com published on
talkback.sh reports that Meta’s Muse AI shares can be found through public DNS, because each share address includes the conversation title. A search surfaced more than 6,800 share hostnames, some holding private business material.
Source: talkback.sh published on
CloudSEK uncovered a global Microsoft 365 phishing-as-a-service operation it calls “BigBear 2.0”, which targeted hundreds of organizations. A DNS threat analysis by WhoisXML API mapped the domains and IP addresses linked to the campaign.
Source: circleid.com published on
Microsoft and cybersecurity group Health-ISAC won a US court order to seize and redirect domains used by YAM Store, CoGUI and Iron Man, services that sold stolen accounts and phishing tools. Microsoft says the network was linked to more than one billion phishing messages.
Source: cryptoslate.com published on
A hacker breached the small Danish company Pays using the password '123456', stealing over 8.7 million Danish social security numbers (CPR numbers) and other personal data, including records of 5.5 million living and 3.3 million deceased Danes. The hacker shared the historic data leak with newspaper Politiken, whose experts called the company's security shocking.
Source: Politiken.dk original in Danish (Denmark) published on