Aggregator

Coinbase disclosed a data breach after an extortion attempt

Security Affairs
9 months ago
Coinbase confirmed rogue contractors stole customer data and demanded a $20M ransom in a breach reported to the SEC. Coinbase said rogue contractors stole data on under 1% of users and demanded $20M; the data breach was disclosed in an SEC filing. On May 11, 2025, the company received a ransom demand from a threat […]
Pierluigi Paganini

Coinbase Data Breach – Customers Personal Info, Government‑ID & Transaction Data Exposed

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
9 months ago

Coinbase, the largest cryptocurrency exchange in the United States, has disclosed a significant cybersecurity incident that could cost the company up to $400 million. The breach, revealed in a regulatory filing and confirmed by company officials, stemmed from a sophisticated insider campaign targeting the firm’s overseas support contractors and employees. Coinbase Data Breach On May […]

The post Coinbase Data Breach – Customers Personal Info, Government‑ID & Transaction Data Exposed appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Gurubaran

TAG Bulletin: Q1 2025

Threat Analysis Group (TAG)
9 months ago
This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q1 2025. It was last updated on May 15, 2025.JanuaryWe terminated 12 YouT…
Billy LeonardThreat Analysis Group

CVE-2024-21626 | opencontainers runc up to 1.1.11 on Linux Internal File Descriptor file descriptor (GHSA-xr7r-f8xq-vfvv / EUVD-2024-0459)

Vuldb Updates
9 months ago
A vulnerability has been found in opencontainers runc up to 1.1.11 on Linux and classified as critical. This vulnerability affects unknown code of the component Internal File Descriptor Handler. The manipulation leads to exposure of file descriptor to unintended control sphere ('file descriptor leak'). This vulnerability was named CVE-2024-21626. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-42163 | Tenda AC10 15.03.06.23 fromNatStaticSetting stack-based overflow (EUVD-2022-45240)

Vuldb Updates
9 months ago
A vulnerability, which was classified as critical, has been found in Tenda AC10 15.03.06.23. Affected by this issue is some unknown functionality of the file /goform/fromNatStaticSetting. The manipulation leads to stack-based buffer overflow. This vulnerability is handled as CVE-2022-42163. Access to the local network is required for this attack to succeed. There is no exploit available.
vuldb.com

CVE-2025-44180 | PHPGurukul Vehicle Record Management System 1.0 /edit-brand.php bid cross site scripting (EUVD-2025-15164)

Vuldb Updates
9 months ago
A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /edit-brand.php. The manipulation of the argument bid leads to cross site scripting. This vulnerability is traded as CVE-2025-44180. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

CVE-2022-42906 | powerline-gitstatus up to 1.3.1 Directory command injection (Issue 45 / EUVD-2022-7172)

Vuldb Updates
9 months ago
A vulnerability has been found in powerline-gitstatus up to 1.3.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Directory Handler. The manipulation leads to command injection. This vulnerability is known as CVE-2022-42906. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad