Bulletins d'actualité

Classification

TLP:WHITEC0

{{#widget:Twitter}}

Offensive Security’s Exploit Database

[webapps] OpenEMR 7.0.2 - Arbitrary File Read OpenEMR 7.0.2 - Arbitrary File Read

[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection

[webapps] Drupal Core 10.5.5 - Error-Based SQL Injection Drupal Core 10.5.5 - Error-Based SQL Injection

[webapps] WordPress OrderConvo 14 - Path Traversal WordPress OrderConvo 14 - Path Traversal

[remote] Notepad++ 8.9.6 - Arbitrary Code Execution Notepad++ 8.9.6 - Arbitrary Code Execution

[webapps] YAMCS yamcs-core 5.12.7 - No Rate Limiting YAMCS yamcs-core 5.12.7 - No Rate Limiting

[webapps] YAMCS yamcs-core 5.12.7 - User Enumeration YAMCS yamcs-core 5.12.7 - User Enumeration

[webapps] YAMCS yamcs-core 5.12.7 - LDAP Injection YAMCS yamcs-core 5.12.7 - LDAP Injection

[remote] Microsoft - NTLMv2 Hash Capture Microsoft - NTLMv2 Hash Capture

[webapps] MikroORM 7.0.13 - SQL Injection MikroORM 7.0.13 - SQL Injection

Dark Reading

Impossible de charger le flux RSS de https://www.darkreading.com/rss_simple.asp : Il y a eu un problème lors de la requête HTTP : 403 Forbidden

ZATAZ

Fuite présumée chez bet365 : l’ombre d’un fichier trés sensible ? Un pirate affirme vendre 120 millions de profils attribués à bet365. La nature des données évoquée par le hacker pourrait sembler bien plus grave qu’une "simple" liste d’adresses électroniques.

Tripadvisor, Bet365 et Zalando : trois fuites revendiquées et beaucoup d’ombre Fuites revendiquées chez Tripadvisor, Bet365 et Zalando Australia : attribution faible, prudence cyber maximale.

Fuite présumée sur la Carte Jeune Occitanie Fuite présumée de 318 751 données liées à la Carte Jeune Occitanie : risques, prudence et enjeu cyber pour les élèves et les parents.

FIOD : deux arrestations dans une affaire de sanctions Deux suspects arrêtés pour soupçon de contournement des sanctions européennes contre la russie. 800 serveurs saisis.

Polymarket face au soupçon d’initiés Polymarket visé par une affaire d’initié Google et une interdiction en Espagne : enjeux cyber et renseignement.

À 22 ans, son identité est piratée : 400 000 euros de dette Une jeune française de 22 ans ouvre des comptes pour un faux ami : son identité sert à détourner des centaines de milliers d’euros.

SocGholish : coup dur contre Evil Corp Operation Endgame neutralise SocGholish, nettoie 14 971 sites WordPress et vise l’accès initial lié à Evil Corp.

ShinyHunters, l’extorsion par saturation ShinyHunters diffuse des données volées non-stop et impose une extorsion publique durable aux grandes organisations depuis 6 mois.

Autosur exposé par une nouvelle fuite Fuite Autosur : données clients, véhicules et contrôleurs exposées, avec risque de phishing ciblé.

INTERPOL alerte sur l’explosion cyber en Asie INTERPOL décrit une hausse majeure des fraudes, rançongiciels, DDoS et deepfakes en Asie-Pacifique.

';--	Identity Leaked

Madison Square Garden Sports - 9,796,738 breached accounts In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign. The group later published the alleged data, which included almost 10M unique email addresses spanning staff and customers, along with extensive personal, employment and customer relationship information.

JCPenney - 368,418 breached accounts In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from JCPenney through the exploitation of a cri...

Ralph Lauren - 139,903 breached accounts In June 2026, fashion retailer Ralph Lauren was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published hundreds of gigabytes of data they claimed was obtained from the organisation's Salesforce instance, including 140k unique email addresses along with names, phone numbers, genders and age groups.

Operation Endgame 4.0 - 153,527 breached accounts On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation, a prolific malware distribution network used to compromise systems and facilitate further cybercrime. Coordinated by international law enforcement agencies with support from Europol and Eurojust, the operation remediated almost 15,000 compromise...

CFGI - 248,235 breached accounts In March 2026, the financial consulting and advisory firm CFGI was the target of a ShinyHunters "pay-or-leak" extortion campaign. The group subsequently publicised data allegedly obtained from CFGI comprising corporate contact information, including 243k unique email addresses, names, phone numbers and physical addresses.

June 2026 Stealer Logs - 56,278,397 breached accounts In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across hundreds of millions of stealer log records. The data also contained 124M unique passwords, which have been added to Pwned Passwords and are now searchable. Individuals can view any records captured against their email address in

Berkadia - 305,216 breached accounts In March 2026, the commercial real estate finance company Berkadia was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Berkadia's Salesforce instance, including over 300k unique email addresses as well as names, physical addresses and phone numbers, among other data.

Infinite Campus - 137,123 breached accounts In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Infinite Campus, containing 137k unique email addresses along with names, phone numbers, physical addresses and support tickets.

University of Nottingham - 454,635 breached accounts In June 2026, the University of Nottingham was the target of a cyber attack, later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with extensive personal information including names, addresses, phone numbers, ethnicities, disabilities, passport numbers and information relating to academic enrolme...

Baker Distributing - 102,935 breached accounts In May 2026, the HVAC/R wholesale distributor Baker Distributing Company was added to the ShinyHunters data extortion group's "pay or leak" site. In early June, the group publicly published data they claimed had been obtained from Baker's SharePoint and Salesforce infrastructure including 103k unique email addresses along with names, physical addresses, phone numbers and tickets relating to the company's HV...