Breach

Major non-fungible token marketplace OpenSea has confirmed being hit by a widespread data breach that resulted in the exposure of users' and newsletter subscribers' email addresses, TechCrunch reports.

BleepingComputer reports that threat actors behind the XFiles info-stealer have updated the malware to include a delivery module exploiting the Follina vulnerability, tracked as CVE-2022-30190, to facilitate payload downloads and execution.

Flagstar Bank acknowledgment hackers gained access to customers' personal information is a recent of financial institutions becoming leading targets for cyber criminals.

This week’s healthcare data breach roundup includes additions to the Eye Care Leader’s incident and is led by an ongoing cyberattack at Jack Hughston Memorial Hospital in Georgia.

AMD has disclosed launching an investigation over the RansomHouse cybercrime operation's claims that it was able to steal 450GB of data from a breach against the semiconductor firm in January.

Hacktivist group Gonjeshke Darande has claimed to have deployed cyberattacks against three Iranian steel companies, which has prompted suspended operations at Khuzestan Steel, one of the largest steel manufacturers in the country.

Carnival Cruises will be paying $1.25 million to settle a lawsuit filed by 46 attorneys general related to a data breach in 2019 that compromised data from 180,000 employees and clients across the U.S.

Concern raised over incident-reporting regulations for critical infrastructure and publicly traded companies under development by CISA and the SEC, respectively, may overlap.