Utah-based consumer electronics accessories manufacturer ZAGG had its customers' credit card details compromised following a breach of the third-party FreshClicks app available through software-as-a-service e-commerce platform provider BigCommerce, BleepingComputer reports.
Intergovernmental space exploration body European Space Agency had its online shop compromised with a malicious script triggering a bogus Stripe payment page that sought to exfiltrate payment card details and other sensitive customer details, reports BleepingComputer.
Japan Airlines, the country's flag carrier, had over 20 domestic flights and some international trips delayed following a cyberattack, which also impacted ticket purchases and luggage services, Kyodo News reports.
The misconfigured database also included software development plans, timelines, client interactions, financial records, and communications among Builder.ai's employees.
In the enterprise security news, a final few fundings before the year closes out, Arctic Wolf buys Cylance from Blackberry for cheap, a sentence that feels very weird to say, the quiet HTTPS revolution, passkeys are REALLY catching on, resilience keeps showing up in the titles of news items, Apple Intelligence insults the BBC’s intelligence, MITRE ...
XSS is the number one threat?, fix your bugs faster, hacking VoIP systems, AI and how it may help fuzzing, hacker gift guides, new DMA attacks, hacking InTune, Rhode Island gets hacked, OpenWrt supply chain issues, we are being spied on, Germans take down botnet, Bill and Larry are speaking at Shmoocon!, and TP-Link bans.
