The vulnerability, identified as an insecure direct object reference (IDOR), allowed any logged-in user to access another student's data, including names, dates of birth, addresses, pictures and school details.
Samaneh Ghandali, 41, her husband Mohammadjavad Khosravi, 40, and her sister Soroor Ghandali, 32, all Iranian nationals residing in San Jose, are accused of conspiring to steal trade secrets related to mobile computer processors from Google and other companies.
Adidas has launched an investigation into a potential data breach at one of its independent licensing partners after a threat actor purporting to be the Lapsus$ Group claimed to have pilfered data from the leading athletic apparel and footwear company's extranet earlier this week, The Register reports.
Major French multinational aerospace, defense, and security corporation Safran Group has repudiated being impacted by a cyberattack, emphasizing that allegedly stolen sensitive data from its systems had been inadvertently exposed by a third-party provider, reports Cybernews.
BleepingComputer reports that U.S. blockchain-based fintech firm Figure Technology Solutions was noted by data breach notification service Have I Been Pwned to have had data from 967,200 accounts exfiltrated following a ShinyHunters social engineering attack against an employee that was initially reported by the company to have only affected a "limited number of files."
Online vehicle research and shopping website CarGurus had 1.7 million corporate files allegedly stolen by the ShinyHunters hacking operation, which threatened to expose pilfered records should no negotiations materialize by Feb. 20, according to The Register.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.