HackRead reports that more than 6.19 billion records stolen from disclosed and undisclosed data breaches around the world have been leaked by an unsecured Elasticsearch server believed to be based in Russia or a Russian-speaking country.
Global Spanish fast-fashion retailer Mango had limited customer data stolen following a cyberattack against a third-party marketing service provider, according to Cybernews.
Florida Attorney General James Uthmeier has filed a lawsuit accusing smart TV firm Roku of selling children's personal information in violation of the state's Deceptive and Unfair Trade Practices Act, as well as its Digital Bill of Rights, The Florida Phoenix reports.
The Register reports that major Japanese brewery firm Asahi Group Holdings has disclosed the potential compromise of personal data following a cyberattack late last month, which has since been claimed by the Qilin ransomware operation.
Organizations leveraging legacy Windows communication protocols Link-Local Multicast Name Resolution and NetBIOS Name Service could have their credentials pilfered without the exploitation of software flaws, according to Infosecurity Magazine.
Multiple nefarious npm, Python, and Ruby packages have been exfiltrating pilfered data to actor-controlled webhooks by exploiting Discord as a command-and-control channel, reports The Hacker News.
CyberScoop reports that the U.S. military, telecommunications firms, and leading enterprises had their sensitive information intercepted after 39 geostationary satellites used for high-speed communications and backhaul internet services were scanned using consumer-grade satellite equipment worth $600.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
