DEV Community: BeyondMachines

Moody Bible Institute Data Breach Exposes 2.3 Million Records via PeopleSoft Zero-Day

BeyondMachines — Tue, 07 Jul 2026 11:01:08 +0000

Summary

Moody Bible Institute suffered a large-scale data breach after the ShinyHunters group exploited a zero-day vulnerability in Oracle PeopleSoft to exfiltrate 23 gigabytes of sensitive records. The incident exposed the personal information of 2.3 million individuals after the institute did not respond to extortion demands.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Credit Acceptance Corp. Data Breach Exposes Social Security Numbers

BeyondMachines — Tue, 07 Jul 2026 10:01:07 +0000

Summary

Credit Acceptance Corp. reports a data breach discovered on June 4, 2026, which exposed the names and Social Security numbers of an undisclosed number of consumers. The company has engaged cybersecurity firms for an investigation and is offering 24 months of free identity monitoring services to affected individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

OPNsense Patches Critical Root Vulnerability in GeoIP Alias Importer

BeyondMachines — Tue, 07 Jul 2026 09:01:07 +0000

Summary

OPNsense released critical security updates to fix a root remote code execution vulnerability (CVE-2026-57155) in its GeoIP alias importer. The update also patches several other flaws including XPath injection and stored cross-site scripting.

Take Action:

Make sure your OPNsense firewall's management interface is isolated from the internet and reachable only from trusted networks, since even a low-level user with alias-editing rights can exploit this flaw. Update to OPNsense 26.1.11 or 26.4.1p1 ASAP. If you can't update immediately, lock down management access and limit alias-editing permissions to trusted administrators only.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Henry Rossi & Co. Data Breach Exposes Sensitive Audit Records for Steamfitters Union

BeyondMachines — Tue, 07 Jul 2026 08:01:09 +0000

Summary

Henry Rossi & Co., LLP suffered a data breach in January 2026 that exposed the names, Social Security numbers, and birth dates of 2,720 individuals associated with the Steamfitters Local #449 Medical & Benefit Fund.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

State of (in)security - Week 27, 2026

BeyondMachines — Mon, 06 Jul 2026 18:01:08 +0000

Summary

During week 27 of 2026 (June 29–July 6), cybersecurity activity rose to 17 advisories and 28 incidents affecting roughly 6.6 million people, led by the 4.38 million-record Aflac Japan breach. Unauthorized access, ransomware, and software-vulnerability exploits drive most incidents. Most impacted industries are healthcare, government, and financ. The week saw reports of exploitation of critical flaws in Oracle E-Business Suite, SharePoint, and SimpleHelp RMM, and mass patches from Adobe, Apple, Google, and others. We also see the first reported end-to-end ransomware attack executed by an AI agent (JadePuffer).

Take Action:

Patch your Chrome and Chromium based browsers. Iit's trivial to do: the browser updates itself when you close and reopen it, and all your tabs come back. Then focus on patching key flaws in phpBB, WebSphere, JetBrains, OpenWrt routers, Kemp LoadMaster.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Texas Hearing Institute Reports Ransomware Attack Impacting 30,000 Residents

BeyondMachines — Mon, 06 Jul 2026 16:01:07 +0000

Summary

The Texas Hearing Institute suffered a ransomware attack claimed by the Interlock group, resulting in the alleged theft of 540 GB of data and compromising the personal and medical information of nearly 30,000 individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

FortiBleed Campaign Exposes UK Government Credentials

BeyondMachines — Mon, 06 Jul 2026 10:01:08 +0000

Summary

Threat actors used stolen and reused credentials in a global Fortinet-focused campaign known as FortiBleed, affecting more than 86,000 devices across 194 countries including UK Government official credentials.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

North Media Subsidiary SDR Hit by Unauthorized Network Access

BeyondMachines — Mon, 06 Jul 2026 09:01:07 +0000

Summary

North Media's Swedish subsidiary, SDR Svensk Direktreklam, suffered an IT security incident involving unauthorized access to its internal infrastructure. The company is investigating potential data exposure. It continues to maintain normal business operations.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Woori Bank Discloses Data Leak Affecting 17,500 Customers Following Third-Party Developer Negligence

BeyondMachines — Mon, 06 Jul 2026 08:01:07 +0000

Summary

Woori Bank suffered a data leak affecting 17,551 customers after an employee at an external development firm failed to delete data from a 2024 NFT project and shared it on a public platform. The bank has reported the incident to regulators and implemented fraud monitoring to protect affected individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

WatchGuard Patches Third Critical IKEv2 RCE in Firebox Appliances

BeyondMachines — Sun, 05 Jul 2026 08:01:07 +0000

Summary

WatchGuard patched a critical pre-authentication RCE vulnerability (CVE-2026-13368) in Firebox appliances. The vulnerability allows unauthenticated attackers to gain administrative control. Legacy T15 and T35 models currently do not have a patch.

Take Action:

If you use WatchGuard Firebox firewalls, read the advisory in detail. Plan a very quick update to Fireware OS 2026.2.1 or 12.12.1. If you run legacy T15/T35 models, disable external LDAP authentication for IKEv2 as a temporary fix, and if you're on version 11.x, migrate to supported hardware since no patch is coming.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

IBM Patches High-Severity XSS Flaws in WebSphere Application Server

BeyondMachines — Sat, 04 Jul 2026 10:01:46 +0000

Summary

IBM released security updates for WebSphere Application Server to fix three cross-site scripting vulnerabilities, including a high-severity flaw on the login page that allows attackers to hijack administrative sessions.

Take Action:

Restrict access to your WebSphere administrative console so it's only reachable from trusted internal networks, and enable multi-factor authentication on all admin accounts. Then apply IBM's interim fix for APAR PH71757 ASAP, and plan to upgrade to Fix Pack 9.0.5.29 (for version 9.0) or 8.5.5.30 (for version 8.5) as soon as they're released.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

JetBrains Patches Multiple Flaws Including Critical Across Their App Ecosystem

BeyondMachines — Sat, 04 Jul 2026 09:01:46 +0000

Summary

JetBrains released security updates for 16 vulnerabilities across its on-premise ecosystem, including critical authentication bypass and remote code execution flaws in Hub, YouTrack, and TeamCity. These vulnerabilities allow attackers to hijack administrative accounts and compromise development environments/

Take Action:

If you run any on-premise JetBrains servers (Hub, YouTrack, TeamCity, or IntelliJ-based IDEs), update every one of them to the fixed versions. There are multiple critical flaws which will be exploited very soon. After updating TeamCity, rotate all your build tokens and credentials to lock out anyone who may have already gotten in.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines