GoKawiil
Tech News
Security researcher Robert Wiggins found a hardcoded database password buried in the source code of Applebee's Android app, which has over a million downloads. The credential granted access to a customer database containing names, emails, birth dates, phone numbers, ZIP codes and veteran status. Applebee's confirmed to TechCrunch it has fixed the issue, and TechCrunch verified the flaw before publishing.
A hacker group that claimed responsibility for breaching University of New Mexico Hospital's systems later apologized and said it would offer affected patients $2,500. The group stated it would provide a decryption key for the hospital's data but said it would retain copies of the stolen information.
Japan Airlines disclosed that unauthorized access to Amadeus's Passenger Service System, which handles reservations and check-in, occurred between August 2023 and September 2026 and exposed data on roughly 92,000 customers. For most, exposed details included reservation codes, names, flight dates, routes and travel class, while about 2,000 customers also had contact details, passport numbers, frequent flyer numbers and ticket information exposed. JAL said credit card numbers and passwords were not compromised and that Amadeus has since applied security fixes, with flight operations unaffected.
A hacker using the handle Department of Peace has published personally identifiable information for more than 40,000 Department of Homeland Security employees, obtained in a previously undisclosed breach of DHS's Okta single sign-on system. The leaked records include names, job titles, work emails, cell numbers and office locations, with over 21,000 tied to Customs and Border Protection staff and roughly 10,000 tied to ICE and its Homeland Security Investigations unit. The hacker left a note saying the data was released because the agency holds information on the public.
A hacker going by 'Department of Peace' accessed Okta, the identity management service used by the Department of Homeland Security, and stole personal data on more than 41,000 employees. The leaked records include names, job titles, phone numbers, emails and office locations for staff at CBP, ICE, CISA, USCIS and HSI, and also reveal which DHS groups have access to surveillance tools like Mobile Fortify and PenLink. The data was passed to researcher maia arson crimew and published by the nonprofit Distributed Denial of Secrets as the 'Icepick' dataset.
Sony Network Communications, a Sony Group subsidiary operating as a Japanese ISP, confirmed that unauthorized access to its So-net member database on October 19 exposed 2,585,481 customer records, including names, phone numbers, emails, user IDs, birth dates, gender and connection IDs. A separate set of 54,401 email accounts had passwords exposed. The breach also affects NTT Docomo's Hikari service customers, since Sony Network Communications provides that service under contract.
AT&T agreed to pay $177 million to settle a class-action lawsuit over 2019 and 2024 data breaches that exposed personal information of more than 110 million customers. More than 4.9 million people filed claims before the December deadline, and the company could still appeal the settlement until November 2.
Following last week's discovery of two major PHP vulnerabilities by a team using an OpenAI model, engineers worldwide rushed to patch websites, with some European government sites temporarily going offline during updates. Reuters reports that the PHP Foundation, the nonprofit responsible for coordinating security fixes for the software powering roughly 70% of websites, has only one full-time staff member, Executive Director Elizabeth Barron, supported by about 14 part-time contractors.
GMO Internet is investigating suspected unauthorized access to its Onamae cloud desktop service, which provides virtualized desktops to financial traders. The company says an attacker has published data allegedly tied to customers and its business, though it has not fully verified the leak's contents, and up to 27,000 servers may be affected. GMO has urged customers to reset passwords after reports of unauthorized activity on trading accounts.
Warp CEO Zach Lloyd disclosed that a third-party vendor in Warp's infrastructure was breached, exposing AI agent decision logs and user telemetry data. Lloyd estimates roughly 1% of Warp's over 800,000 users may be affected, and the company says it detected and mitigated the intrusion within hours of discovery on Friday. Warp has engaged CrowdStrike, notified law enforcement and affected users, and contacted the vendor, though it has not confirmed whether source code, prompts or credentials were exposed.
French energy company ENGIE disclosed that attackers accessed customer data by breaching a marketing tool used by its business partners for prospecting and promoting energy offers. The company said its internal IT systems were not affected, the incident is limited to customers in France, and stolen data includes names, addresses, phone numbers, contract numbers and metering IDs but no banking details.
The University of Copenhagen confirmed hackers breached one of its test environments, detecting the intrusion last Tuesday and disclosing it days later. Exposed data for roughly 525,000 people may include full names, national identity numbers, phone numbers and email addresses, while a later update added 20,000 staff and students whose campus access PIN codes were also compromised.