Major Data Breaches & Leaks

Major Data Breaches & Leaks

Capcom Customer Breach: Gaming publisher Capcom confirmed a breach of its CAPCOM ID system exposing ~11.7 million email addresses and account identifiers. A subset of account passwords was forcibly altered by unauthorized actors.
Quest Diagnostics Record Exposure: Clinical lab leader Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager system, exposing patient records and lab order details.
Railway Credential Compromise: Developer cloud host Railway issued an urgent security notice advising developers to immediately rotate environment variables and secrets following unauthorized access to internal credential stores.

Critical Technical Vulnerabilities & Exploits
PHP2Shell Zero-Days: Threat actors—including operators behind the Mirai botnet—are actively attempting to exploit critical remote code execution (RCE) flaws in PHP (dubbed PHP2Shell).

BlackX UEFI Bootkit: Security researchers uncovered a bootkit capable of exploiting the "Baton Drop" flaw to bypass hardware-level Secure Boot, effectively neutralizing antivirus tools before the OS boots.

HPE ArubaOS Vulnerabilities: Hewlett Packard Enterprise released emergency patches addressing 72 vulnerabilities in ArubaOS—including eight maximum-severity flaws that permit remote authentication bypass and execution.

AI & Supply Chain Attack Vectors

Developer AI Agent Hijacking: A novel prompt-injection vector demonstrates how dropping a malicious AGENTS.md file into local directories can manipulate local AI coding tools into silently executing unverified actions and packages in the background.

LiteLLM Supply Chain Poisoning: The Python library LiteLLM was targeted via stolen OAuth tokens on PyPI, leading to malicious Docker images designed to exfiltrate developer secrets and environment keys.

Immediate Action Items

Rotate Secrets: If you use Capcom services, Railway, or LiteLLM, reset passwords and rotate all API keys and environment variables right away.

Patch Systems: Priority patching required for PHP environments, ArubaOS network devices, and Atlassian platforms.

Audit AI Workflows: Exercise strict oversight when feeding external repositories, file directories, or markdown files to autonomous AI development tools.

Are your engineering or SecOps teams seeing increased PHP scanning or prompt-injection attempts in the wild?

#Cybersecurity #Infosec #DataBreach #AppSec #DevSecOps #AIGovernance #ThreatIntelligence