🚨‼️ EXCLUSIVE: Zoom was breached by threat actor Mr. Raccoon.

A South Korean employee installed an infostealer via a fake Zoom-themed website, delivered through a spoofed security email.

Mr. Raccoon told us: "Their security was terrible, but Okta saved them."

We asked Zoom for comment. They told us: "will get back to you on a comment shortly."

It's been almost 24 hours. Still no comment.

Update:

A Zoom spokesperson just told us:

"We conducted an investigation and have not identified any evidence of access to Zoom’s system or data beyond a response to a phishing attempt, which granted limited access to a single employee’s third-party dashboard. We have not identified any evidence of further access to Zoom’s system or data."

‼️ GangExposed RU claims to have names, connections and photos of the Iranian Handala threat actor who breached Kash Patel's Gmail.

This information is worth $10,000,000.

All they're asking in return is for the FBI to arrest members of the Conti ransomware group.

🚨 MASSIVE CYBERATTACK: The EU Commission, ENISA, and the DG for Digital Services have been compromised by threat actor ShinyHunters.

Leaked data includes:
▪️ Emails & attachments
▪️ Full SSO user directory
▪️ DKIM signing keys
▪️ AWS config snapshots
▪️ NextCloud/Athena data
▪️ Internal admin URLs

It's a mess!

We suspect the threat actor compromised the EU's AWS environment. We reached out to the attackers for comment, but they refused to share any details about the breach.

‼️ S&P Global, responsible for the S&P 500, was compromised by TeamPCP during recent supply chain attacks (Trivy / LiteLLM).

We’ve known spglobal[.]com was on their list for some time now and didn’t get any reply from their press contact.

🚨‼️ BREAKING: Databricks allegedly compromised in a TeamPCP supply chain attack.

Databricks is the leading cloud-based data analytics platform: used by organizations worldwide to manage massive datasets.

We notified them last week. They scaled up to investigate. We haven't heard back since.