home.social

#fulcrumsec — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #fulcrumsec, aggregated by home.social.

fetched live
  1. 📢 Manchester Airports Group : 8,8 millions de clients exposés via une clé API Iterable dans le JS public

    Il analyse techniquement la violation de données annoncée le 27 août 2026 par Manchester Airports Group (MAG), qui exploite les aéroports de Manchester, Stansted et East Midlands.

    📖 cyberveille : cyberveille.ch/posts/2026-09-1
    🌐 source : scotthelme.co.uk/no-hacking-re
    🟡 vérification factuelle moyenne
    #Iterable #FulcrumSec #Cyberveille

  2. 📢 FulcrumSec revendique le vol de 86 Go de données chez Manchester Airports Group

    BleepingComputer, publié le 30 août 2026. Manchester Airports Group (MAG), le plus grand opérateur aéroportuaire du Royaume-Uni, avait divulgué le 27 août 2026 une violation de données impliquant des informations clients liées aux aéroports de Manchester, Londres…

    📖 cyberveille : cyberveille.ch/posts/2026-09-0
    🌐 source : bleepingcomputer.com/news/secu
    🟡 vérification factuelle moyenne
    #FulcrumSec #aéroport #Cyberveille

  3. After claiming responsibility for the Manchester Airports Group breach, extortion group FulcrumSec leaked customer profiles, booking histories, messages, and vehicle details from Manchester, Stansted, and East Midlands airports.

    Listen/Read: hackread.com/fulcrumsec-leaks-

    #DataBreach #Cybersecurity #FulcrumSec #CyberCrime #Manchester

  4. After claiming responsibility for the Manchester Airports Group breach, extortion group FulcrumSec leaked customer profiles, booking histories, messages, and vehicle details from Manchester, Stansted, and East Midlands airports.

    Listen/Read: hackread.com/fulcrumsec-leaks-

    #DataBreach #Cybersecurity #FulcrumSec #CyberCrime #Manchester

  5. After claiming responsibility for the Manchester Airports Group breach, extortion group FulcrumSec leaked customer profiles, booking histories, messages, and vehicle details from Manchester, Stansted, and East Midlands airports.

    Listen/Read: hackread.com/fulcrumsec-leaks-

    #DataBreach #Cybersecurity #FulcrumSec #CyberCrime #Manchester

  6. After claiming responsibility for the Manchester Airports Group breach, extortion group FulcrumSec leaked customer profiles, booking histories, messages, and vehicle details from Manchester, Stansted, and East Midlands airports.

    Listen/Read: hackread.com/fulcrumsec-leaks-

    #DataBreach #Cybersecurity #FulcrumSec #CyberCrime #Manchester

  7. FulcrumSec Hack Exposes 86 GB of Manchester Airports Data

    Manchester Airports Group swiftly sprang into action after a hack, reassuring customers that they've taken robust measures to safeguard their info and reaching out to those affected, including those with upcoming bookings, to offer extra support. Meanwhile, hackers FulcrumSec claimed responsibility, boasting of swiping 86 GB of sensitive…

    osintsights.com/fulcrumsec-hac

    #DataBreach #EmergingThreats #Ransomware #Fulcrumsec #ManchesterAirports

  8. 📢 LexisNexis suspend ses services après une activité suspecte sur des serveurs tiers

    🔍 Contexte de l'incident : LexisNexis, société mondiale d'analyse de données fournissant des services juridiques, commerciaux, réglementaires et de gestion des risques, a détecté une activité inhabituelle sur des serveurs hébergés et gérés par un prestataire tiers non…

    📖 cyberveille : cyberveille.ch/posts/2026-08-1
    🌐 source : bleepingcomputer.com/news/secu
    🟢 vérification factuelle haute
    #LexisNexis #FulcrumSec #Cyberveille

  9. 📢 Des groupes ransomware utilisent l'IA pour amplifier leurs négociations d'extorsion
    📝 📰 Cet article est une newsletter d'analyse publiée le 16 juillet 2026 par Risky Business (Tom Uren), couvrant l'évolution...
    📖 cyberveille : cyberveille.ch/posts/2026-07-2
    🌐 source : risky.biz/srsly-risky-biz-rans
    #DragonForce #FulcrumSec #Cyberveille

  10. NEW, by me:

    Global Schools Holdings Cites Two Injunctions in a Bid to Chill Our Reporting. It Won't Work.

    databreaches.net/2026/07/02/gl

    Another day, another #legalthreat.

    If you're a solo blogger or small outlet, don't panic just because you receive an injunction. They may have no jurisdiction over you, no matter how intimidating they may sound.

    #GlobalSchoolsGroup #GlobalSchoolsHoldings #databreach #injunctions #FulcrumSec #freepress #pressfreedom #jursidiction #chillingeffects

    @zackwhittaker @campuscodi

  11. NEW, by me:

    Global Schools Holdings Cites Two Injunctions in a Bid to Chill Our Reporting. It Won't Work.

    databreaches.net/2026/07/02/gl

    Another day, another #legalthreat.

    If you're a solo blogger or small outlet, don't panic just because you receive an injunction. They may have no jurisdiction over you, no matter how intimidating they may sound.

    #GlobalSchoolsGroup #GlobalSchoolsHoldings #databreach #injunctions #FulcrumSec #freepress #pressfreedom #jursidiction #chillingeffects

    @zackwhittaker @campuscodi

  12. NEW, by me:

    Global Schools Holdings Cites Two Injunctions in a Bid to Chill Our Reporting. It Won't Work.

    databreaches.net/2026/07/02/gl

    Another day, another #legalthreat.

    If you're a solo blogger or small outlet, don't panic just because you receive an injunction. They may have no jurisdiction over you, no matter how intimidating they may sound.

    #GlobalSchoolsGroup #GlobalSchoolsHoldings #databreach #injunctions #FulcrumSec #freepress #pressfreedom #jursidiction #chillingeffects

    @zackwhittaker @campuscodi

  13. NEW, by me:

    Global Schools Holdings Cites Two Injunctions in a Bid to Chill Our Reporting. It Won't Work.

    databreaches.net/2026/07/02/gl

    Another day, another #legalthreat.

    If you're a solo blogger or small outlet, don't panic just because you receive an injunction. They may have no jurisdiction over you, no matter how intimidating they may sound.

    #GlobalSchoolsGroup #GlobalSchoolsHoldings #databreach #injunctions #FulcrumSec #freepress #pressfreedom #jursidiction #chillingeffects

    @zackwhittaker @campuscodi

  14. 𝗚𝗹𝗼𝗯𝗮𝗹 𝗦𝗰𝗵𝗼𝗼𝗹𝘀 𝗚𝗿𝗼𝘂𝗽 𝗮𝗻𝗱 𝗙𝘂𝗹𝗰𝗿𝘂𝗺𝗦𝗲𝗰: 𝗔 𝗠𝗮𝘀𝘀𝗶𝘃𝗲 𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵 𝗮𝗻𝗱 𝘁𝗵𝗲 𝗪𝗼𝗿𝗹𝗱𝘄𝗶𝗱𝗲 𝗣𝘂𝘀𝗵 𝘁𝗼 𝗦𝘂𝗽𝗽𝗿𝗲𝘀𝘀 𝗥𝗲𝗽𝗼𝗿𝘁𝗶𝗻𝗴 𝗼𝗻 𝗜𝘁

    Among the statements attributed to FulcrumSec are allegations of particularly poor security practices. The group claims to have identified administrative credentials reused across numerous systems, passwords stored in plaintext, #AWS access keys embedded directly within application code, and databases relying on credentials that had reportedly remained unchanged for years.

    suspectfile.com/global-schools

    #Data_Breach #FulcrumSec #Global_Schools_Group #GSG #LedgerWraith #Ransomware

  15. 𝗚𝗹𝗼𝗯𝗮𝗹 𝗦𝗰𝗵𝗼𝗼𝗹𝘀 𝗚𝗿𝗼𝘂𝗽 𝗮𝗻𝗱 𝗙𝘂𝗹𝗰𝗿𝘂𝗺𝗦𝗲𝗰: 𝗔 𝗠𝗮𝘀𝘀𝗶𝘃𝗲 𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵 𝗮𝗻𝗱 𝘁𝗵𝗲 𝗪𝗼𝗿𝗹𝗱𝘄𝗶𝗱𝗲 𝗣𝘂𝘀𝗵 𝘁𝗼 𝗦𝘂𝗽𝗽𝗿𝗲𝘀𝘀 𝗥𝗲𝗽𝗼𝗿𝘁𝗶𝗻𝗴 𝗼𝗻 𝗜𝘁

    Among the statements attributed to FulcrumSec are allegations of particularly poor security practices. The group claims to have identified administrative credentials reused across numerous systems, passwords stored in plaintext, #AWS access keys embedded directly within application code, and databases relying on credentials that had reportedly remained unchanged for years.

    suspectfile.com/global-schools

    #Data_Breach #FulcrumSec #Global_Schools_Group #GSG #LedgerWraith #Ransomware

  16. 𝗚𝗹𝗼𝗯𝗮𝗹 𝗦𝗰𝗵𝗼𝗼𝗹𝘀 𝗚𝗿𝗼𝘂𝗽 𝗮𝗻𝗱 𝗙𝘂𝗹𝗰𝗿𝘂𝗺𝗦𝗲𝗰: 𝗔 𝗠𝗮𝘀𝘀𝗶𝘃𝗲 𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵 𝗮𝗻𝗱 𝘁𝗵𝗲 𝗪𝗼𝗿𝗹𝗱𝘄𝗶𝗱𝗲 𝗣𝘂𝘀𝗵 𝘁𝗼 𝗦𝘂𝗽𝗽𝗿𝗲𝘀𝘀 𝗥𝗲𝗽𝗼𝗿𝘁𝗶𝗻𝗴 𝗼𝗻 𝗜𝘁

    Among the statements attributed to FulcrumSec are allegations of particularly poor security practices. The group claims to have identified administrative credentials reused across numerous systems, passwords stored in plaintext, #AWS access keys embedded directly within application code, and databases relying on credentials that had reportedly remained unchanged for years.

    suspectfile.com/global-schools

    #Data_Breach #FulcrumSec #Global_Schools_Group #GSG #LedgerWraith #Ransomware

  17. NEW by me:

    While digging into the High Court of Bombay injunction sought by Global Schools Group (GSG) against FulcrumSec that I reported yesterday, I discovered a second injunction filed by a Singapore court.

    Two injunctions in two countries in 24 hours.

    Each one was worded somewhat differently and listed different defendants or respondents.

    As an odd note: it appears that GSG's law firm may have forgotten to send FulcrumSec the Bombay court injunction of June 12 until after I reported on it yesterday. FulcrumSec had received the Singapore injunction on June 13, but knew nothing about any other injunction until I asked them about it yesterday. Less than 24 hours after I published about the Bombay injunction, the law firm sent it to FulcrumSec along with the attached files that the threat actors have now shared with me.

    But what did these injunctions actually accomplish? Read my new post:

    Global Schools Group Obtained Two Court Injunctions That Didn’t Seem to Change Much—and Might Backfire

    databreaches.net/2026/06/20/gl

    @zackwhittaker @campuscodi @amvinfe

    #FulcrumSec #GlobalSchoolsGroup #GIIS #injunction #databreach #hackandleak #extortion #chillingeffects #pressfrredom #legalthreats #censorship

  18. NEW by me:

    While digging into the High Court of Bombay injunction sought by Global Schools Group (GSG) against FulcrumSec that I reported yesterday, I discovered a second injunction filed by a Singapore court.

    Two injunctions in two countries in 24 hours.

    Each one was worded somewhat differently and listed different defendants or respondents.

    As an odd note: it appears that GSG's law firm may have forgotten to send FulcrumSec the Bombay court injunction of June 12 until after I reported on it yesterday. FulcrumSec had received the Singapore injunction on June 13, but knew nothing about any other injunction until I asked them about it yesterday. Less than 24 hours after I published about the Bombay injunction, the law firm sent it to FulcrumSec along with the attached files that the threat actors have now shared with me.

    But what did these injunctions actually accomplish? Read my new post:

    Global Schools Group Obtained Two Court Injunctions That Didn’t Seem to Change Much—and Might Backfire

    databreaches.net/2026/06/20/gl

    @zackwhittaker @campuscodi @amvinfe

    #FulcrumSec #GlobalSchoolsGroup #GIIS #injunction #databreach #hackandleak #extortion #chillingeffects #pressfrredom #legalthreats #censorship

  19. NEW by me:

    While digging into the High Court of Bombay injunction sought by Global Schools Group (GSG) against FulcrumSec that I reported yesterday, I discovered a second injunction filed by a Singapore court.

    Two injunctions in two countries in 24 hours.

    Each one was worded somewhat differently and listed different defendants or respondents.

    As an odd note: it appears that GSG's law firm may have forgotten to send FulcrumSec the Bombay court injunction of June 12 until after I reported on it yesterday. FulcrumSec had received the Singapore injunction on June 13, but knew nothing about any other injunction until I asked them about it yesterday. Less than 24 hours after I published about the Bombay injunction, the law firm sent it to FulcrumSec along with the attached files that the threat actors have now shared with me.

    But what did these injunctions actually accomplish? Read my new post:

    Global Schools Group Obtained Two Court Injunctions That Didn’t Seem to Change Much—and Might Backfire

    databreaches.net/2026/06/20/gl

    @zackwhittaker @campuscodi @amvinfe

    #FulcrumSec #GlobalSchoolsGroup #GIIS #injunction #databreach #hackandleak #extortion #chillingeffects #pressfrredom #legalthreats #censorship

  20. NEW by me:

    While digging into the High Court of Bombay injunction sought by Global Schools Group (GSG) against FulcrumSec that I reported yesterday, I discovered a second injunction filed by a Singapore court.

    Two injunctions in two countries in 24 hours.

    Each one was worded somewhat differently and listed different defendants or respondents.

    As an odd note: it appears that GSG's law firm may have forgotten to send FulcrumSec the Bombay court injunction of June 12 until after I reported on it yesterday. FulcrumSec had received the Singapore injunction on June 13, but knew nothing about any other injunction until I asked them about it yesterday. Less than 24 hours after I published about the Bombay injunction, the law firm sent it to FulcrumSec along with the attached files that the threat actors have now shared with me.

    But what did these injunctions actually accomplish? Read my new post:

    Global Schools Group Obtained Two Court Injunctions That Didn’t Seem to Change Much—and Might Backfire

    databreaches.net/2026/06/20/gl

    @zackwhittaker @campuscodi @amvinfe

    #FulcrumSec #GlobalSchoolsGroup #GIIS #injunction #databreach #hackandleak #extortion #chillingeffects #pressfrredom #legalthreats #censorship

  21. I asked FulcrumSec if they would give me a breakdown of the Global Schools Group (GSG) data breach by school brand and campus. They did. The breakdown also includes by country, as GSG has schools in 10 countries.

    I've published the aggregate totals and individual school brand data in a two-part article:

    databreaches.net/2026/06/18/da

    databreaches.net/2026/06/18/da

    #FulcrumSec #databreach #hackandleak #extortion #GlobalSchoolsGroup #GSG #GIIS

  22. I asked FulcrumSec if they would give me a breakdown of the Global Schools Group (GSG) data breach by school brand and campus. They did. The breakdown also includes by country, as GSG has schools in 10 countries.

    I've published the aggregate totals and individual school brand data in a two-part article:

    databreaches.net/2026/06/18/da

    databreaches.net/2026/06/18/da

    #FulcrumSec #databreach #hackandleak #extortion #GlobalSchoolsGroup #GSG #GIIS

  23. I asked FulcrumSec if they would give me a breakdown of the Global Schools Group (GSG) data breach by school brand and campus. They did. The breakdown also includes by country, as GSG has schools in 10 countries.

    I've published the aggregate totals and individual school brand data in a two-part article:

    databreaches.net/2026/06/18/da

    databreaches.net/2026/06/18/da

    #FulcrumSec #databreach #hackandleak #extortion #GlobalSchoolsGroup #GSG #GIIS

  24. I asked FulcrumSec if they would give me a breakdown of the Global Schools Group (GSG) data breach by school brand and campus. They did. The breakdown also includes by country, as GSG has schools in 10 countries.

    I've published the aggregate totals and individual school brand data in a two-part article:

    databreaches.net/2026/06/18/da

    databreaches.net/2026/06/18/da

    #FulcrumSec #databreach #hackandleak #extortion #GlobalSchoolsGroup #GSG #GIIS