BreachAware ®

Breach Exposure Monitoring | Smarter Privacy Starts with Awareness

[BreachAware ® @BreachAware]

https://t.co/3RRiXtbJMh

[Cyber Security News @The_Cyber_News]

🔐Instagram Meta AI Vulnerability Allegedly Enables Password Reset for Accounts

Source: https://t.co/bxzWfGoOpO

A critical flaw in Meta's AI-powered account recovery tool on Instagram allowed attackers to hijack high-value accounts by tricking the chatbot into forwarding password reset codes with no verification required.

Attackers engaged the AI chatbot in conversation and prompted it to forward password reset codes to unauthorized parties, entirely bypassing identity verification checks. The flaw stemmed from insufficient controls in how the AI processed account recovery requests, effectively allowing anyone who knew a target's username to initiate the takeover process.

#cybersecuritynews

[BleepingComputer @BleepinComputer]

Microsoft confirms outage affecting MFA, My Sign-Ins platform
https://t.co/QlFAk6zupv

https://t.co/QlFAk6zupv

[BreachAware ® @BreachAware]

Not trying to be sensationalist, and certainly not ambulance chasing, but this is a useful example of why property-sector data deserves more attention from a cybersecurity perspective covering the #supplychain implications.

https://t.co/zaR0pemlhw

[Dark Web Intelligence @DailyDarkWeb]

🇬🇧 United Kingdom: Alleged Rightmove Property Owner Database Advertised for Sale

* A threat actor is advertising a dataset allegedly originating from Rightmove, one of the United Kingdom's largest real estate platforms
* The listing claims to contain approximately 357,000 records related to property owners and real estate leads
* Advertised personal information includes names, email addresses, telephone numbers, mobile numbers, mailing addresses, geographic data, account identifiers, and communication preferences
* The seller further claims the dataset contains property ownership and address-related records, including geolocation data, mailing information, and associated property details
* Most notably, the listing alleges the presence of authentication-related information such as login emails, password hashes, password reset tokens, MFA enrollment status, account lockout information, and other security-related metadata
* The dataset is being marketed as a structured collection of contact, property, and account information

Analyst Note:
Real estate platforms contain highly valuable data because they aggregate personal identities, property ownership information, financial interests, and contact details. If the claims are legitimate, the combination of property records and authentication-related metadata could significantly increase the risk of account takeover attempts, targeted phishing, business email compromise, real estate fraud, and identity theft. Threat actors frequently leverage property ownership data to build detailed profiles of high-value targets. At the time of publication, the authenticity and origin of the alleged dataset remain unverified.

#DDW #Intelligence #Rightmove #DarkWeb

[International Cyber Digest @IntCyberDigest]

‼️ Dutch and French authorities have taken down "First VPN," a criminal VPN service that openly marketed itself to cybercriminals on dark web forums.

Every user received a notification on takedown that the service is gone and they have been identified.

Before pulling the service offline, police had full visibility into the criminal traffic of every user. 33 servers were seized. 83 intelligence packages were shared with ongoing investigations through a Europol Operational Taskforce.

First VPN advertised directly on known cybercrime forums and promised users no logs, no cooperation with justice, and no jurisdiction. Customers used it for ransomware attacks, system intrusions, and account hijacking.

The takedown ran on 19 and 20 May 2026, led by the Dutch Team High Tech Crime and the French authorities, with coordination support from Eurojust and Europol. Action days hit Ukraine, Switzerland, the UK, Romania, and Luxembourg simultaneously. The administrator was interrogated in Ukraine at France's request.

[BreachAware ® @BreachAware]

Love fades. Data doesn’t

https://t.co/L642kPzvS7

[BreachAware ® @BreachAware]

The partnership works because BreachAware naturally extends Velocity’s incident response capability into continuous external exposure management and post-incident risk reduction. This partnership will be a differentiator.

https://t.co/DC14kYsvCK

[The Record From Recorded Future News @TheRecord_Media]

The UK government is poised to revisit its main cybercrime law after years of warnings that it is outdated and hinders security research https://t.co/E4XKqvLfyM

[Dominic Alvieri @AlvieriD]

BREAKING

Vodafone leaked by Lapsus

[BleepingComputer @BleepinComputer]

Police shut down reboot of Crimenetwork marketplace, arrest admin
https://t.co/xSF8qdZkpc

https://t.co/xSF8qdZkpc

[BreachAware ® @BreachAware]

Most organisations have never heard of a revocation log… but hackers absolutely have. Another data type that BreachAware monitors. Uncommon to uncover, but valuable intelligence for an attacker when exposed.

https://t.co/MLkEwIe3JZ

[Dark Web Informer @DarkWebInformer]

‼️🇬🇧 LAPSUS$ Group has leaked the data of Vodafone.

[Karl Flinders @Karlfl]

The Post Office had evidence that subpostmaster Janette Armour was reporting problems with its ECCO+ accounting system in the early 1990s — but ignored her https://t.co/9RK4y8lkdn #PostOfficeScandal

[BreachAware ® @BreachAware]

Slow down. Think again.
https://t.co/AyaVQMimSu

[BleepingComputer @BleepinComputer]

Money launderer linked to $230M crypto heist gets 70 months in prison
https://t.co/JQGMuaExbR

https://t.co/JQGMuaExbR

[BleepingComputer @BleepinComputer]

UK probes Telegram, teen chat sites over CSAM sharing concerns
https://t.co/IfFRLlc7EF

https://t.co/IfFRLlc7EF