SailPoint Discloses GitHub Repository Breach Linked to Third-Party VulnerabilitySailPoint reports that hackers exploited a third-party application vulnerability to access a subset of its GitHub repositories on April 20, 2026. The company claims that production environments remained secure and has notified affected customers directly.****#cybersecurity #infosec #incident #databreachhttps://beyondmachines.net/event_details/sailpoint-discloses-github-repository-breach-linked-to-third-party-vulnerability-4-k-f-o-2/gD2P6Ple2L

Everest Ransomware Group Leaks 108 GB of Alleged Liberty Mutual DataThe Everest ransomware group leaked 108 GB of data allegedly stolen from Liberty Mutual, which the insurer attributes to a third-party vendor compromise.****#cybersecurity #infosec #incident #databreachhttps://beyondmachines.net/event_details/everest-ransomware-group-leaks-108-gb-of-alleged-liberty-mutual-data-v-j-o-u-4/gD2P6Ple2L

Champion Homes Data Breach: DragonForce Ransomware Leaks 44GB of DataAustralian home builder Champion Homes confirmed a data breach after the DragonForce ransomware group stole and leaked 44 GB of sensitive payroll, tender, and customer data.****#cybersecurity #infosec #incident #ransomwarehttps://beyondmachines.net/event_details/champion-homes-data-breach-dragonforce-ransomware-leaks-44gb-of-sensitive-records-w-8-2-w-y/gD2P6Ple2L

Litecoin Network Executes 13-Block Reorganization to Patch MWEB Zero-Day ExploitLitecoin developers executed a 13-block chain reorganization to reverse invalid transactions caused by a zero-day vulnerability in the MWEB privacy layer. The exploit allowed attackers to bypass validation on outdated nodes, leading to a three-hour network rollback and $600,000 in initial exposure.****#cybersecurity #infosec #incident #denialofservicehttps://beyondmachines.net/event_details/litecoin-network-executes-13-block-reorganization-to-patch-mweb-zero-day-exploit-t-7-v-6-o/gD2P6Ple2L

ShinyHunters Extortion Group Claims Breach of 1.4 Million Udemy RecordsThe ShinyHunters extortion group claims to have stolen 1.4 million records from Udemy, including PII and corporate data, using identity-based attack vectors. The group has threatened to leak the data if a ransom is not paid by April 27, 2026.****#cybersecurity #infosec #incident #databreachhttps://beyondmachines.net/event_details/shinyhunters-extortion-group-claims-breach-of-1-4-million-udemy-records-y-a-7-t-h/gD2P6Ple2L

Impac Mortgage Holdings Reports Two-Year-Old Data Breach Affecting Over 19,000 IndividualsImpac Mortgage Holdings disclosed a data breach that exposed the Social Security numbers of 19,253 individuals after an unknown actor accessed its systems in early 2024. The company waited two years after discovery to notify the public and is now offering credit monitoring services.****#cybersecurity #infosec #incident #databreachhttps://beyondmachines.net/event_details/impac-mortgage-holdings-reports-two-year-old-data-breach-affecting-over-19000-individuals-u-v-h-c-a/gD2P6Ple2L

Kloeckner Metals Corporation Reports Network Intrusion and Data ExfiltrationKloeckner Metals Corporation reported a data breach where unauthorized actors accessed its network for six days, stealing files containing names and Social Security numbers. The company has implemented security enhancements and offered identity protection services to affected individuals.****#cybersecurity #infosec #incident #databreachhttps://beyondmachines.net/event_details/kloeckner-metals-corporation-reports-network-intrusion-and-data-exfiltration-r-o-z-q-d/gD2P6Ple2L