Daily Security Review

• Oneleet Secures $33M Series A to Revolutionize Integrated Cybersecurity

  Amsterdam-based cybersecurity startup Oneleet has raised $33 million in Series A funding, bringing its total capital to $35 million and positioning itself as one of Europe’s most ambitious new players in the security technology space. Founded in 2022, Oneleet is tackling one of cybersecurity’s biggest pain points: tool fragmentation. Its integrated platform aims to replace the clutter of multiple third-party vendors with a single, streamlined solution that provides attack surface management, code scanning, cloud posture monitoring, penetration testing, and compliance automation — all built and managed in-house.The round, led by Dawn Capital with participation from Y Combinator and other investors, will fund engineering expansion, AI-driven development, and global go-to-market scaling. CEO Bryan Onel describes Oneleet’s mission as building “a single pane of glass for cybersecurity,” offering full-stack visibility and automation across code, infrastructure, and endpoint environments.By consolidating these capabilities under one roof, Oneleet is addressing a growing industry frustration: the inefficiency and risk caused by juggling multiple security tools that rarely integrate smoothly. The platform’s ability to plug directly into cloud providers, repositories, and identity platforms enables organizations to automate protection, ensure regulatory compliance, and maintain continuous monitoring with minimal operational friction.Oneleet’s AI roadmap stands out as a key differentiator. With end-to-end visibility across its own ecosystem, the company plans to leverage proprietary datasets to train predictive models capable of anticipating vulnerabilities before they emerge — a goal that traditional, siloed vendors can’t easily achieve.The $33M Series A marks a milestone not only for Oneleet but for the broader cybersecurity industry, signaling a shift toward platform consolidation as companies seek simplicity, automation, and proactive defense. With its new funding, Oneleet is doubling down on the vision of a unified security stack, built to scale with the complexity of modern digital environments.#Oneleet #cybersecurity #SeriesA #startupfunding #AIsecurity #attacksurfacemanagement #complianceautomation #penetrationtesting #cloudsecurity #infosec #venturecapital #DawnCapital #YCombinator #securityautomation #AmsterdamTech

  --------  

  28:08

  --------

  28:08
• ParkMobile Data Breach Ends in $32.8M Settlement — and a $1 Payout

  The final chapter in the ParkMobile data breach saga has arrived—nearly four years after the 2021 cyberattack that compromised the personal information of 22 million users. The class-action lawsuit over the breach has concluded with a $32.8 million settlement, but for most victims, the payout is almost symbolic: a $1.00 credit, split into four $0.25 discounts on service fees, redeemable only through the ParkMobile app before October 2026.The breach, one of the largest consumer data exposures of 2021, leaked names, email addresses, mobile numbers, license plate details, and bcrypt-hashed passwords. Threat actors posted the full 4.5 GB dataset online, allowing widespread access to users’ personal data. Despite the size and severity of the leak, ParkMobile denied any wrongdoing as part of the settlement agreement—a standard legal stance meant to resolve liability without admitting fault.The unusual one-dollar credit system has drawn frustration and mockery from users, who must manually enter a discount code (P@rkMobile-$1) to redeem their compensation. Even then, the credit applies only to specific service fees, not to parking reservations. While the settlement closes the legal dispute, it has reignited public debate about data breach accountability and the meaning of consumer compensation in mass data incidents.More troubling, the settlement’s publicity has sparked a surge in phishing and smishing attacks impersonating ParkMobile. Fraudsters are sending texts and emails claiming to be part of the settlement process, luring victims into clicking malicious links or revealing financial details. ParkMobile has warned that it will never request passwords, payment details, or verification codes via text or email.For users, the takeaway is clear: even years after a breach, the real threat lingers—in the form of scams, reused credentials, and stolen data that never truly disappears. The ParkMobile case is both a cautionary tale and a stark reminder of the modern privacy economy: where millions of compromised identities can ultimately be valued at just one dollar each.#ParkMobile #databreach #classaction #cybersecurity #privacy #infosec #settlement #phishing #smishing #digitalprivacy #cybercrime #datasecurity #onlinedata #consumerprotection #2021breach #ransomware #identitytheft

  --------  

  27:55

  --------

  27:55
• Discord Confirms Data Breach Linked to Third-Party Support Vendor

  Discord has confirmed a significant data breach affecting users who interacted with its customer support teams, after hackers compromised a third-party service provider on September 20. The attack exposed a range of personally identifiable information (PII), including names, email addresses, messages, and, for a small number of users, photos of government-issued IDs such as passports and driver’s licenses. Partial billing details and payment histories were also affected.According to the post-mortem, the threat actors—believed to be the Scattered Lapsus$ Hunters (SLH) group—claimed responsibility and demanded a ransom from Discord in exchange for not leaking the stolen data. While Zendesk is suspected to be the compromised vendor, this detail has not yet been officially confirmed. Investigators noted that the stolen data contains “people’s entire identity,” a statement underscoring the potential for identity theft, account hijacking, or crypto-related fraud if the information circulates on dark web marketplaces.Discord responded by isolating and revoking access for the affected vendor, initiating a comprehensive forensic investigation, and notifying law enforcement and all impacted users. The company also enlisted a third-party cybersecurity firm to assess the extent of the breach and prevent future incidents.While the total number of affected accounts remains undisclosed, the breach underscores the risks of third-party dependencies and highlights how vendor security continues to be a major weak point in digital ecosystems. As threat groups increasingly exploit supply-chain and service provider vulnerabilities, platforms like Discord face mounting pressure to reassess vendor access, authentication mechanisms, and data retention practices.This breach serves as a cautionary case for all SaaS operators: security responsibility doesn’t end at your own perimeter—it extends to every partner in your network.#Discord #databreach #cybersecurity #PII #infosec #LapsusHunters #Zendesk #identitytheft #ransomware #privacybreach #thirdpartysecurity #supportbreach #supplychainattack #cyberattack #DarkWeb

  --------  

  25:58

  --------

  25:58
• Weather Station Gateway Exploited: CISA Adds Meteobridge Bug to KEV List

  The Cybersecurity and Infrastructure Security Agency (CISA) has issued a stark warning following confirmation that a command injection vulnerability in Meteobridge weather station devices is now being actively exploited. Tracked as CVE-2025-4008, the flaw allows attackers to execute arbitrary commands via an unauthenticated web interface endpoint, exploiting unsanitized user input.While Meteobridge devices are not designed to be internet-facing, security researchers identified around 100 units publicly exposed online, turning an otherwise limited flaw into an accessible target. The vulnerability—found in a CGI shell script—can be exploited with nothing more than a simple HTTP GET request, no authentication required. This makes it an easy entry point for attackers looking to compromise exposed weather data gateways or pivot deeper into connected networks.CISA’s inclusion of this flaw in its Known Exploited Vulnerabilities (KEV) catalog elevates it to high priority, especially for federal agencies, which are mandated to patch it within three weeks under Binding Operational Directive 22-01. The issue was patched by Smartbedded in MeteoBridge version 6.2, released in May 2025, but many devices remain outdated and at risk.The update also expands the KEV catalog with other actively exploited vulnerabilities, including a Samsung zero-day and legacy flaws in Jenkins, Juniper ScreenOS, and GNU Bash (Shellshock)—a reminder that both new and old exploits continue to endanger unpatched systems.CISA’s message is clear: patch management and exposure control are non-negotiable. Any internet-connected management interface—no matter how obscure—represents a critical point of failure. Security teams should immediately patch affected devices, verify they are not exposed online, and review perimeter configurations to prevent similar misconfigurations from becoming the next exploited vector.#CISA #CVE20254008 #Meteobridge #cybersecurity #KEV #commandinjection #infosec #patchmanagement #networksecurity #Shellshock #Samsungvulnerability #Jenkins #Juniper #Smartbedded #federalcybersecurity #BOD2201

  --------  

  23:11

  --------

  23:11
• DrayTek Issues Critical Patch for Router RCE Flaw (CVE-2025-10547)

  A serious unauthenticated remote code execution (RCE) flaw, identified as CVE-2025-10547, has been uncovered in DrayTek’s DrayOS routers. This vulnerability allows attackers to send crafted HTTP or HTTPS requests to the router’s web management interface, potentially leading to memory corruption, system crashes, or full device takeover.The flaw affects 35 models of DrayTek’s Vigor routers, devices widely deployed by small-to-medium businesses (SMBs) and home professionals. While disabling remote access and using properly configured Access Control Lists (ACLs) can protect against WAN-based attacks, the issue remains exploitable from within local networks—a serious risk for any organization lacking strong internal segmentation.Discovered by Pierre-Yves Maes of ChapsVision, the vulnerability highlights how edge devices continue to be high-value targets for cybercriminals. DrayTek has released firmware updates to fix the flaw and urges users to apply patches immediately. Experts warn that historical targeting of DrayTek routers by ransomware operators could make this vulnerability a prime candidate for future weaponization if left unpatched.The key takeaway: update now, tighten access controls, and review network segmentation policies to keep your infrastructure safe.#DrayTek #CVE202510547 #cybersecurity #RCE #networksecurity #infosec #routervulnerability #DrayOS #patchmanagement #SMBsecurity #firmwareupdate

  --------  

  25:30

  --------

  25:30

Meer Nieuws podcasts

Trending Nieuws -podcasts

Over Daily Security Review