https://blog.dansec.red/vendors/nationstates/Recent content in NationStates on DanSec DailyHugoen-gbTue, 03 Feb 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-02-03-cybersecurity-news/Tue, 03 Feb 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-02-03-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li> <p>Notepad++ Supply Chain Attack:</p> <ul> <li>Chinese state-sponsored group &ldquo;Lotus Blossom&rdquo; compromised the Notepad++ hosting provider for approximately six months.</li> <li>Attackers hijacked the official update mechanism, redirecting select users to malicious servers and distributing trojanised updates.</li> <li>The campaign was highly targeted and attributed to Chinese state interests with medium confidence.</li> </ul> </li> <li> <p>NationStates Data Breach:</p> <ul> <li>The multiplayer browser-based game NationStates confirmed a data breach and temporarily shut down its website to investigate the incident.</li> </ul> </li> <li> <p>Panera Bread Data Breach:</p> <ul> <li>The data breach at Panera Bread impacted 5.1 million accounts, as confirmed by Have I Been Pwned.</li> </ul> </li> <li> <p>MongoDB Database Compromise:</p> <ul> <li>Over 1,400 out of 3,100 unprotected MongoDB instances were compromised, with most attributed to a single threat actor.</li> </ul> </li> <li> <p>Polish Energy Sector ICS Attack:</p> <ul> <li>Attackers exploited default credentials to gain access to industrial control systems (ICS) at Polish energy facilities, resulting in destructive impacts.</li> </ul> </li> </ul>