Tag: breach
-
Another Salesforce-linked data breach has ShinyHunters’ fingerprints all over it
They keep coming back for more First seen on theregister.com Jump to article: www.theregister.com/2025/11/20/salesforce_gainsight_breach/
-
Salesforce says some of its customers’ data was accessed after Gainsight breach
Salesforce said it’s investigating an incident where hackers compromised some of its customers’ data after breaching customer experience company Gainsight. First seen on techcrunch.com Jump to article: techcrunch.com/2025/11/20/salesforce-says-some-of-its-customers-data-was-accessed-after-gainsight-breach/
-
Everest Ransomware Says It Breached Brazilian Energy Giant Petrobras
Everest ransomware claims to have stolen over 180GB of seismic survey data from Petrobras, demanding contact through qTox with a countdown in place. First seen on hackread.com Jump to article: hackread.com/everest-ransomware-brazil-petrobras-breach/
-
FCC spikes Biden-era cyber regulations prompted by Salt Typhoon telecom breaches
The Republican-led FCC voted to remove cybersecurity rules for telecom companies that were put in place before Donald Trump’s inauguration as a response to 2024 breaches attributed to state-backed Chinese hackers. First seen on therecord.media Jump to article: therecord.media/fcc-removes-biden-era-cybersecurity-rules-telecoms-salt-typhoon
-
Salesforce investigates customer data theft via Gainsight breach
Salesforce says it revoked refresh tokens linked to Gainsight-published applications while investigating a new wave of data theft attacks targeting customers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/salesforce-investigates-customer-data-theft-via-gainsight-breach/
-
Education boards left gates wide open for PowerSchool mega-breach, say watchdogs
Privacy cops say attack wasn’t just bad luck but a result of sloppy homework First seen on theregister.com Jump to article: www.theregister.com/2025/11/20/powerschool_breach_reports/
-
Supply Chain Breaches Impact Almost All Firms Globally, BlueVoyant Reveals
Despite a growing maturity of third-party risk management programs, supply chain attacks impacted more organizations in 2025 than in previous years First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/supply-chain-breaches-impact/
-
3 ways CISOs can win over their boards this budget season
Tip 2: Go beyond compliance standards: It’s no secret that compliance and regulations drive nearly 80% of CISOs’ budget justifications. Industry standards like HIPAA and SOC2 can offer a guiding framework for a program, but with evolving threats from AI, the rise of quantum computing and increasingly complex third-party risk, CISOs need to think of…
-
Smashing Security podcast #444: We’re sorry. Wait, did a company actually say that?
Stop the press – a company has actually said “sorry” after a data breach, and hotels are helping hackers phish their own guests. First seen on grahamcluley.com Jump to article: grahamcluley.com/smashing-security-podcast-444/
-
Smashing Security podcast #444: We’re sorry. Wait, did a company actually say that?
Stop the press – a company has actually said “sorry” after a data breach, and hotels are helping hackers phish their own guests. First seen on grahamcluley.com Jump to article: grahamcluley.com/smashing-security-podcast-444/
-
Mobile App Platforms: Don’t Let Database Security Come Back to Bite You
The Tea app breach highlights how weak back-end security can expose sensitive user data. Learn essential strategies for access control, data lifecycle management and third-party risk reduction. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/mobile-app-platforms-dont-let-database-security-come-back-to-bite-you/
-
Mobile App Platforms: Don’t Let Database Security Come Back to Bite You
The Tea app breach highlights how weak back-end security can expose sensitive user data. Learn essential strategies for access control, data lifecycle management and third-party risk reduction. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/mobile-app-platforms-dont-let-database-security-come-back-to-bite-you/
-
Chinese APT Group Exploits DLL Sideloading to Breach Government and Media Targets
A China-nexus advanced persistent threat (APT) group has been conducting a sustained espionage campaign targeting government and media sectors across Southeast Asia, leveraging sophisticated DLL sideloading techniques as a primary attack vector. The threat actor, tracked as Autumn Dragon, has targeted multiple nations surrounding the South China Sea, including Indonesia, Singapore, the Philippines, Cambodia, and Laos,…
-
Selling to the CISO: An open letter to the cybersecurity industry
Looking for reliability, not revolution: I’m not anti-technology. I rely on it. But I buy it with purpose. I buy tools that make us better at the basics, that help enforce discipline, and that reduce human error. I buy solutions that simplify, not complicate. And I buy from vendors who tell me the truth, even…
-
WIRED Roundup: DHS’s Privacy Breach, AI Romantic Affairs, and Google Sues Text Scammers
In this episode of Uncanny Valley, we discuss our scoop about how the Department of Homeland Security illegally collected Chicago residents’ data for month, as well as the news of the week. First seen on wired.com Jump to article: www.wired.com/story/uncanny-valley-podcast-wired-roundup-dhs-privacy-breach-ai-romantic-affairs-google-sues-text-scammers/
-
How to Improve Credential Security
Michael Leland of Island on How to Enhance Credential Security. From infostealers to phishing, almost 90% of all data breaches now involve the use of stolen credentials – leading to billions of dollars in losses. Michael Leland of Island opens up on the role of the modern enterprise browser in mitigating these risks created by…
-
The Gentlemen<< Ransomware Group Deploys Dual-Extortion Tactics, Encrypting and Exfiltrating Data
Cybereason Threat Intelligence Team has uncovered a sophisticated ransomware operation known as >>The Gentlemen,
-
Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers
Palo Alto, California, November 19th, 2025, CyberNewsWire SquareX released critical research exposing a hidden API in Comet that allows extensions in the AI Browser to execute local commands and gain full control over users’ devices. The research reveals that Comet has implemented a MCP API (chrome.perplexity.mcp.addStdioServer) that allows its embedded extensions to execute arbitrary local…
-
The Gentlemen<< Ransomware Group Deploys Dual-Extortion Tactics, Encrypting and Exfiltrating Data
Cybereason Threat Intelligence Team has uncovered a sophisticated ransomware operation known as >>The Gentlemen,
-
Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers
Palo Alto, California, November 19th, 2025, CyberNewsWire SquareX released critical research exposing a hidden API in Comet that allows extensions in the AI Browser to execute local commands and gain full control over users’ devices. The research reveals that Comet has implemented a MCP API (chrome.perplexity.mcp.addStdioServer) that allows its embedded extensions to execute arbitrary local…
-
Fake CAPTCHA Triggers 42-Day Akira Ransomware Attack
A fake CAPTCHA click led to a 42-day Akira ransomware breach that went largely undetected despite extensive security tooling. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/fake-captcha-triggers-42-day-akira-ransomware-attack/
-
How Microsegmentation Powers Breach Readiness and Cyber Resilience
“The attackers are not waiting for you to make the decision. Attackers will continue to attack. And just because you are not able to see it doesn’t mean the attack has not happened.” That’s the reality ColorTokens CEO and co-founder Rajesh Khazanchi lays out in this conversation with Karissa A. Breen, founder of KBI Media and host of KBKast: The Voice of Cyber. Rajesh breaks……
-
Hacker Selling Alleged Samsung Medison Data Stolen In 3rd Party Breach
Hacker using the alias 888, claims to be selling Samsung Medison data taken through a third party breach, including internal files, keys and user info. First seen on hackread.com Jump to article: hackread.com/hacker-samsung-medison-data-breach-3rd-party/
-
Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers
Palo Alto, California, 19th November 2025, CyberNewsWire First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/obscure-mcp-api-in-comet-browser-breaches-user-trust-enabling-full-device-control-via-ai-browsers/
-
Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers
Palo Alto, California, 19th November 2025, CyberNewsWire First seen on hackread.com Jump to article: hackread.com/obscure-mcp-api-in-comet-browser-breaches-user-trust-enabling-full-device-control-via-ai-browsers/