Tag: breach
-
TransUnion Data Breach Compromises Over 4 Million Customers
In a significant data breach disclosed by TransUnion LLC, more than 4.4 million consumers had sensitive personal information compromised in late July 2025. The credit reporting agency, headquartered at 555 W. Adams Street in Chicago, Illinois, revealed the incident on August 26, following its discovery on July 30. TransUnion’s Senior Privacy Counsel, Sanjana Palla, reported…
-
Google Warns Salesloft OAuth Breach Extends Beyond Salesforce, Impacting All Integrations
Google has revealed that the recent wave of attacks targeting Salesforce instances via Salesloft Drift is much broader in scope than previously thought, stating it impacts all integrations.”We now advise all Salesloft Drift customers to treat any and all authentication tokens stored in or connected to the Drift platform as potentially compromised,” Google Threat Intelligence…
-
Inside the Salesloft Breach: A New Era of Salesforce Attacks
Inside the Salesloft breach: Read how attackers used OAuth tokens and app integrations to drive a new class of stealthy Salesforce attacks across enterprises. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/inside-the-salesloft-breach-a-new-era-of-salesforce-attacks/
-
Google warns Salesloft breach impacted some Workspace accounts
Google reports that the Salesloft Drift breach is larger than initially thought, warning that attackers also used stolen OAuth tokens to access Google Workspace email accounts in addition to Salesforce data. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-warns-salesloft-breach-impacted-some-workspace-accounts/
-
CISA Probes Nevada Cyber Breach Amid Surge in State Attacks
Tags: attack, breach, cisa, cyber, cyberattack, cybersecurity, defense, government, infrastructure, ransomware, serviceUS Cyber Defense Agency Deploys Support to Nevada Following Ransomware Incident. The Cybersecurity and Infrastructure Security Agency and FBI are aiding Nevada after a cyberattack disabled state services, exposing how local governments – amid surging ransomware, IT shortfalls and federal funding cuts – are increasingly reliant on strained national cyber defense resources. First seen on…
-
Breach Roundup: TransUnion Discloses Breach Affected 4.5M
Also: DSLRoot Turns Homes Into Proxies, Cyberattack Disrupts Swedish Towns. This week: TransUnion incident affects 4.5 million, DSLRoot residential proxies, Operation Serengeti 2.0, ZipLine campaign exploits contact forms, a cyberattack disrupts 200 Swedish municipalities, Maryland Transit Administration hit by ransomware, TAG-144 escalated attacks in South America. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-transunion-discloses-breach-affected-45m-a-29320
-
US Senators Call for Details of Aflac Data Breach
Senate HELP Committee Leaders Ask Insurer: What Went Wrong in the Cyberattack?. A U.S. Senate committee is demanding details from insurance giant Aflac about the company’s recent cyberattack that compromised the personal and health information of a yet undisclosed number of Americans. Senators last year gave the same scrutiny to the Change Healthcare mega-breach. First…
-
How Gainesville Regional Utilities is locking down vendor risk
Tags: access, breach, business, cio, ciso, compliance, conference, cyber, data, finance, group, HIPAA, infrastructure, malicious, penetration-testing, risk, risk-assessment, risk-management, service, soc, strategy, threat, vulnerabilityIntake and triage: The requesting business unit submits an intake form detailing the vendor’s responsibilities, the IT service involved, the types of data needed, and any required system access. The IT security team then conducts an initial risk triage.Detailed assessment: If the vendor poses a moderate or high risk, it must complete a security questionnaire…
-
2025 CSO Hall of Fame: George Finney on decryption risks, AI, and the CISO’s growing clout
Tags: ai, attack, automation, breach, business, ciso, computing, conference, cyber, cybersecurity, data, encryption, intelligence, jobs, LLM, microsoft, risk, soc, threat, tool, zero-trustWhat do you see as the biggest cybersecurity challenges for the next generation of CISOs, and how should they prepare? : George Finney: One major challenge is the threat of attackers saving encrypted data today with the intention of decrypting it later. With quantum computing, we know that in five to 10 years, older encryption…
-
Hackers Steal 4M+ TransUnion Customers’ Data
The credit reporting agency said the breach was limited to specific data elements and didn’t include credit reports or core credit information. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/hackers-transunion-customer-data
-
Data breach at TransUnion impacts 4.4 million people
The incident began on July 28 and was discovered two days later, TransUnion told the Maine attorney general. A separate filing in Texas shows that Social Security numbers were among the leaked information. First seen on therecord.media Jump to article: therecord.media/transunion-data-breach-4-million
-
State of Nevada Faces IT Outage Amid Cyberattack, Offices Suspended
Tags: breach, cyber, cyberattack, government, infrastructure, network, office, security-incident, technologyThe State of Nevada became the target of a significant cyberattack which resulted in a substantial network security incident impacting government infrastructure across multiple agencies. According to an official communication from the Governor’s Technology Office, state officials rapidly identified the breach and immediately commenced continuous recovery efforts aimed at containing the incident and restoring affected…
-
Thousands of Developer Credentials Stolen in macOS “s1ngularity” Attack
A supply chain attack called “s1ngularity” on Nx versions 20.9.0-21.8.0 stole thousands of developer credentials. The attack targeted… First seen on hackread.com Jump to article: hackread.com/developer-credentials-stolen-macos-s1ngularity-attack/
-
Electronics Manufacturer Data I/O Suffers Ransomware Breach
Tags: attack, breach, cyber, cybersecurity, data, incident response, infrastructure, programming, ransomware, threatData I/O Corporation, a well-known electronics firm that specializes in device programming and security provisioning solutions, revealed a ransomware attack that penetrated its internal IT infrastructure in a major cybersecurity event. The incident, detected on August 16, 2025, prompted an immediate activation of the company’s incident response protocols, highlighting the persistent threat of ransomware in…
-
What You Don’t Log Will Hurt You FireTail Blog
Aug 28, 2025 – Lina Romero – APIs have become the most targeted attack surface in enterprise environments, and AI (particularly agentic AI) is making it even harder to protect those critical connections. But one of the most often overlooked and misunderstood aspects of a strong AI and API security posture is logging.Last week, FireTail…
-
200 Swedish municipalities impacted by a major cyberattack on IT provider
Cyberattack on Miljödata disrupted services in over 200 Swedish municipalities, with concerns over stolen sensitive data. A cyberattack on Miljödata, an IT supplier serving 80% of Swedish municipalities, including SkellefteÃ¥,MönsterÃ¥sandKalmar, disrupted services in over 200 municipalities and raised concerns of stolen sensitive data. The Swedish Privacy Agency confirmed that it has already received around 70…
-
TransUnion suffers data breach impacting over 4.4 million people
Consumer credit reporting giant TransUnion warns it suffered a data breach exposing the personal information of over 4.4 million people in the United States. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/transunion-suffers-data-breach-impacting-over-44-million-people/
-
Salt Typhoon Exploits Cisco, Ivanti, Palo Alto Flaws to Breach 600 Organizations Worldwide
The China-linked advanced persistent threat (APT) actor known as Salt Typhoon has continued its attacks targeting networks across the world, including organizations in the telecommunications, government, transportation, lodging, and military infrastructure sectors.”While these actors focus on large backbone routers of major telecommunications providers, as well as provider edge (PE) and First seen on thehackernews.com Jump…
-
TransUnion discloses a data breach impacting over 4.4 million customers
TransUnion reported a data breach in which threat actors accessed personal information of over 4.4 million customers. TransUnion disclosed a data breach that impacted more than 4,461,511 customers. The company is one of the three major credit reporting agencies in the United States (alongside Experian and Equifax). It collects and maintains credit information on consumers…
-
ShadowSilk Targets Penetration-Testing Tools and Public Exploits to Breach Organizations
Tags: breach, cyber, cybersecurity, data, exploit, government, group, penetration-testing, threat, toolCybersecurity experts discovered an advanced persistent threat (APT) cluster called ShadowSilk in a thorough research published by Group-IB. Since at least 2023, this group has been actively breaching government institutions in Central Asia and the Asia-Pacific area. The group’s operations, ongoing as of July 2025, focus primarily on data exfiltration, leveraging a sophisticated blend of…
-
Webinar: Why Top Teams Are Prioritizing CodeCloud Mapping in Our 2025 AppSec
Picture this: Your team rolls out some new code, thinking everything’s fine. But hidden in there is a tiny flaw that explodes into a huge problem once it hits the cloud. Next thing you know, hackers are in, and your company is dealing with a mess that costs millions.Scary, right? In 2025, the average data…
-
New research claiming passkeys can be stolen is pure nonsense
Researchers take note: When the endpoint is compromised, all bets are off. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/08/new-research-claiming-passkeys-can-be-stolen-is-pure-nonsense/
-
Agentic AI coding assistant helped attacker breach, extort 17 distinct organizations
Cybercriminals have started >>vibe hacking
-
Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them
Every day, businesses, teams, and project managers trust platforms like Trello, Asana, etc., to collaborate and manage tasks. But what happens when that trust is broken? According to a recent report by Statista, the average cost of a data breach worldwide was about $4.88 million. Also, in 2024, the private data of over 15 million…
-
Nevada Confirms Ransomware Attack, State Data Stolen
Nevada’s CIO confirmed in a press conference that ransomware actors had exfiltrated data from state networks, amid an ongoing incident investigation First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nevada-ransomware-attack-data/
-
Can We Really Eliminate Human Error in Cybersecurity?
Cybersecurity breaches often stem not from advanced exploits but from human error, misconfigurations, and routine mistakes. True resilience comes from designing systems that expect failure, leverage automation wisely, and foster a security-first culture through simulations, guardrails, and psychological safety. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/can-we-really-eliminate-human-error-in-cybersecurity/
-
Tiny US Agency to Enforce Substance Abuse Regs – and HIPAA
HHS Shifts 42 CFR Enforcement Duties to Office of Civil Rights Amid Massive Reorg. The U.S. Department of Health and Human Services has put its Office for Civil Rights in charge of investigating and penalizing organizations that breach the confidentiality of substance abuse disorder records. Some fear the agency doesn’t have the bandwidth to enforce…
-
US, allies warn China-linked actors still targeting critical infrastructure
An advisory from 13 countries says state-backed hackers continue trying to breach telecommunications systems and other vital networks. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/china-cyberattacks-supply-chain-global-warning/758763/