Tag: breach
-
Scammers Steal $1 Million in Crypto Using Fake Delta and AMC Sites
Cybersecurity firm Netcraft has discovered a new task scam cluster that has stolen over $1 million in crypto…. First seen on hackread.com Jump to article: hackread.com/scammers-steal-crypto-using-fake-delta-and-amc-sites/
-
TDL001 – Cybersecurity Explained: Privacy, Threats, and the Future – Chester Wisniewski
Tags: access, ai, attack, backdoor, breach, business, ciso, computer, country, crime, crimes, cyber, cybercrime, cybersecurity, data-breach, defense, detection, edr, email, finance, firewall, gartner, government, guide, hacker, hacking, Hardware, infosec, Internet, jobs, linkedin, mail, malicious, microsoft, military, monitoring, network, password, phishing, phone, privacy, programming, ransomware, risk, russia, scam, skills, software, sophos, spam, sql, strategy, switch, technology, threat, update, virus, vulnerability, wifi, windowsSummary “The Defenders Log” Episode 1 features host David Redekop and guest Chet Wisniewski discussing the dynamic world of cybersecurity. Wisniewski, with decades of experience, traces his journey from early BBS and phone network exploration to becoming a cybersecurity expert. They delve into the evolution of hacking, the emergence of profitable cybercrime like email spam,…
-
Nx NPM packages poisoned in AI-assisted supply chain attack
Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon First seen on theregister.com Jump to article: www.theregister.com/2025/08/27/nx_npm_supply_chain_attack/
-
ShinyHunters and Scattered Spider Linked to Farmers Insurance Data Breach
Farmers Insurance reports a breach affecting 1.1 million customers. Learn how the attack, linked to groups ShinyHunters and… First seen on hackread.com Jump to article: hackread.com/shinyhunters-scattered-spider-farmers-insurance-data-breach/
-
Storm-0501 debuts a brutal hybrid ransomware attack chain
Tags: access, attack, backup, breach, ciso, cloud, data, exploit, least-privilege, microsoft, ransom, ransomware, risk, threat, vulnerabilityA holistic approach to put organizations under pressure: Microsoft’s DiGrippo emphasizes that the unique aspect of this new method is that it leverages hybrid environments that have both on-prem and cloud assets. “They put you in a situation where you’re under a significant amount of pressure because they’ve escalated privileges for themselves on both your…
-
Storm-0501 debuts a brutal hybrid ransomware attack chain
Tags: access, attack, backup, breach, ciso, cloud, data, exploit, least-privilege, microsoft, ransom, ransomware, risk, threat, vulnerabilityA holistic approach to put organizations under pressure: Microsoft’s DiGrippo emphasizes that the unique aspect of this new method is that it leverages hybrid environments that have both on-prem and cloud assets. “They put you in a situation where you’re under a significant amount of pressure because they’ve escalated privileges for themselves on both your…
-
Healthcare Services Group discloses 2024 data breach that impacted 624,496 people
Healthcare Services Group suffered a 2024 breach, exposing personal data of 624,000+ people. Affected individuals are now being notified. In 2024, Healthcare Services Group suffered a data breach that impacted over 624,496 people, as per notification sent to the Maine Attorney General’s Office. Healthcare Services Group, Inc. (HCSG) is a U.S.-based company that provides housekeeping, laundry,…
-
Google Data Breach Sparks Phishing Wave Targeting Gmail Users
A Google Salesforce breach exposed business data, fueling phishing scams against Gmail users. Learn what happened and how to protect your account. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/google-data-breach-targets-gmail/
-
BSidesSF 2025: Shadow IT Battlefield: The CyberHaven Breach And Defenses That Worked
Creators, Authors and Presenters: Rohit Bansal, Zach Pritchard Our deep appreciation to Security BSides – San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon – certainly a venue like no other; and via the…
-
Healthcare Services Group data breach impacts 624,000 people
The Healthcare Services Group (HSGI) is alerting more than 600,000 individuals that their personal information was exposed in a security breach last year. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/healthcare-services-group-data-breach-impacts-624-000-people/
-
Salesforce data missing? It might be due to Salesloft breach, Google says
Attackers steal OAuth tokens to access third-party sales platform, then CRM data in ‘widespread campaign’ First seen on theregister.com Jump to article: www.theregister.com/2025/08/27/salesforce_salesloft_breach/
-
Google Reveals UNC6395’s OAuth Token Theft in Salesforce Breach
A new advisory from Google and Mandiant reveals a widespread data breach in Salesforce. Learn how UNC6395 bypassed… First seen on hackread.com Jump to article: hackread.com/google-unc639s-oauth-token-theft-salesforce-breach/
-
Fertigungsbranche zunehmend Ziel von Cyberspionage
Die Fertigungsindustrie gerät zunehmend ins Visier gezielter Cyberangriffe. Der ‘Verizon Data Breach Investigations Report” (DBIR) für das Jahr 2025 zeigt: Die Zahl der bestätigten Datenschutzverletzungen in dieser Branche hat sich in der EMEA-Region im Vergleich zum Vorjahr nahezu verdoppelt. Besonders alarmierend ist der Anstieg staatlich motivierter Spionageangriffe, die inzwischen 20 % aller Vorfälle ausmachen. Gleichzeitig…
-
Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data
A widespread data theft campaign has allowed hackers to breach sales automation platform Salesloft to steal OAuth and refresh tokens associated with the Drift artificial intelligence (AI) chat agent.The activity, assessed to be opportunistic in nature, has been attributed to a threat actor tracked by Google Threat Intelligence Group and Mandiant, tracked as UNC6395.”Beginning as…
-
AI Security Map: Linking AI vulnerabilities to real-world impact
A single prompt injection in a customer-facing chatbot can leak sensitive data, damage trust, and draw regulatory scrutiny in hours. The technical breach is only the first … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/27/ai-security-map-linking-vulnerabilities-real-world-impact/
-
UNC6395 and the Salesloft Drift Attack: Why Salesforce OAuth Integrations are a Growing Risk
A recent UNC6395 Salesloft Drift breach reveals Salesforce SaaS risks. Learn how to simplify breach detection, prevention, and visibility. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/unc6395-and-the-salesloft-drift-attack-why-salesforce-oauth-integrations-are-a-growing-risk/
-
Attackers steal data from Salesforce instances via compromised AI live chat tool
What Salesloft Drift users should do next: The GTIG report and the Salesloft advisories include indicators of compromise such as IP addresses used by the attackers and User-Agent strings for the tools they used to access the data. Mandiant advises companies to also search logs for any activity from known Tor exit nodes in addition…
-
Farmers Insurance discloses a data breach impacting 1.1M customers
Farmers Insurance suffered a breach tied to Salesforce attacks, exposing data of 1.1M customers across its nationwide insurance network. Farmers Insurance disclosed a data breach affecting 1,071,172 customers, linked to the recent wave of Salesforce attacks, as per Bleeping Computer. The company is an American insurer group of vehicles, homes and small businesses and also…
-
1M Farmers Insurance Customers’ Data Compromised
Though the company is informing its customers of the breach, Farmers isn’t publicly divulging what kinds of personal data were affected. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/farmers-insurance-data-compromised
-
1M Farmers Insurance Customer Data Compromised
Though the company is informing its customers of the breach, Farmers isn’t publicly divulging what kinds of personal data were affected. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/farmers-insurance-data-compromised
-
Hundreds of Salesforce customers impacted by attack spree linked to third-party AI agent
A threat group Google tracks as UNC6395 systematically stole large amounts of data from Salesforce customer instances by using OAuth tokens stolen from Salesloft Drift, researchers said. First seen on cyberscoop.com Jump to article: cyberscoop.com/salesforce-salesloft-drift-attack-spree-google/
-
Data I/O Becomes Latest Ransomware Attack Victim
The incident led to outages affecting a variety of the tech company’s operations, though the full scope of the breach is unknown. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/data-io-ransomware-attack
-
Cloud and IoT Security Platform
In today’s digital landscape, hybrid cloud security and IoT/OT cybersecurity are mission-critical. Gartner predicts that 90% of organizations will adopt a hybrid cloud approach by 2027, and industry reports show that roughly one in three data breaches now involves an IoT device. This convergence of cloud and connected devices dramatically expands the attack surface. At…
-
Auchan discloses data breach: data of hundreds of thousands of customers exposed
French retailer Auchan suffered a data breach impacting hundreds of thousands of customers, with personal information stolen. French retailer Auchan suffered a data breach that impacted hundreds of thousands of customers, resulting in the theft of personal information. The company has already notified the impacted customers. Threat actors stole customers’ personal data linked to their…
-
Nevada State Offices Halt Services After Cyber Incident
Nevada Grappling With Statewide IT Disruption, Forcing Suspension of Services. Nevada officials are investigating a network security breach that forced state offices to suspend services and knocked key systems offline, including websites and phone lines, though emergency services remain active and no data exposure has been confirmed. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/nevada-state-offices-halt-services-after-cyber-incident-a-29290
-
Nevada State Offices Halt Services After Cyber Incident
Nevada Grappling With Statewide IT Disruption, Forcing Suspension of Services. Nevada officials are investigating a network security breach that forced state offices to suspend services and knocked key systems offline, including websites and phone lines, though emergency services remain active and no data exposure has been confirmed. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/nevada-state-offices-halt-services-after-cyber-incident-a-29290