Tag: breach
-
IBM Report: Shadow AI and Poor Governance Linked to Costlier Breaches in 2025
Only 34% of organizations with AI governance audit for misuse, IBM’s 2025 breach report warns. Lack of oversight is raising risks and costs. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-breach-risks-rise-as-governance-lags/
-
Dell Confirms Security Breach by Extortion Group, Calls Stolen Data ‘Fake’
Cyber extortion group World Leaks released more than 1.3TB of internal Dell data, including scripts and backups. Dell insists no sensitive customer information was exposed. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-dell-data-breach-world-leaks-ransomware/
-
Pi-hole discloses data breach triggered by WordPress plugin flaw
Pi-hole, a popular network-level ad-blocker, has disclosed that donor names and email addresses were exposed through a security vulnerability in the GiveWP WordPress donation plugin. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/pi-hole-discloses-data-breach-via-givewp-wordpress-plugin-flaw/
-
Hackers leak purported Aeroflot data as Russia denies breach
Hackers have leaked flight records allegedly belonging to the CEO of the Russian airline Aeroflot following a major cyberattack that grounded flights. First seen on therecord.media Jump to article: therecord.media/hackers-leak-purported-aeroflot-data
-
Pi-hole discloses data breach via GiveWp WordPress plugin flaw
Pi-hole, a popular network-level ad-blocker, has disclosed that donor names and email addresses were exposed through a security vulnerability in the GiveWP WordPress donation plugin. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/pi-hole-discloses-data-breach-via-givewp-wordpress-plugin-flaw/
-
Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts
Cybersecurity researchers have detailed a new cluster of activity where threat actors are impersonating enterprises with fake Microsoft OAuth applications to facilitate credential harvesting as part of account takeover attacks.”The fake Microsoft 365 applications impersonate various companies, including RingCentral, SharePoint, Adobe, and Docusign,” Proofpoint said in a Thursday report.The First seen on thehackernews.com Jump to…
-
Search Engines Are Indexing ChatGPT Chats, Here’s What Our OSINT Found
A significant privacy breach has emerged in the artificial intelligence landscape, as ChatGPT shared conversations are being indexed by major search engines, effectively transforming private exchanges into publicly discoverable content accessible to millions of users worldwide. This discovery has exposed thousands of supposedly confidential conversations, ranging from personal mental health discussions to sensitive business information.…
-
Gaining Independence with Advanced PAM
How Does Advanced PAM Empower Your Cybersecurity? When it comes to cybersecurity, one must continuously question: How do we fortify our systems and shield them against potential breaches? Recognizing the answer to this lies in Non-Human Identities (NHIs) and their associated secrets, more organizations are turning their attention towards advanced Privileged Access Management (PAM). Unmasking……
-
Exciting Developments in NHIDR
Are You Prepared to Tackle the Evolving Landscape of Cybersecurity? Data breaches, security threats, and compliance issues these are common narratives. Amid the cacophony of these significant challenges, is your organization prepared to combat evolving cybersecurity? If your answer is shrouded in doubt, it’s time to look at a holistic approach to secrets and… First…
-
Staggering 800% Rise in Infostealer Credential Theft
Flashpoint data reveals an 800% increase in credentials stolen via infostealers in just six months First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/staggering-800-rise-infostealer/
-
Ransomware Payment Bans: Prevention Strategy or Misguided Policy?
It’s no secret that ransomware is on the rise, as this escalation is echoed across numerous industry reports. The Verizon 2025 Data Breach Investigations Report (DBIR), for instance, starkly illustrates this reality, revealing that ransomware (with or without encryption) was present in 44% of all breaches reviewed. This marks a substantial 37% increase from their…
-
Cryptohack Roundup: WOO X Probes $14M Breach
Tags: breachAlso: Samourai Wallet Founders Plead Guilty. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cryptohack-roundup-woo-x-probes-14m-breach-a-29100
-
Everest Ransomware Claims Mailchimp as New Victim in Relatively Small Breach
Everest ransomware claims Mailchimp breach, leaks 943,000 lines of data. While limited in size, it adds to a spike in global ransomware activity this July. First seen on hackread.com Jump to article: hackread.com/everest-ransomware-claims-mailchimp-small-breach/
-
Breach Roundup: Did China Have a Sneak Peek Into ToolShell?
Also: ToolShell Hits South Africa, Most Americans Are Online Fraud Victims. This week: Did China sneak a peek into ToolShell? ToolShell hacking in South Africa, Cisco flaws, an Arizona woman sentenced for aiding North Korea. Most Americans scammed online, a NASCAR data breach and a claimed data leak at France’s Naval Group. Orange telecom disrupted.…
-
SafePay Claims Ingram Micro Breach, Sets Ransom Deadline
The ransomware gang claims to have stolen 3.5TB of data, and told the technology distributor to pay up or suffer a data breach. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/safepay-ingram-micro-breach-ransom-deadline
-
KNP Breach: What Went Wrong with Identity and SaaS Controls
The KNP breach shows how one weak password led to the collapse of a 158-year-old company, and why SaaS security is essential to every organization. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/07/knp-breach-what-went-wrong-with-identity-and-saas-controls/
-
Ingram Micro Partners ‘Concerned’ About Claimed SafePay Data Theft
Solution providers tell CRN they fear their own company’s or their customers’ data could be made public in the wake of reports that the Safepay ransomware organization has stolen 3.5 terabytes of Ingram Micro data. First seen on crn.com Jump to article: www.crn.com/news/security/2025/ingram-micro-partners-concerned-about-claimed-safepay-data-theft
-
Seeing Your APIs Through an Attacker’s Eyes: Introducing Salt Surface
Tags: api, attack, backdoor, breach, cloud, data-breach, endpoint, firewall, Internet, monitoring, risk, tool, vulnerability, wafYour API attack surface is larger and more exposed than you realize. In today’s complex, cloud-native environment, APIs are deployed at an astonishing rate. While this rapid pace fuels innovation, it also creates a significant visibility gap. The APIs you are aware of and manage are only the tip of the iceberg. Your actual risk…
-
Ingram Micro threatened with post-ransomware data leak
Group that attacked distributor indicate they have terabytes of data that was stolen from the channel player First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366628299/Ingram-Micro-threatened-with-post-ransomware-data-leak
-
Ransomware up 179%, credential theft up 800%: 2025’s cyber onslaught intensifies
Exploits multiply as defenders play catch-up: Vulnerability disclosure rose by 246%, and publicly available exploits increased by 179%, with over 20000 vulnerabilities disclosed in the first half of 202535% of which already have exploit code.A backlog of 42000 vulnerabilities awaiting NVD analysis and delays in CVE enrichment leave organizations blind to many critical flaws, the…
-
What the Coinbase Breach Says About Insider Risk
The lesson from the breach is not just about what went wrong, but what could have gone right. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/coinbase-breach-insider-risk
-
Cyberkriminelle setzen Ingram Micro Ultimatum
Tags: attack, breach, cyberattack, data, group, intelligence, leak, lockbit, ransomware, service, technology, threatRansomware-Gangster erpressen Ingram Micro.Anfang Juli 2025 wurde bekannt, dass der IT-Dienstleister Ingram Micro von einer Ransomware-Attacke betroffen ist. Diese zog auch einen mehrtägigen Ausfall der IT-Systeme nach sich. Inzwischen laufen die Systeme zwar größtenteils wieder, trotzdem könnte der größte Schaden noch bevorstehen.Denn inzwischen hat sich die Ransomware-Bande Safepay zu dem Angriff bekannt und Ingram Micro…
-
UNC2891 Breaches ATM Network via 4G Raspberry Pi, Tries CAKETAP Rootkit for Fraud
The financially motivated threat actor known as UNC2891 has been observed targeting Automatic Teller Machine (ATM) infrastructure using a 4G-equipped Raspberry Pi as part of a covert attack.The cyber-physical attack involved the adversary leveraging their physical access to install the Raspberry Pi device and have it connected directly to the same network switch as the…
-
The Unbeatable Duo of EDR and Microsegmentation for Threat Containment
“If a breach happened today, how ready are you to contain it? How would you stop the spread? Can your business keep running while you respond?” Here’s the reality. So, we started helping enterprises move beyond just detecting an attack. It’s now about containing the spread. Protecting what matters most, your crown jewels, your data,……
-
UNC2891 Hackers Breach ATMs Using Raspberry Pi Devices for Network Access
A Raspberry Pi device that was directly attached to an internal network switch was used by the financially motivated threat actor group UNC2891 to breach ATM networks in a sophisticated cyber campaign that targeted banking infrastructure. This embedded hardware, equipped with a 4G modem, facilitated remote access over mobile data, bypassing perimeter firewalls and establishing…
-
Why stolen credentials remain cybercriminals’ tool of choice
It’s often the case that the simplest tools have the longest staying power, because they ultimately get the job done. Take duct tape, for example: it’s a sturdy household … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/31/stolen-credentials/
-
Hackers Allegedly Breach Nokia’s Internal Network
A cybercriminal group has allegedly infiltrated Nokia’s internal network through a vulnerable third-party contractor, potentially exposing sensitive information belonging to more than 94,500 employees in what security experts are calling one of the most extensive corporate data breaches affecting the telecommunications giant in recent years. The threat actor, identifying as Tsar0Byte, made claims about the…
-
Ransomware gang tells Ingram Micro, ‘Pay up by August 1’
Tags: access, attack, backup, breach, cyber, cyberattack, data, data-breach, encryption, exploit, extortion, government, group, international, Internet, law, leak, organized, ransom, ransomware, technology, tool, vpn, vulnerabilityRansomware attacks increase: In a report on ransomware released this week, researchers at Zscaler ThreatLabz said the number of organizations listed on all ransomware leak sites rose 70% in the 12 month period ending in April.A growing number of ransomware operators are abandoning encryption of data in favour of just data extortion, it noted. For…
-
Securing the Next Era: Why Agentic AI Demands a New Approach to API Security
I’ve spent my career building solutions to protect the API fabric that powers modern businesses. I founded Salt because I saw that traditional security tools such as WAFs, gateways, and CDNs weren’t designed to see or secure APIs. That gap led to breaches, blind spots, and billions in risk. Today, we’re facing a new wave…
-
Dollar Tree denies ransomware claims, says stolen data is from defunct discount chain
Discount retail giant Dollar Tree denied its systems were impacted by ransomware after a cybercriminal group claimed to have attacked the company. First seen on therecord.media Jump to article: therecord.media/dollar-tree-discount-stolen-data