Tag: breach
-
The Sequential Kill Chain for AI FireTail Blog
May 30, 2025 – Timo Rüppell – The Sequential Kill Chain for AI-Powered Attacks Excerpt: We’ve talked before about Mean Time To Attack, or MTTA, which has grown alarmingly short for new vulnerabilities across the cyber landscape. In this blog, we’ll dive into the “how” and “why” of this”¦ Summary: In our current cyber landscape,…
-
Getting Exposure Management Right: Insights from 500 CISOs
Pentesting isn’t just about finding flaws, it’s about knowing which ones matter. Pentera’s 2025 State of Pentesting report uncovers which assets attackers target most, where security teams are making progress, and which exposures still fly under the radar. Focus on reducing breach impact, not just breach count. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/getting-exposure-management-right-insights-from-500-cisos/
-
Threat Actor Claims TikTok Breach, Puts 428 Million Records Up for Sale
Alleged TikTok Breach: Threat actor “Often9” claims to sell 428M user records, including emails, phones, and account details on dark web forum. First seen on hackread.com Jump to article: hackread.com/threat-actor-tiktok-breach-428-million-records-sale/
-
ConnectWise Hit by Advanced Cyberattack: Internal Data at Risk
ConnectWise, a leading provider of IT management and remote access software, has confirmed a cyberattack attributed to a sophisticated nation-state actor. The breach, discovered in May 2025, impacted a limited number of customers using the company’s ScreenConnect cloud platform, a tool widely used for remote support and system maintenance. ConnectWise responded by engaging forensic experts…
-
ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach
ConnectWise, the developer of remote access and support software ScreenConnect, has disclosed that it was the victim of a cyber attack that it said was likely perpetrated by a nation-state threat actor.”ConnectWise recently learned of suspicious activity within our environment that we believe was tied to a sophisticated nation-state actor, which affected a very small…
-
‘Everest Group’ Extorts Global Orgs via SAP’s HR Tool
In addition to Coca-Cola, entities in Abu Dhabi, Jordan, Namibia, South Africa, and Switzerland are experiencing extortion attacks, all involving stolen SAP SuccessFactor data. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/everest-group-extorts-global-orgs-hr-tool
-
Tiffany, Dior Suffer South Korean Customer Data Breaches
Retailers Report a Spurt in Breaches. Jewelry retailer Tiffany & Co. said hackers stole South Korean customers’ data from a third-party vendor’s platform, a disclosure that came shortly after sister brand Dior announced a similar breach. Hackers stole the personal information of South Korean shoppers. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/tiffany-dior-suffer-south-korean-customer-data-breaches-a-28548
-
North Korea’s Laptop Farm Scam: ‘Something We’d Never Seen Before’
Officials uncover how North Korean operatives used stolen identities and remote-controlled tech to infiltrate American companies and steal corporate data. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-north-korea-laptop-farm-remote-job-scam/
-
Breach Roundup: Spanish Hacker Alcasec Back in the Jailhouse
Also, Stolen Cookies for Sale, LexisNexis Breach and an FBI Warning. This week, Alcasec back in a Spanish jail, billions of stolen cookies and Chinese hackers used Google Calendar. LexisNexis and Adidas had breaches, a vishing warning from the FBI. ClickFix scammers used fake Google Meet pages, Victoria’s Secret went offline. Microsoft will update all…
-
Over 364K impacted by LexisNexis breach
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/over-364k-impacted-by-lexisnexis-breach
-
Digital Ghosting, The Third Step in Breach Readiness
Learn how Digital Ghosting and microsegmentation strategies can enhance cyber defense, boosting your organization’s breach readiness. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/digital-ghosting-the-third-step-in-breach-readiness/
-
Most LLMs don’t pass the security sniff test
Advice to CSOs: Lee said that CSOs should consider the following before approving any LLM:Training data: figure out where the model got its info. Random web grabs expose your secrets;Prompt history: if your questions stick around on their servers, they’ll turn up in the next breach bulletin;Credentials: stolen API keys and weak passwords keep attackers…
-
Victoria’s Secret Website Taken Offline After Cybersecurity Breach
Victoria’s Secret, the iconic lingerie retailer, has taken its US website offline and suspended some in-store services following a major cybersecurity incident. Customers attempting to access the site since Monday have been greeted with a black screen and a terse message: “We identified and are taking steps to address a security incident. We have taken…
-
Data broker LexisNexis discloses data breach affecting 364,000 people
Data broker giant LexisNexis Risk Solutions has revealed that unknown attackers stole the personal information of over 364,000 individuals in a December breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/data-broker-lexisnexis-discloses-data-breach-affecting-364-000-people/
-
Risk assessment vital when choosing an AI model, say experts
Advice to CSOs: Lee said that CSOs should consider the following before approving any LLM:Training data: figure out where the model got its info. Random web grabs expose your secrets;Prompt history: if your questions stick around on their servers, they’ll turn up in the next breach bulletin;Credentials: stolen API keys and weak passwords keep attackers…
-
The cost of compromise: Why password attacks are still winning in 2025
Poor password management is responsible for thousands of data breaches, but it doesn’t have to be this way. First seen on theregister.com Jump to article: www.theregister.com/2025/05/28/specops_password_attacks_2025/
-
Massive stolen browser cookie economy uncovered
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/massive-stolen-browser-cookie-economy-uncovered
-
Third-party breach disclosed by Adidas
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/third-party-breach-disclosed-by-adidas
-
Revenue Cycle Management Firm’s Data Breach Total Soars
ALN Medical Management Now Says 1.82 Million Affected in 2024 Hacking Incident. The number of people affected by a March 2024 hack on a healthcare revenue cycle management and billing services provider has soared in recent weeks to more than 1.82 million, as the company continues to file updated breach reports to state and federal…
-
New PumaBot botnet brute forces SSH credentials to breach devices
A newly discovered Go-based Linux botnet malware named PumaBot is brute-forcing SSH credentials on embedded IoT devices to deploy malicious payloads. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-pumabot-botnet-brute-forces-ssh-credentials-to-breach-devices/
-
More than $12 million stolen from crypto platform Cork Protocol
Decentralized finance platform Cork Protocol paused trading and launched an investigation after millions of dollars’ worth of Ethereum were lost in a “security incident.” First seen on therecord.media Jump to article: therecord.media/cork-protocol-defi-12million-crypto-theft
-
Czech Republic Blames China-Linked APT31 Hackers for 2022 Cyberattack
The Czech Republic on Wednesday formally accused a threat actor associated with the People’s Republic of China (PRC) of targeting its Ministry of Foreign Affairs.In a public statement, the government said it identified China as the culprit behind a malicious campaign targeting one of the unclassified networks of the Czech Ministry of Foreign Affairs. The…
-
LexisNexis Risk Solutions says 364,000 impacted by breach involving GitHub data
The company said data held in GitHub pertaining to LexisNexis Risk Solutions had been acquired by an unknown third party. First seen on therecord.media Jump to article: therecord.media/lexis-nexis-breach-hundreds-thousands
-
FTC Orders GoDaddy to Bolster Its Security After Years of Attacks
Web hosting giant GoDaddy for years has mislead customers about the strength of its security program, but after a series of data breaches, the FTC is ordering the company to implements robust defenses and stop lying about its cybersecurity capabilities. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/ftc-orders-godaddy-to-bolster-its-security-after-years-of-attacks/
-
Facebook Faces One of the Largest Alleged Data Breaches: 1.2 Billion Accounts at Risk
A hacker known as ByteBreaker has surfaced on underground forums, claiming to have stolen data from 1.2 billion Facebook accounts. While Facebook has not confirmed the breach, the hacker is reportedly selling access to a trove of user information, including names, email addresses, phone numbers, profile details, and more. If verified, this could rank as…
-
Adidas Data Breach Highlights Third-Party Risks: Why AI-Based Cybersecurity Solutions Are Essential
On May 23, Adidas disclosed a data breach resulting from a cyberattack on a third-party customer service provider, exposing sensitive customer information in multiple regions, including the U.S. and Europe. While Adidas did not name the vendor involved, the company emphasized that the breach impacted “a few million individuals,” and included data such as contact…
-
Estonia issues arrest warrant for Moroccan wanted for major pharmacy data breach
Estonia said a man is suspected of unlawfully accessing a customer card database managed by Allium UPI, the parent company of the Apotheka pharmacy chain, in February 2024. First seen on therecord.media Jump to article: therecord.media/estonia-arrest-warrant-pharmacy-data-breach
-
Data broker giant LexisNexis says breach exposed personal information of over 364,000 people
The data collector said the stolen data includes Social Security numbers. First seen on techcrunch.com Jump to article: techcrunch.com/2025/05/28/data-broker-giant-lexisnexis-says-breach-exposed-personal-information-of-over-364000-people/
-
Hackers Circulate Over 93 Billion Stolen User Cookies on the Dark Web
Web cookies, those ubiquitous pop-ups we routinely dismiss with a click, are small text files stored on your device by websites you visit. While cookies are essential for a seamless browsing experience”, remembering your login, shopping cart, or language preferences”, they also serve as powerful tracking tools. There are several types, each with unique technical…