Collecting Cyber-News from over 60 sources

Tag: breach

Identity-Centric Security Strategies for Hybrid Workforces

Mar 19, 2026 1:10 PM

Tags: breach, governance, iam, identity, mfa, strategy, zero-trust

In the hybrid work era, 80% of breaches stem from compromised credentials. Explore why identity-centric security and Zero Trust are now the “only perimeter that matters,” and learn practical strategies for IAM, MFA, and automated governance to secure your modern workforce. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/identity-centric-security-strategies-for-hybrid-workforces/
CISA urges US orgs to secure Microsoft Intune systems after Stryker breach

Mar 19, 2026 1:10 PM

Tags: breach, cisa, cyberattack, endpoint, exploit, microsoft, technology, tool

CISA warned U.S. organizations to follow Microsoft guidance to strengthen the Intune endpoint management tool after a cyberattack exploited it to wipe medical technology giant Stryker’s systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-businesses-to-secure-microsoft-intune-systems-after-stryker-breach/
The multi-billion dollar mistake: Why cloud misconfigurations are your biggest security threat

Mar 19, 2026 12:10 PM

Tags: access, authentication, breach, cisa, ciso, cloud, control, cyber, data, data-breach, flaw, google, government, group, hacker, Hardware, infrastructure, Intruder, leak, login, mfa, monitoring, network, password, ransom, risk, service, switch, threat, tool, training, update, zero-day

Most cloud setup errors, 8 out of 10, happen because people slip up, not because code fails.One out of three cloud setups sits empty, ignored by any oversight. A third of online storage spaces get zero attention from monitors.Almost one out of every two hundred storage units on Amazon’s cloud sits open, per a 2024…
The multi-billion dollar mistake: Why cloud misconfigurations are your biggest security threat

Mar 19, 2026 12:10 PM

Tags: access, authentication, breach, cisa, ciso, cloud, control, cyber, data, data-breach, flaw, google, government, group, hacker, Hardware, infrastructure, Intruder, leak, login, mfa, monitoring, network, password, ransom, risk, service, switch, threat, tool, training, update, zero-day

Most cloud setup errors, 8 out of 10, happen because people slip up, not because code fails.One out of three cloud setups sits empty, ignored by any oversight. A third of online storage spaces get zero attention from monitors.Almost one out of every two hundred storage units on Amazon’s cloud sits open, per a 2024…
900,000 contact records exposed in Aura data breach

Mar 19, 2026 12:10 PM

Tags: breach, data, data-breach, email, service, tool, unauthorized

Aura, the online safety service, confirmed that an unauthorized party accessed about 900,000 records, mostly names and email addresses from a marketing tool linked to a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/19/aura-data-breach-900000-records/
Your MFA isn’t broken, it’s being bypassed, and your employees can’t tell the difference

Mar 19, 2026 11:09 AM

Tags: access, attack, authentication, awareness, breach, credentials, cryptography, defense, detection, email, fido, finance, google, Hardware, identity, jobs, linkedin, login, malicious, mfa, microsoft, monitoring, passkey, password, phishing, service, theft, threat, vulnerability

Three failures that keep showing up: Through my research into adversary-in-the-middle attacks and reviewing industry incident reports, I have identified three consistent failures that make these attacks successful. 1. We trained our people for the wrong threat Most security awareness programs still teach the same things: Look for misspellings, check the sender address, hover over…
Your MFA isn’t broken, it’s being bypassed, and your employees can’t tell the difference

Mar 19, 2026 11:09 AM

Tags: access, attack, authentication, awareness, breach, credentials, cryptography, defense, detection, email, fido, finance, google, Hardware, identity, jobs, linkedin, login, malicious, mfa, microsoft, monitoring, passkey, password, phishing, service, theft, threat, vulnerability

Three failures that keep showing up: Through my research into adversary-in-the-middle attacks and reviewing industry incident reports, I have identified three consistent failures that make these attacks successful. 1. We trained our people for the wrong threat Most security awareness programs still teach the same things: Look for misspellings, check the sender address, hover over…
Aura Confirms Data Breach Exposing 900,000 Customer Records

Mar 19, 2026 8:10 AM

Tags: breach, cyber, data, data-breach, defense, exploit, incident response, network, phishing, social-engineering, threat, unauthorized

Digital security provider Aura has confirmed a data breach affecting approximately 900,000 user records following a targeted social engineering attack. The incident highlights the ongoing threat of sophisticated phishing campaigns aimed at bypassing technical defenses by exploiting human elements within an organization. Aura immediately initiated its incident response protocol upon detecting the unauthorized network activity.…
US lawmakers quiz Meta over ‘dangerous’ facial-recognition plans for smart glasses

Mar 19, 2026 1:10 AM

Tags: breach, technology

Democratic senators warn that Meta’s plans to introduce facial-recognition technology into smart glasses could lead to normalisation of mass surveillance and breach citizens’ rights First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366640518/US-lawmakers-quiz-Meta-over-dangerous-facial-recognition-plans-for-smart-glasses
Aura confirms data breach exposing 900,000 marketing contacts

Mar 19, 2026 1:10 AM

Tags: access, breach, data, data-breach, email, identity, unauthorized

Identity protection company Aura has confirmed that an unauthorized party gained access to nearly 900,000 customer records containing names and email addresses. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/aura-confirms-data-breach-exposing-900-000-marketing-contacts/
Bank software vendor Marquis says more than 670,000 impacted by August breach

Mar 18, 2026 7:10 PM

Tags: breach, data, finance, software

The company, which provides software that allows financial institutions to communicate with customers, previously warned in November that at least 74 banks, credit unions and financial institutions were impacted by a data breach. First seen on therecord.media Jump to article: therecord.media/marquis-bank-vendor-data-breach
The New Insider Threat: Autonomous Systems With Excessive Permissions

Mar 18, 2026 5:10 PM

Tags: ai, breach, ciso, cybersecurity

Explore how overprivileged AI agents are becoming the “new insider threat” in 2026. Learn about the rise of autonomous machine identities, the “superuser problem,” and real-world breaches like Amazon Q and EchoLeak that are forcing CISOs to rethink cybersecurity governance. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/the-new-insider-threat-autonomous-systems-with-excessive-permissions/
Marquis says over 672,000 people had personal and financial data stolen in ransomware attack

Mar 18, 2026 4:10 PM

Tags: attack, breach, data, finance, fintech, hacker, ransomware

Fintech company Marquis is notifying hundreds of thousands of people that hackers stole their personal and financial information, including their Social Security numbers. First seen on techcrunch.com Jump to article: techcrunch.com/2026/03/18/marquis-says-over-672000-people-had-personal-and-financial-data-stolen-in-ransomware-attack/
FancyBear Server Leak Exposes Stolen Credentials, 2FA Secrets, NATO Targets

Mar 18, 2026 3:10 PM

Tags: 2fa, breach, credentials, cyber, data-breach, espionage, government, infrastructure, leak, military, russia

FancyBear’s latest operational security failure has exposed a live Russian espionage server packed with stolen credentials, 2FA secrets, and detailed insight into the ongoing targeting of European government and military networks. The exposed infrastructure, tied to APT28/FancyBear and previously reported by CERT”‘UA and Hunt.io, reveals both the scale of the compromises and the carelessness of…
Cybersecurity and privacy priorities for 2026: The legal risk map

Mar 18, 2026 11:11 AM

Tags: attack, authentication, awareness, best-practice, breach, communications, country, cyber, cybersecurity, data, defense, finance, fraud, governance, government, incident, incident response, infrastructure, law, mfa, monitoring, privacy, ransomware, regulation, risk, risk-management, service, strategy, supply-chain, threat, usa

Continued federal interest in cybersecurity and privacy, especially in connection with national security concerns: The evident connection between cybersecurity and privacy and national security have led to a number of federal initiatives in recent years. Most recently in March 2026, the White House announced the current administration’s Cyber Strategy for America, renewing a commitment to…
Robotic surgery firm Intuitive reports data breach after targeted phishing attack

Mar 18, 2026 11:11 AM

Tags: attack, breach, corporate, data, data-breach, phishing

Intuitive suffered a phishing attack leading to a data breach exposing customer, employee, and corporate information. Intuitive is an American company that designs, manufactures, and sells robotic systems for minimally invasive surgery. Its most well-known products include the da Vinci Surgical System for general surgery and the Ion endoluminal system for precise procedures inside the…
Microsoft Teams-Based Vishing Attack Tricks Victims Into Quick Assist Takeover

Mar 18, 2026 10:09 AM

Tags: attack, breach, corporate, cyber, cyberattack, detection, identity, microsoft, phishing, social-engineering, software, threat, vulnerability

Threat actors are increasingly relying on social engineering rather than complex software vulnerabilities to breach corporate networks. In November 2025, Microsoft’s Detection and Response Team (DART) investigated a notable identity-first intrusion where attackers successfully used Microsoft Teams voice phishing (vishing) to compromise a corporate device via Quick Assist. This incident, detailed in Microsoft’s latest Cyberattack…
CISOs rethink their data protection strategies

Mar 18, 2026 9:10 AM

Tags: access, ai, attack, automation, breach, business, cisco, ciso, cloud, compliance, computing, control, cyber, data, defense, framework, governance, healthcare, identity, jobs, LLM, privacy, resilience, risk, service, strategy, technology, tool, zero-trust

Factors driving strategy evaluations CISOs, security experts, and data practitioners cite the expanding use of AI in the enterprise as the main reason they’re rethinking their data protection strategies.”AI is exposing more sensitive information as [workers] are taking that information and typing it into LLMs,” says Errol Weiss, CSO at Health-ISAC.AI tools make it easy…
Operation Epic Fury: Why exposure data changes everything about Iran’s cyber-kinetic campaign

Mar 18, 2026 5:10 AM

Tags: access, ai, api, apt, attack, backdoor, breach, cctv, cisa, cloud, country, cve, cvss, cyber, cybersecurity, data, data-breach, ddos, detection, dns, espionage, exploit, firewall, flaw, fortinet, government, group, healthcare, identity, infrastructure, intelligence, Internet, iot, iran, kev, malware, microsoft, military, network, office, phishing, radius, remote-code-execution, risk, strategy, supply-chain, technology, threat, unauthorized, update, vpn, vulnerability, warfare, windows

Iran’s retaliatory campaign following Operation Epic Fury has collapsed the boundary between physical and digital warfare. Tenable’s exposure data analysis across seven target countries reveals that the largest exploitable attack surface isn’t the headline threat, it’s a Microsoft Word N-day affecting nearly 14 million assets. Key takeaways: Exposure data rebalances the threat picture. A Microsoft…
Operation Epic Fury: Why exposure data changes everything about Iran’s cyber-kinetic campaign

Mar 18, 2026 5:10 AM

Tags: access, ai, api, apt, attack, backdoor, breach, cctv, cisa, cloud, country, cve, cvss, cyber, cybersecurity, data, data-breach, ddos, detection, dns, espionage, exploit, firewall, flaw, fortinet, government, group, healthcare, identity, infrastructure, intelligence, Internet, iot, iran, kev, malware, microsoft, military, network, office, phishing, radius, remote-code-execution, risk, strategy, supply-chain, technology, threat, unauthorized, update, vpn, vulnerability, warfare, windows

Iran’s retaliatory campaign following Operation Epic Fury has collapsed the boundary between physical and digital warfare. Tenable’s exposure data analysis across seven target countries reveals that the largest exploitable attack surface isn’t the headline threat, it’s a Microsoft Word N-day affecting nearly 14 million assets. Key takeaways: Exposure data rebalances the threat picture. A Microsoft…
Georgia man charged for robbing NBA, NFL players through stolen Apple account details

Mar 17, 2026 7:10 PM

Tags: apple, breach

A Georgia man who had already served time for conning professional athletes is accused of impersonating a prominent adult film actress in order to break into the Apple accounts of NBA and NFL players. First seen on therecord.media Jump to article: therecord.media/phishing-nba-nfl-scammer-arrested
EU sanctions Iranian cyber front over election meddling, Charlie Hebdo breach

Mar 17, 2026 6:10 PM

Tags: breach, china, cyber, election, hacker, iran, jobs

State-sponsored attackers joined by Chinese snoops and hackers-for-hire in latest round of economic penalties First seen on theregister.com Jump to article: www.theregister.com/2026/03/17/eu_iran_cyber_sanctions/
LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader

Mar 17, 2026 5:10 PM

Tags: access, breach, credentials, malicious, ransomware, social-engineering

The ransomware operation known as LeakNet has adopted the ClickFix social engineering tactic delivered through compromised websites as an initial access method.The use of ClickFix, where users are tricked into manually running malicious commands to address non-existent errors, is a departure from relying on traditional methods for obtaining initial access, such as through stolen credentials…
Intuitive’s Certain Business, Employee, Corporate Data Accessed in Recent Breach

Mar 17, 2026 11:10 AM

Tags: access, attack, breach, business, corporate, credentials, cyberattack, data, login, phishing, unauthorized

Intuitive has disclosed a cyberattack involving a targeted phishing incident that led to unauthorized access to certain internal business systems. The company, known for its robotics-assisted surgical technologies, confirmed that attackers successfully obtained an employee’s login credentials through what can be described as a phishing attack, allowing them to infiltrate certain internal IT business applications.…
PCI DSS Compliance Framework for Global Payment Security

Mar 17, 2026 9:10 AM

Tags: attack, breach, compliance, cybersecurity, data, framework, hacker, PCI, risk

As digital payments continue to dominate global commerce, organizations that process, store, or transmit payment card data face increasing cybersecurity risks. From sophisticated data breaches to payment skimming attacks, hackers constantly target cardholder information. To mitigate these risks and establish a unified security baseline, the Payment Card Industry Data Security Standard (PCI DSS) was developed….…
What to do in the first 24 hours of a breach

Mar 17, 2026 7:10 AM

Tags: breach, ceo, cybersecurity

In this Help Net Security video, Arvind Parthasarathi, CEO of CYGNVS, walks through a 10-step process for handling a cybersecurity breach. The first five steps cover … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/17/incident-response-breach-video/
What to do in the first 24 hours of a breach

Mar 17, 2026 7:10 AM

Tags: breach, ceo, cybersecurity

In this Help Net Security video, Arvind Parthasarathi, CEO of CYGNVS, walks through a 10-step process for handling a cybersecurity breach. The first five steps cover … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/17/incident-response-breach-video/
Industrial Systems Under Siege: 77% of OT Environments Suffer Cyber Breaches

Mar 16, 2026 10:10 PM

Tags: breach, cyber, risk, threat

Industrial systems face rising cyber threats as OT security lags modernization. A new survey reveals widespread breaches and growing risks to critical infrastructure. The post Industrial Systems Under Siege: 77% of OT Environments Suffer Cyber Breaches appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-industrial-cybersecurity-ot-security-survey/
Companies House restarts online services following cyber breach

Mar 16, 2026 9:10 PM

Tags: breach, cyber, data, risk, service, update

Companies House was forced to pull its WebFiling service offline at the weekend after it emerged that a flawed update was putting data at risk of exposure. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366640295/Companies-House-restarts-online-services-following-cyber-breach
Companies House restarts online services following cyber breach

Mar 16, 2026 9:10 PM

Tags: breach, cyber, data, risk, service, update

Companies House was forced to pull its WebFiling service offline at the weekend after it emerged that a flawed update was putting data at risk of exposure. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366640295/Companies-House-restarts-online-services-following-cyber-breach