Tag: breach
-
pcTattletale Founder Bryan Fleming Pleads Guilty in Federal Stalkerware Case
Bryan Fleming, founder of pcTattletale, pleads guilty in a landmark federal spying case. Read how an undercover HSI sting and a data breach ended a decade of illegal stalkerware sales. First seen on hackread.com Jump to article: hackread.com/pctattletale-stalkerware-founder-bryan-fleming-guilty/
-
Fifth of Breaches Take Two Weeks to Recover From
Absolute Security claims that full recovery from endpoint-related downtime can take up to a fortnight for most organizations First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fifth-breaches-two-weeks-recover/
-
Researchers Poison Stolen Data to Sabotage AI Model Accuracy
A groundbreaking cybersecurity research team has developed a novel defensive technique that renders stolen artificial intelligence databases virtually useless to attackers by deliberately poisoning proprietary knowledge graphs with plausible yet false information.”‹ The research, conducted by scientists from the Institute of Information Engineering at the Chinese Academy of Sciences, National University of Singapore, and Nanyang…
-
Ransomware Hits a Claims Giant: What the Sedgwick Breach Reveals About Modern Extortion Attacks
A recent breach disclosure reveals that claims management firm Sedgwick was targeted by the TridentLocker ransomware group, with attackers claiming to have exfiltrated sensitive data from systems supporting its government services operations before deploying ransomware, according to Cybersecurity News. While Sedgwick has not disclosed full technical details, the incident follows a well-established ransomware playbook. Attackers…
-
Spanish airline Iberia attributes recent data breach claims to November incident
A spokesperson said the information relates to an incident that came to light in November, when a threat actor demanded $150,000 for allegedly stolen data. First seen on therecord.media Jump to article: therecord.media/spanish-airline-attributes-recent-breach-allegation-to-nov-incident
-
Malicious NPM Packages Deliver NodeCordRAT
IntroductionZscaler ThreatLabz regularly monitors the npm database for suspicious packages. In November 2025, ThreatLabz identified three malicious packages: bitcoin-main-lib, bitcoin-lib-js, and bip40. The bitcoin-main-lib and bitcoin-lib-js packages execute a postinstall.cjs script during installation, which installs bip40, the package that contains the malicious payload. This final payload, named NodeCordRAT by ThreatLabz, is a remote access trojan (RAT) with data-stealing capabilities. It is also possible to download bip40…
-
Malicious NPM Packages Deliver NodeCordRAT
IntroductionZscaler ThreatLabz regularly monitors the npm database for suspicious packages. In November 2025, ThreatLabz identified three malicious packages: bitcoin-main-lib, bitcoin-lib-js, and bip40. The bitcoin-main-lib and bitcoin-lib-js packages execute a postinstall.cjs script during installation, which installs bip40, the package that contains the malicious payload. This final payload, named NodeCordRAT by ThreatLabz, is a remote access trojan (RAT) with data-stealing capabilities. It is also possible to download bip40…
-
Researchers poison stolen data to make AI systems return wrong results
Wanted: Chief Disinformation Officer to pollute company knowledge graphs First seen on theregister.com Jump to article: www.theregister.com/2026/01/06/ai_data_pollution_defense/
-
1M Customer Records Allegedly Stolen in Brightspeed Breach
Brightspeed is investigating claims that the Crimson Collective stole data from more than one million customers. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/1m-customer-records-allegedly-stolen-in-brightspeed-breach/
-
Lone Hacker Used Infostealers to Access Data at 50 Global Companies
A Hudson Rock report reveals how an Iranian hacker named Zestix breached 50 global companies, including Iberia Airlines and Pickett Associates, by using stolen passwords and a lack of MFA. First seen on hackread.com Jump to article: hackread.com/lone-hacker-infostealers-global-companies-data/
-
Lack of MFA is Common Thread in Vast Cloud Credential Heist
An emerging threat actor that goes by Zestix used an assortment of infostealers to obtain credentials and breach file-sharing instances of approximately 50 enterprises. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/lack-mfa-common-thread-vast-cloud-credential-heist
-
Microsoft warns of a surge in phishing attacks exploiting email routing gaps
Hardening configurations can help: The disclosure emphasizes that proper configuration of mail authentication mechanisms is the most effective defense against this spoofing vector. Organizations are advised to adopt strict DMARC reject policies and enforce SPF hard fails so that unauthenticated mail claiming to be from their domains is rejected or safely quarantined.Additionally, recommendations include ensuring…
-
Major Data Breach Hits Company Operating 150 Gas Stations in the US
Texas based Gulshan Management Services, operator of Handi Plus and Handi Stop gas stations, reports a data breach impacting over 377,000 people. First seen on hackread.com Jump to article: hackread.com/data-breach-us-gas-stations-company/
-
Hackers Claim to Disconnect Brightspeed Customers After Breach
A hacking collective claims it has disconnected customers of US ISP Brightspeed First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/hackers-disconnect-brightspeed/
-
MFA Failure Enables Infostealer Breach At 50 Enterprises
Threat actor “Zestix” was able to breach around 50 firms using infostealers because they lacked multi-factor authentication First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/mfa-failure-infostealer-breach-50/
-
8 things CISOs can’t afford to get wrong in 2026
Tags: access, advisory, ai, attack, automation, awareness, breach, business, ciso, cloud, communications, compliance, control, cyber, cyberattack, cybersecurity, data, data-breach, defense, dora, encryption, finance, firmware, GDPR, healthcare, identity, incident response, india, infrastructure, injection, insurance, intelligence, iot, jobs, law, malicious, monitoring, network, privacy, ransom, regulation, resilience, risk, saas, scam, service, software, strategy, supply-chain, tactics, technology, theft, threat, tool, training, update, vulnerability, zero-trust“Identity and access controls for AI agents and AI platforms are one of the most important areas of concern for CISOs,” says Jason Stading, director at global technology research and advisory firm ISG. “Right now, permissions and access rights for AI are a black box in many areas. We will see a major push over…
-
Automated data poisoning proposed as a solution for AI theft threat
Tags: ai, breach, business, cyber, data, encryption, framework, intelligence, LLM, malicious, microsoft, resilience, risk, risk-management, technology, theft, threatKnowledge graphs 101: A bit of background about knowledge graphs: LLMs use a technique called Retrieval-Augmented Generation (RAG) to search for information based on a user query and provide the results as additional reference for the AI system’s answer generation. In 2024, Microsoft introduced GraphRAG to help LLMs answer queries needing information beyond the data on…
-
Seceon Launches aiBAS360: AI-Powered Breach Attack Simulation Platform Enables Organizations to Test Defenses Against Real-World APTs and Threat Actors
New Platform Features MITRE ATT&CK Framework Mapping and is Now Available Within OTM Platform as well as in aiSIEM-CGuard 2.0; Global Webinar Series Underway to Showcase Capabilities to MSSP Partners Worldwide WESTFORD, Mass., Jan. 6, 2026 /PRNewswire/, Seceon Inc., a global leader in AI/ML-driven cybersecurity solutions, today announced the general availability of aiBAS360, its innovative Breach First…
-
Cybersecurity hat kein Budget-Problem
Tags: breach, business, ciso, compliance, cyberattack, cybersecurity, cyersecurity, governance, jobs, risk, security-incident, strategyEin Tag im Leben eines Sicherheitsentscheiders”¦Wenn es um Security-Budgets geht, dreht sich ein Großteil der (Online-)Diskussionen darum, wie man das “Board” für sich gewinnt und Investitionen rechtfertigt. Einige Ansätze basieren auf spezifischen Finanzmodellen und zielen darauf ab, den Return on Investment (ROI) zu rechtfertigen. Andere konzentrieren sich eher darauf, Risiken zu quantifizieren und deren Minderung…
-
Brightspeed investigates breach as crims post stolen data for sale
Crimson Collective claims ‘sophisticated attack’ that allows them to ‘disconnect every user from their mobile service’ First seen on theregister.com Jump to article: www.theregister.com/2026/01/06/brightspeed_investigates_breach/
-
Conduent Hack Victim Count Soars by at Least 50%
Why Are Third-Party Vendor Breaches So Hard to Figure Out?. The victim tally of a 2024 hacking incident at medical services provider Conduent again soared after a new regulatory disclosure by the company, in this case to Texas authorities. The company told Lone Star state officials the breach affected nearly 14.8 million Texans, alone. First…
-
Missing MFA Strikes Again: Hacker Hits Collaboration Tools
Terabytes of Data Stolen From Cloud-Based Collaboration Tools, Researchers Warn. Dozens of organizations that use real-time content collaboration platforms appear to have lost not only credentials but also terabytes of hosted data to information-stealing malware being wielded by an initial access broker with a sideline in auctioning large volumes of stolen data. First seen on…
-
Ledger Confirms Global-e Breach, Warns Users of Phishing Attempts
Ledger confirms data breach via Global-e partner. Customer info exposed, phishing attacks active. No passwords or crypto recovery phrases leaked. First seen on hackread.com Jump to article: hackread.com/ledger-global-e-breach-phishing-attempts/
-
Sedgwick confirms breach at government contractor subsidiary
Claims administration and risk management company Sedgwick has confirmed that its federal contractor subsidiary, Sedgwick Government Solutions, was the victim of a security breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sedgwick-confirms-breach-at-government-contractor-subsidiary/