Tag: data-breach
-
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial organizations. Exposed attacker directories revealed session histories, configurations, and operational scripts, showing how AI tooling supported intrusions that resulted in data theft between late September and early October 2026. CrowdStrike’s October 7 investigation assessed…
-
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial organizations. Exposed attacker directories revealed session histories, configurations, and operational scripts, showing how AI tooling supported intrusions that resulted in data theft between late September and early October 2026. CrowdStrike’s October 7 investigation assessed…
-
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial organizations. Exposed attacker directories revealed session histories, configurations, and operational scripts, showing how AI tooling supported intrusions that resulted in data theft between late September and early October 2026. CrowdStrike’s October 7 investigation assessed…
-
Scammers capitalize on GTA 6 hype to push malware and crypto cons
Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI (GTA 6) weeks before the game’s November 19 launch, Netcraft warned in a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/gta-6-scams-fake-leaks-early-access/
-
Why waiting for quantum computers to arrive could leave your security exposed
By Tim Hudson, President, OpenSSL Corporation For organisations preparing for post-quantum cryptography, one of the biggest risks is assuming they can wait until a sufficiently powerful quantum computer arrives before taking action. Whilst it’s understandable to focus on the point when quantum computers might be able to break today’s cryptography, nobody can predict exactly when…
-
Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques
Chainalysis, the blockchain analytics company, said Wednesday night that some information belonging to all its users, which its website says include those in the law enforcement and national security sectors, had been exposed in a cyberattack. First seen on therecord.media Jump to article: therecord.media/chainalysis-all-users-hit-by-agentic-cyberattack
-
Airline Data Breach Widens as Singapore Airlines Reports 46,000 Affected Records
Singapore Airlines (SIA) is the newest name on a growing list of carriers affected by the Amadeus cybersecurity incident, confirming that Amadeus IT Group, the global travel technology provider, accessed roughly 46,000 of its booking records through its systems. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/amadeus-cybersecurity-incident/
-
Airline Data Breach Widens as Singapore Airlines Reports 46,000 Affected Records
Singapore Airlines (SIA) is the newest name on a growing list of carriers affected by the Amadeus cybersecurity incident, confirming that Amadeus IT Group, the global travel technology provider, accessed roughly 46,000 of its booking records through its systems. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/amadeus-cybersecurity-incident/
-
AI-Powered BOSSAI Attacks Expose Patient Records and Emergency Dispatch Data in Taiwan
BOSSAI, an agentic attack platform run by one operator that exposed emergency medical and dispatch data in Taipei. The campaign targeted hundreds of organizations in eleven countries, including emergency services, banks, universities, military systems and e-commerce sites. Confirmed breaches hit universities and emergency providers, with medical data and PII exfiltrated. A Taipei fire department patient-care…
-
DreamHost confirms data breach exposed FTP logins and webmail sessions
DreamHost is warning of a data breach after attackers gained access to its File Manager platform for two months and stole customers’ FTP/SFTP usernames and passwords. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dreamhost-confirms-data-breach-exposed-ftp-logins-and-webmail-sessions/
-
Fake GTA VI Download Sites Push Malware Ahead of Launch
Fake GTA VI download sites lure gamers with leaked builds, malware, crypto payment demands and mobile versions ahead… First seen on hackread.com Jump to article: hackread.com/fake-gta-vi-download-sites-malware-launch/
-
mSecure password manager hack prompts password reset warnings
mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted customer database. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/msecure-password-manager-hack-prompts-password-reset-warnings/
-
Hackers Use Stolen Credentials to Fake Major Data Breaches and Pressure Companies for Money
Hackers are using exposed credentials to access limited corporate data, then presenting that access as evidence of major breaches to pressure companies into paying. The findings concern external attacker activity affecting third parties, not a compromise of ReliaQuest’s environment. They highlight a distinction: authentic leaked records do not automatically prove the extensive network intrusion an…
-
Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/philippine-migrant-worker-data-69gb-government-breach
-
Kim Jong-un, crypto bros and a $6.3bn heist podcast
North Korea is said to be behind the theft from the crypto exchange Binance. How did they pull it off and what will they do with the money? <strong>Kalyeena Makortoff </strong>and <strong>Jean H Lee</strong> report<a href=”https://www.theguardian.com/profile/kalyeena-makortoff”><br>It was 8pm last Thursday when the panic alarms went off across the crypto world. Binance, the world’s biggest crypto…
-
Germany Busts ‘Crime-as-a-Service’ Investment Fraud Outfit
German police led a multinational probe that exposed an alleged crime-as-a-service provider supplying fraudulent trading platforms to investment scammers. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/germany-crime-service-investment-fraud
-
WorkOS says attacker used ARTEX AI to breach internal sales app
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/workos-says-attacker-used-artex-ai-to-breach-internal-sales-app/
-
New York City’s Mamdani criticizes Madison Square Garden owner over surveillance tech
The mayor’s comments come after the entertainment giant’s data breach last year, which exposed James Dolan’s surveillance. First seen on techcrunch.com Jump to article: techcrunch.com/2026/11/03/new-york-citys-mamdani-criticizes-madison-square-garden-owner-over-surveillance-tech/
-
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services.The tactic is called LLMjacking, a form of resource hijacking adapted for the LLM era, where an attacker obtains an API key through phishing, source code leaks, misconfigured environments, or exposed…
-
Harvard University data breach exposed info of 851,000 accounts
Hackers who breached Harvard University’s Alumni Affairs and Development systems in November 2025 stole data linked to more than 850,000 unique email addresses, according to breach notification service Have I Been Pwned. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/harvard-university-data-breach-exposed-info-of-851-000-accounts/
-
Cogent Security Makes the Fortune Cyber 60 for a Second Year, With a Plan to Run Cyber Defense Like a Factory
San Francisco, CA, November 3rd, 2026, CyberNewswire Cogent Security, an applied AI cybersecurity company, reported that the PHP2Shell vulnerability exposed significant gaps in enterprise vulnerability response. Disclosed on October 21, PHP2Shell involved two critical flaws that had remained in PHP for more than a decade. AI-assisted research helped identify the vulnerabilities and develop working exploits…
-
Cogent Security Makes the Fortune Cyber 60 for a Second Year, With a Plan to Run Cyber Defense Like a Factory
San Francisco, CA, November 3rd, 2026, CyberNewswire Cogent Security, an applied AI cybersecurity company, reported that the PHP2Shell vulnerability exposed significant gaps in enterprise vulnerability response. Disclosed on October 21, PHP2Shell involved two critical flaws that had remained in PHP for more than a decade. AI-assisted research helped identify the vulnerabilities and develop working exploits…
-
Over 1,000 GitLab servers vulnerable to ongoing RCE attacks
Tags: attack, data-breach, exploit, flaw, gitlab, Internet, rce, remote-code-execution, vulnerabilityOver 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-1-000-gitlab-servers-vulnerable-to-code-execution-attacks/
-
Researchers Discover High-Severity ChatGPT Flaw That Exposed Private Conversations to Attackers
Researchers found a chain of flaws that turned an ordinary public ChatGPT share link into attacker-controlled JavaScript running inside the victim’s signed-in session. OpenAI fixed the issue on October 26 and classified it as P1. The Parameter researchers’ full technical write-up says the bug earned a $5,000 bounty. High-Severity ChatGPT Flaw An attacker published a…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
The 5 Best Cyber Range Tools for Security Teams in 2026
A data breach now costs $4.99 million on average, according to IBM’s 2026 report. Slow responses cost more. Cyber range platforms let your security operations center (SOC) rehearse real attacks before they hit production. This guide covers: Read on to find the right fit for your team. Which cyber range tools are worth shortlisting in…