Tag: data-breach
-
US Homeland Security Data Breach Exposes Personal Details of Over 41,000 Employees
A newly disclosed data leak has exposed personal and professional information on more than 40,000 U.S. Department of Homeland Security employees, including personnel in surveillance, human intelligence, and undercover operations. Distributed Denial of Secrets announced the publication on October 28. It attributed the information to an entity calling itself “Department of Peace.” The reported exposure…
-
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff… First seen on hackread.com Jump to article: hackread.com/summit-public-schools-breach-student-staff-data/
-
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff… First seen on hackread.com Jump to article: hackread.com/summit-public-schools-breach-student-staff-data/
-
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff… First seen on hackread.com Jump to article: hackread.com/summit-public-schools-breach-student-staff-data/
-
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files. First seen on hackread.com Jump to article: hackread.com/hackers-impersonate-ai-bots-hunt-exposed-credentials/
-
Sony ISP subsidiary data breach exposes 2.5 million customer records
Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sony-isp-subsidiary-data-breach-exposes-25-million-customer-records/
-
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Tags: ai, attack, breach, china, cybersecurity, data-breach, exploit, government, intelligence, network, threat, vulnerabilityCybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems.The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root First seen…
-
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/attacker-impersonates-ai-bots-scans-credentials
-
345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD
Over 345,000 unique email addresses were exposed in the September 2026 breach at German far-right political party Alternative für Deutschland (AfD). Breach notification … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/afd-data-breach-email-leak/
-
CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers
CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2026-97631 (CVSS score of 9.5), in the firmware that boots most of the world’s servers is now public, and the patch details came out months early. The bug affects TianoCore…
-
Sony Data Breach Exposes 2.58 Million Customer Records and 54,401 Email Credentials
Tags: breach, communications, credentials, credit-card, cyber, data, data-breach, email, Internet, network, passwordSony Network Communications disclosed a data breach that exposed 2,585,481 customer records linked to its So-net and Plala (S Course) internet services. The breach, announced on October 27, 2026, compromised passwords for 54,401 email addresses. However, it did not affect primary membership passwords or credit card information. The compromised database contained 2,141,986 records from So-net…
-
Sony Data Breach Exposes 2.58 Million Customer Records and 54,401 Email Credentials
Tags: breach, communications, credentials, credit-card, cyber, data, data-breach, email, Internet, network, passwordSony Network Communications disclosed a data breach that exposed 2,585,481 customer records linked to its So-net and Plala (S Course) internet services. The breach, announced on October 27, 2026, compromised passwords for 54,401 email addresses. However, it did not affect primary membership passwords or credit card information. The compromised database contained 2,141,986 records from So-net…
-
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
Tags: access, attack, authentication, business, cloud, corporate, credentials, data-breach, phishing, serviceModern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind.ANY.RUN’s analysis of Skyw4lker, a device code phishing campaign primarily targeting U.S. organizations First seen on thehackernews.com Jump to…
-
Data breach at Sony-owned internet provider compromises 2.6 million customer records
Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/sony-network-communications-data-breach-so-net/
-
Data breach at Sony-owned internet provider compromises 2.6 million customer records
Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/sony-network-communications-data-breach-so-net/
-
12 Confidential Computing Solutions: The 2026 Buyer’s Verdict Guide
Confidential computing closes encryption’s last gap data exposed during computation with hardware-enforced TEEs that prove their state via attestation, and 2026’s buying question is one sentence: who must be unable to see this data, provably? This verdict guide judges twelve options across the real menu: hyperscaler families, the two silicon lanes everything rides, independent enablement…
-
AI-Powered Hackers Target Japanese Companies With Automated Attacks and Credential Theft
Tags: ai, attack, credentials, cyber, cybersecurity, data-breach, hacker, intelligence, theft, threat, toolThreat actors targeting Japanese organizations are using artificial intelligence to automate intrusion workflows, speed up attack planning, and develop credential-theft tools, according to an investigation of three exposed attack infrastructures. The findings show distinct levels of AI involvement, from autonomous agents conducting attacks to experienced operators using generated scripts. The research follows Japan’s National Cybersecurity…
-
AI-Powered Hackers Target Japanese Companies With Automated Attacks and Credential Theft
Tags: ai, attack, credentials, cyber, cybersecurity, data-breach, hacker, intelligence, theft, threat, toolThreat actors targeting Japanese organizations are using artificial intelligence to automate intrusion workflows, speed up attack planning, and develop credential-theft tools, according to an investigation of three exposed attack infrastructures. The findings show distinct levels of AI involvement, from autonomous agents conducting attacks to experienced operators using generated scripts. The research follows Japan’s National Cybersecurity…
-
Breach victims discover their data was held by companies they’ve never heard of
Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026. Businesses rely on … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/kroll-third-party-data-breaches-insurance-claims-report/
-
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator.TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously…
-
Warp discloses breach exposing AI agent logs, user telemetry data
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project’s infrastructure. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/warp-discloses-breach-exposing-ai-agent-logs-user-telemetry-data/
-
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/openai-compaction-flaw-ai/
-
Columbia University Settles $16.1M Data Breach Lawsuit After 2025 Cyberattack
An internal investigation into the June 2025 Columbia University cyberattack found no evidence that the stolen data was sold or distributed on the dark web, Columbia University Information Technology announced Friday. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/columbia-university-cyberattack/
-
Energy giant ENGIE discloses data breach affecting customers
French energy giant ENGIE, one of the world’s largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/energy-giant-engie-discloses-data-breach-affecting-customers/
-
Exeon AgentGuard: Sicherheitslösung erkennt Schatten-KI, Datenlecks und riskantes Agentenverhalten
Exeon AgentGuard macht Schatten-KI und autonome KI-Agenten sichtbar und erkennt verdächtige Aktivitäten, Datenlecks und Berechtigungsmissbrauch. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/exeon-agentguard-neue-ki-sicherheitsloesung-erkennt-schatten-ki-datenlecks-und-riskantes-agentenverhalten/a46932/
-
University of Copenhagen Confirms Data Breach Affecting 525,000 People
The University of Copenhagen has confirmed a data breach affecting about 525,000 individuals after hackers accessed a test environment that contained personal information. The intrusion was detected on October 20 and publicly disclosed on October 23. Investigators are working to determine the full extent of the exposure. The compromised database included full names, Danish national…
-
Hacker Uses Generative AI to Breach 90 Companies and Steal 8.2 Million Records
South Korean police have arrested a 32-year-old suspect, identified only as A, accused of leading a massive data breach that stole 8.2 million personal information records and internal documents from about 90 organizations. The victims included private academies, hospitals, golf courses, universities, and an affiliate of a major corporation, Yonhap News Agency reported. On October…
-
University of Copenhagen data breach exposes data of 525,000 people
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/university-of-copenhagen-data-breach-exposes-data-of-525-000-people/
-
Exposed LiteLLM Key Enabled PyPI Supply Chain Attack
Unrevoked Credential Exposed in May Enabled Repository Compromise in October. An attacker exploited an unrevoked LiteLLM master key to steal GitHub credentials, bypass release controls and publish a credential-stealing PyPI package downloaded roughly 50,000 times, exposing developer systems, cloud environments and AI provider secrets. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/exposed-litellm-key-enabled-pypi-supply-chain-attack-a-33211