Tag: data
-
4 issues holding back CISOs’ security agendas
Tags: access, ai, application-security, attack, business, ciso, cloud, compliance, control, cyber, cybersecurity, data, endpoint, framework, governance, intelligence, jobs, monitoring, network, resilience, risk, risk-assessment, risk-management, sans, service, skills, strategy, technology, threat, tool, training, vulnerability, vulnerability-management2. Inability to keep pace with AI innovation and adoption: Executives and employees alike have been rushing to adopt artificial intelligence, enticed by expectations that AI will transform workflows and save time, money, and effort.But CISOs for the most part have not kept pace with their business colleagues’ rate of AI adoption.According to a survey…
-
Nike Probes Possible Cybersecurity Incident Following Dark Web Claims
Nike has confirmed that it is investigating a potential cybersecurity incident after claims surfaced online that its internal data may have leaked by a cybercrime group. The same group, known for extortion-driven attacks against other companies, previously claimed the Nike cyberattack on its dark web site. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/nike-cyberattack-investigation/
-
AI’s appetite for data is testing enterprise guardrails
Privacy programs are taking on more operational responsibility across the enterprise. A new Cisco global benchmark study shows expanding mandates, rising investment, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/27/cisco-ai-expands-privacy-programs/
-
AI’s appetite for data is testing enterprise guardrails
Privacy programs are taking on more operational responsibility across the enterprise. A new Cisco global benchmark study shows expanding mandates, rising investment, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/27/cisco-ai-expands-privacy-programs/
-
Why be optimistic about the future of secrets management?
How Does Non-Human Identity Management Revolutionize Secrets Security? Is your organization effectively managing its non-human identities (NHIs)? With the growing complexity of interconnected systems and the surge of machine identities, securing these non-human entities has become a cornerstone in protecting sensitive data and maintaining robust cybersecurity standards. Understanding the role of NHIs and their significance……
-
How MSSPs Can Help Clients Mitigate Shadow IT and Data Sprawl with Cavelo
Mitigate shadow IT and data sprawl with a modern, data-first MSSP approach. Learn how Cavelo helps you gain visibility, reduce risk, and strengthen client trust. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/how-mssps-can-help-clients-mitigate-shadow-it-and-data-sprawl-with-cavelo/
-
How MSSPs Can Help Clients Mitigate Shadow IT and Data Sprawl with Cavelo
Mitigate shadow IT and data sprawl with a modern, data-first MSSP approach. Learn how Cavelo helps you gain visibility, reduce risk, and strengthen client trust. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/how-mssps-can-help-clients-mitigate-shadow-it-and-data-sprawl-with-cavelo/
-
Why MSPs Should Add Privileged Access Management (PAM) To Their Security Offerings
It’s no surprise that the most popular managed service is security. Cybersecurity threats are a daily occurrence and continue to get more sophisticated, with identity-based attacks now the primary vector. For example, 2023 saw a 72% increase in data breaches… Read More First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/why-msps-should-add-privileged-access-management-pam-to-their-security-offerings/
-
Study: Future IT Workers Would Sell Patient Data
Nearly 60% of Tech Students Said They’d Violate HIPAA If the Price Was Right. Budding IT insiders can be corrupted into giving up protected health information of a very famous patient, say State University of New York at Buffalo researchers who also found a correlation between an interest in white hat hacking and illegal breaches.…
-
Upwind Secures $250M to Extend CNAPP to AI, Data Security
Series B Round at $1.5B Valuation Backs Push Into AI, Application and Data Security. Cloud security startup Upwind has raised $250 million to expand its CNAPP capabilities beyond detection and response. The company aims to accelerate engineering investment and move into high-demand categories such as AI and data security, achieving a $1.5 billion valuation. First…
-
Top Authentication Methods for Preventing Data Breaches
Authentication determines who gets in and who stays out. Getting this right means fewer breaches, less downtime, and stronger trust with customers. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/top-authentication-methods-for-preventing-data-breaches/
-
Treasury Cuts Ties With Booz Allen Over IRS Data Leaks
Booz Allen Loses Treasury Work in Move Tied to Trump Waste Crackdown. The U.S. Department of Treasury said it canceled all active contracts with Booz Allen Hamilton, citing data protection failures in handling taxpayer information. Treasury cited a criminal case against Charles Littlejohn, a former employee who leaked the tax returns of President Donald Trump.…
-
Randall Munroe’s XKCD ‘High Altitude Cooking Instructions’
Tags: datavia the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/01/randall-munroes-xkcd-high-altitude-cooking-instructions/
-
Randall Munroe’s XKCD ‘High Altitude Cooking Instructions’
Tags: datavia the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/01/randall-munroes-xkcd-high-altitude-cooking-instructions/
-
APT Attacks Target Indian Government Using GOGITTER, GITSHELLPAD, and GOSHELL – Part 1
Tags: access, adobe, ai, antivirus, api, apt, attack, authentication, backdoor, backup, cloud, control, data, data-breach, detection, email, endpoint, github, google, government, group, india, infection, infrastructure, injection, Internet, malicious, malware, microsoft, network, phishing, service, spear-phishing, threat, tool, update, windowsIntroductionIn September 2025, Zscaler ThreatLabz identified two campaigns, tracked as Gopher Strike and Sheet Attack, by a threat actor that operates in Pakistan and primarily targets entities in the Indian government. In both campaigns, ThreatLabz identified previously undocumented tools, techniques, and procedures (TTPs). While these campaigns share some similarities with the Pakistan-linked Advanced Persistent Threat (APT) group, APT36, we…
-
Some ChatGPT browser extensions are stealing your data
A threat actor is seeding the internet with AI browser extensions that can intercept a user’s authenticated session tokens and hijack accounts. First seen on cyberscoop.com Jump to article: cyberscoop.com/chatgpt-browser-extensions-steal-your-data/
-
Thales-Kommentar zum Data Privacy Day 2026: Datenschutz im KI-Kontext relevanter als je zuvor
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/thales-kommentar-data-privacy-day-2026-datenschutz-ki-kontext-relevanz
-
ShinyHunters claims 2 Million Crunchbase records; company confirms breach
Crunchbase confirms a data breach after cybercrime group ShinyHunters claims to have stolen over 2 million personal records. Crunchbase confirmed a data breach after the cybercriminal group ShinyHunters claimed to steal over 2 million personal records from its systems. The group leaked a 402 MB compressed archive on their website due to a failed extortion…
-
Charting the Next Era of Digital Identity and Trust
Identity Proofing Becomes Essential as Remote Work Redefines Enterprise Trust Remote work has expanded hiring reach but introduced new risk. Identity now must be verified through digital signals rather than physical interactions. High-assurance identity proofing using solutions such as MajorKey’s IDProof+ helps enterprises protect data, mitigate fraud and preserve trust. First seen on govinfosecurity.com Jump…
-
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code
Cybersecurity researchers have discovered two malicious Microsoft Visual Studio Code (VS Code) extensions that are advertised as artificial intelligence (AI)-powered coding assistants, but also harbor covert functionality to siphon developer data to China-based servers.The extensions, which have 1.5 million combined installs and are still available for download from the official Visual Studio First seen on…
-
Microsoft handed over BitLocker keys to law enforcement, raising enterprise data control concerns
Tags: access, authentication, backup, breach, business, china, cloud, control, corporate, credentials, data, endpoint, governance, government, group, india, infrastructure, law, mfa, microsoft, risk, service, technologyWhere most enterprises go wrong: Enterprises using BitLocker should treat the recovery keys as highly sensitive, and avoid default cloud backup unless there is a clear business requirement and the associated risks are well understood and mitigated.The safest configuration is to redirect those keys to on-premises Active Directory or a controlled enterprise key vault. Even…
-
Microsoft handed over BitLocker keys to law enforcement, raising enterprise data control concerns
Tags: access, authentication, backup, breach, business, china, cloud, control, corporate, credentials, data, endpoint, governance, government, group, india, infrastructure, law, mfa, microsoft, risk, service, technologyWhere most enterprises go wrong: Enterprises using BitLocker should treat the recovery keys as highly sensitive, and avoid default cloud backup unless there is a clear business requirement and the associated risks are well understood and mitigated.The safest configuration is to redirect those keys to on-premises Active Directory or a controlled enterprise key vault. Even…
-
10 Key AI Security Controls For 2026
The 10 most important AI security controls for 2026 include deep visibility, strong authentication, data loss prevention and continuous AI red teaming. First seen on crn.com Jump to article: www.crn.com/news/security/2026/10-key-ai-security-controls-for-2026
-
Apache Hadoop Flaw Could Trigger System Crashes or Data Corruption
A moderate out-of-bounds write vulnerability in Apache Hadoop’s HDFS native client that could allow attackers to trigger system crashes or cause data corruption in production environments. The flaw, identified as CVE-2025-27821, affects the native HDFS client’s URI parser and has been assigned moderate severity by Apache. The vulnerability was discovered and reported by security researcher…
-
Nike Data Breach Claims Surface as WorldLeaks Leaks 1.4TB of Files Online
As users continue to assess the Under Armour data breach, WorldLeaks, the rebranded version of the Hunters International… First seen on hackread.com Jump to article: hackread.com/nike-data-breach-worldleaks-leaks-files-online/
-
Law Firm Investigates Coupang Security Failures Ahead of Class Action Deadline
The US law firm Hagens Berman will lead a class action lawsuit against Coupang over security failures that led to a June 2025 data breach First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/law-firm-coupang-security-failures/
-
Data thieves borrow Nike’s ‘Just Do It’ mantra, claim they ran off with 1.4TB
US sports brand launches probe after extortion crew WorldLeaks claims it stole huge dataset First seen on theregister.com Jump to article: www.theregister.com/2026/01/26/data_thieves_claim_nike_data_haul/
-
Poland repels data-wiping malware attack on energy systems
Suspected Russian cyber attackers tried to take down parts of Poland’s energy infrastructure with new data-wiping malware and failed. According to information shared … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/26/poland-energy-malware-attack/