Collecting Cyber-News from over 60 sources

Tag: data

Are There IDORs Lurking in Your Code? LLMs Are Finding Critical Business Logic Vulns”, and They’re Everywhere

Jan 9, 2026 6:01 PM

Tags: application-security, bug-bounty, business, data, LLM, vulnerability

Security teams have always known that insecure direct object references (IDORs) and broken authorization vulnerabilities exist in their codebases. Ask any AppSec leader if they have IDOR issues, and most would readily admit they do. But here’s the uncomfortable truth: they’ve been dramatically underestimating the scope of the problem. Recent bug bounty data tells a..…
Hacker Behind Wired.com Leak Now Selling Full 40M CondÃ© Nast Records

Jan 9, 2026 5:01 PM

Tags: data, hacker, leak

A hacker claims to be selling nearly 40 million CondÃ© Nast user records after leaking Wired.com data, with multiple major brands allegedly affected. First seen on hackread.com Jump to article: hackread.com/wired-com-hacker-data-leak-conde-nast-records/
London council cyber attack exposes personal data and highlights risks of shared public-sector IT

Jan 9, 2026 5:01 PM

Tags: attack, cyber, data, government, resilience, risk, theft

A cyber attack on shared IT systems used by several London councils has resulted in the theft of personal data relating to thousands of residents, raising renewed concerns about the resilience of local government cyber security and the risks posed by interconnected public-sector infrastructure. Kensington and Chelsea Council confirmed that sensitive personal information was accessed…
Illinois Department of Human Services data breach affects 700K people

Jan 9, 2026 5:01 PM

Tags: breach, data, data-breach, privacy, service

The Illinois Department of Human Services (IDHS), one of Illinois’ largest state agencies, accidentally exposed the personal and health data of nearly 700,000 residents due to incorrect privacy settings. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/illinois-department-of-human-services-data-breach-affects-700k-people/
PeekBoo! ðŸ«£ Emoji Smuggling and Modern LLMs FireTail Blog

Jan 9, 2026 3:01 PM

Tags: ai, computer, control, cybersecurity, data, exploit, injection, LLM, malicious, monitoring, risk, social-engineering, tactics, threat, tool, vulnerability

Jan 09, 2026 – Viktor Markopoulos – We often trust what we see. In cybersecurity, we are trained to look for suspicious links, strange file extensions, or garbled code. But what if the threat looked exactly like a smiling face sent by a colleague?Based on research by Paul Butler and building on FireTail’s previous disclosures…
PeekBoo! ðŸ«£ Emoji Smuggling and Modern LLMs FireTail Blog

Jan 9, 2026 3:01 PM

Tags: ai, computer, control, cybersecurity, data, exploit, injection, LLM, malicious, monitoring, risk, social-engineering, tactics, threat, tool, vulnerability

Jan 09, 2026 – Viktor Markopoulos – We often trust what we see. In cybersecurity, we are trained to look for suspicious links, strange file extensions, or garbled code. But what if the threat looked exactly like a smiling face sent by a colleague?Based on research by Paul Butler and building on FireTail’s previous disclosures…
CrowdStrike to acquire SGNL for $740M, expanding real-time identity security

Jan 9, 2026 2:01 PM

Tags: access, authentication, ciso, control, crowdstrike, cybersecurity, data, detection, endpoint, google, iam, identity, network, okta, risk, software, update, windows

Market consolidation accelerates: The $740 million price reflects broader consolidation as cybersecurity vendors race to expand identity capabilities. The deal marks the latest in a wave of identity security acquisitions as platform vendors expand beyond core products. Liu compared the move to Palo Alto Networks’ acquisition of CyberArk in 2025, noting both vendors are racing…
CrowdStrike to acquire SGNL for $740M, expanding real-time identity security

Jan 9, 2026 2:01 PM

Tags: access, authentication, ciso, control, crowdstrike, cybersecurity, data, detection, endpoint, google, iam, identity, network, okta, risk, software, update, windows

Market consolidation accelerates: The $740 million price reflects broader consolidation as cybersecurity vendors race to expand identity capabilities. The deal marks the latest in a wave of identity security acquisitions as platform vendors expand beyond core products. Liu compared the move to Palo Alto Networks’ acquisition of CyberArk in 2025, noting both vendors are racing…
Cybersecurity Predictions 2026: The Hype We Can Ignore (And the Risks We Can’t)

Jan 9, 2026 2:01 PM

Tags: cybersecurity, data, risk, strategy

As organizations plan for 2026, cybersecurity predictions are everywhere. Yet many strategies are still shaped by headlines and speculation rather than evidence. The real challenge isn’t a lack of forecasts”, it’s identifying which predictions reflect real, emerging risks and which can safely be ignored.An upcoming webinar hosted by Bitdefender aims to cut through the noise…
Data Security Firm Cyera Raises $400M, Hits $9B Valuation

Jan 9, 2026 12:01 PM

Tags: ai, data

This represents a 50% jump from its $6 billion valuation achieved seven months ago, signaling investor confidence in AI security solutions. The post Data Security Firm Cyera Raises $400M, Hits $9B Valuation appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-cyera-january-2026-funding/
Datenzugang und Portabilität erhöhen Sicherheitsanforderungen – Data Act und DSGVO verlangen abgestimmte Schutzmaßnahmen

Jan 9, 2026 12:01 PM

Tags: data, DSGVO

First seen on security-insider.de Jump to article: www.security-insider.de/data-act-dsgvo-schutzmassnahmen-a-d75e0284455800924683d60ca6ebe07a/
Product showcase: TrackerControl lets Android users see who’s tracking them

Jan 9, 2026 8:01 AM

Tags: android, control, data, mobile, open-source

TrackerControl is an open-source Android application designed to give users visibility into and control over the hidden data within mobile apps. Many apps routinely … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/09/product-showcase-trackercontrol-for-android/
Personal data of thousands stolen in attack on London councils

Jan 9, 2026 7:01 AM

Tags: attack, breach, cyber, data, incident

The West London council at the centre of a major cyber incident has now started the process of informing residents that their personal data was compromised in the attack. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366637155/Personal-data-of-thousands-stolen-in-attack-on-London-councils
Enterprises still aren’t getting IAM right

Jan 9, 2026 6:01 AM

Tags: access, ai, api, authentication, automation, cloud, control, credentials, cybersecurity, data, email, governance, iam, identity, incident response, infrastructure, least-privilege, password, risk, saas, service, tool

Just 1% have fully implemented a modern just-in-time (JIT) privileged access model;91% say at least half of their privileged access is always-on (standard privilege), providing unrestricted, persistent access to sensitive systems;45% apply the same privileged access controls to human and AI identities;33% lack clear AI access policies.The research also revealed a growing issue with “shadow…
Can Agentic AI be trusted with sensitive data?

Jan 9, 2026 5:01 AM

Tags: ai, cloud, cybersecurity, data

Are Non-Human Identities the Key to Securing Sensitive Data in the Cloud? How can organizations ensure that their sensitive data is secure when leveraging Agentic AI? This question is at the forefront of discussions among cybersecurity professionals and organizations across industries. Non-Human Identities (NHIs) play a pivotal role in addressing this concern by securing machine……
What are the latest trends in NHIs security?

Jan 9, 2026 5:01 AM

Tags: data, infrastructure

How Are Non-Human Identities Shaping Today’s Security Landscape? When was the last time you pondered the sheer scale of machine identities operating within your organization? Non-Human Identities (NHIs), the silent sentinels navigating the complexities of modern security infrastructure, are becoming increasingly pivotal in safeguarding sensitive data and operations. The task of providing comprehensive protection from……
Cisco identifies vulnerability in ISE network access control devices

Jan 9, 2026 5:01 AM

Tags: access, advisory, breach, cisco, control, credentials, cvss, data, exploit, firewall, google, identity, malicious, network, sans, theft, vulnerability

rotate ISE credentials for those with existing and approved access;ensure only those who need access have credentials;reduce the number of devices that can access the ISE server;patch as soon as it’s possible to take the server offline.In its notice to customers, Cisco says a vulnerability [CVE-2026-20029] in the licensing features of ISE and Cisco ISE…
Cyera Secures $400M Series F to Lead in Agentic AI Security

Jan 9, 2026 1:01 AM

Tags: ai, control, data

Blackstone-Led Funding Round Expands R&D and Partnerships to Address AI Threats. With AI adoption outpacing security readiness, Cyera secured $400 million at a $9 billion valuation to protect data in an agentic AI landscape. The company plans to expand engineering efforts and partner with tech giants to create a control plane for enterprise AI use.…
Fake AI Chrome Extensions Steal 900K Users’ Data

Jan 9, 2026 12:01 AM

Tags: ai, browser, chatgpt, chrome, data, threat

Threat actors ripped off a legitimate AI-powered Chrome extension in order to harvest ChatGPT and DeepSeek data before sending it to a C2 server. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/fake-ai-chrome-extensions-steal-900k-users-data
CPPA fines data broker selling lists of Alzheimer’s patients

Jan 8, 2026 11:01 PM

Tags: data, email, phone

Datamasters bought and resold the names, addresses, phone numbers and email addresses of millions of people with Alzheimer’s disease, drug addiction, bladder incontinence and other medical conditions for targeted advertising, according to the CPPA. First seen on therecord.media Jump to article: therecord.media/ccpa-fines-data-broker-selling-lists-alzheimers
Texas court blocks Samsung from tracking TV viewing, then vacates order

Jan 8, 2026 10:02 PM

Tags: data

The State of Texas obtained a short-lived, temporary restraining order (TRO) against Samsung that prohibited the South Korean company from collecting audio and visual data about what Texas consumers are watching on their TVs. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/texas-court-blocks-samsung-from-tracking-tv-viewing-then-vacates-order/
GenDigital Research Exposes AuraStealer Infostealer Tactics

Jan 8, 2026 9:01 PM

Tags: data, tactics, windows

GenDigital researchers reveal how AuraStealer uses advanced evasion and a MaaS model to steal data from Windows systems. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/gendigital-research-exposes-aurastealer-infostealer-tactics/
The 2 faces of AI: How emerging models empower and endanger cybersecurity

Jan 8, 2026 8:02 PM

Tags: ai, api, attack, compliance, credentials, cyber, cybersecurity, data, deep-fake, defense, detection, endpoint, espionage, exploit, finance, flaw, framework, GDPR, google, governance, government, group, guide, hacker, HIPAA, incident response, injection, intelligence, LLM, malicious, malware, mandiant, microsoft, network, PCI, penetration-testing, privacy, risk, russia, scam, security-incident, service, social-engineering, strategy, tactics, threat, tool, vulnerability, zero-day

Self-modifying, evasive malware More recently, the researchers at Google Threat Intelligence Group (GTIG) identified a disturbing new trend: malware that uses LLMs during execution to dynamically alter its own behavior and evade detection. This is not pre-generated code, this is code that adapts mid-execution.In June 2025, GTIG identified an experimental malware called PROMPTFLUX, which connects…
The 2 faces of AI: How emerging models empower and endanger cybersecurity

Jan 8, 2026 8:02 PM

Tags: ai, api, attack, compliance, credentials, cyber, cybersecurity, data, deep-fake, defense, detection, endpoint, espionage, exploit, finance, flaw, framework, GDPR, google, governance, government, group, guide, hacker, HIPAA, incident response, injection, intelligence, LLM, malicious, malware, mandiant, microsoft, network, PCI, penetration-testing, privacy, risk, russia, scam, security-incident, service, social-engineering, strategy, tactics, threat, tool, vulnerability, zero-day

Self-modifying, evasive malware More recently, the researchers at Google Threat Intelligence Group (GTIG) identified a disturbing new trend: malware that uses LLMs during execution to dynamically alter its own behavior and evade detection. This is not pre-generated code, this is code that adapts mid-execution.In June 2025, GTIG identified an experimental malware called PROMPTFLUX, which connects…
ChatGPT Health feature draws concern from privacy critics over sensitive medical data

Jan 8, 2026 8:02 PM

Tags: ai, chatgpt, data, intelligence, privacy

The artificial intelligence juggernaut in a blog post encouraged its hundreds of millions of users to connect medical records and wellness app data to the new health-focused chatbot feature, adding that it will be outfitted with extra data privacy protections. First seen on therecord.media Jump to article: therecord.media/chatgpt-health-draws-concern-privacy-critics
Illinois health department exposed over 700,000 residents’ personal data for years

Jan 8, 2026 7:02 PM

Tags: data, data-breach

The security lapse exposed personal information belonging to residents who received state benefits. First seen on techcrunch.com Jump to article: techcrunch.com/2026/01/08/illinois-health-department-exposed-over-700000-residents-personal-data-for-years/
Illinois health department exposed over 700,000 residents’ personal data for years

Jan 8, 2026 7:02 PM

Tags: data, data-breach

The security lapse exposed personal information belonging to residents who received state benefits. First seen on techcrunch.com Jump to article: techcrunch.com/2026/01/08/illinois-health-department-exposed-over-700000-residents-personal-data-for-years/
Cryptohack Roundup: Alleged Fraud Kingpin Deported to China

Jan 8, 2026 7:02 PM

Tags: attack, breach, china, crypto, data, fraud, hacker, theft

Also: Unleash Protocol Hack, LastPass Breach Linked to Crypto Thefts. This week, an alleged fraud kingpin deported to China, Bitfinex hacker gained early release, Unleash Protocol’s $3.9M hack, TRM tied crypto thefts to the LastPass breach, Trust Wallet’s link to the Sha1-Hulud attack, Flow’s NFT loan fallout, Ledger’s data exposure and Kontigo reimbursements. First seen…
Cisco ISE Flaw Lets Admins Access Restricted System Files

Jan 8, 2026 7:02 PM

Tags: access, cisco, data, flaw

A Cisco ISE flaw lets authenticated admins access restricted system files, risking sensitive data exposure. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/cisco-ise-flaw-lets-admins-access-restricted-system-files/
Texas court blocks Samsung from collecting smart TV viewing data

Jan 8, 2026 7:02 PM

Tags: data

The State of Texas has obtained a temporary restraining order (TRO) against Samsung that prohibits the South Korean company from collecting audio and visual data about what Texas consumers are watching on their TVs. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/texas-court-blocks-samsung-from-collecting-smart-tv-viewing-data/