Tag: data
-
Shadow AI: Agentic Access and the New Frontier of Data Risk
As autonomous AI agents spread across enterprise systems, a new risk emerges: Shadow AI. Learn why traditional controls fail and how to secure agentic AI. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/shadow-ai-agentic-access-and-the-new-frontier-of-data-risk/
-
FBI takes down BreachForums portal used for Salesforce extortion
The FBI has seized last night all domains for the BreachForums hacking forum operated by the ShinyHunters group mostly as a portal for leaking corporate data stolen in attacks from ransomware and extortion gangs. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-takes-down-breachforums-portal-used-for-salesforce-extortion/
-
The Rise of AI-Powered Phishing How to Spot New Attacks
In today’s digital age, cybercriminals are leveraging AI to craft more convincing phishing scams. Recently, I encountered a sophisticated phishing attempt that underscores the growing threat of AI-powered fraud. Here’s what you need to know to protect yourself. The phishing email I received included detailed information about my career, likely scraped from my LinkedIn profile…
-
The CIA triad is dead, stop using a Cold War relic to fight 21st century threats
Tags: ai, backup, breach, business, ceo, ciso, compliance, csf, cyber, cybersecurity, data, data-breach, deep-fake, firewall, framework, fraud, GDPR, governance, infrastructure, ISO-27001, nist, privacy, ransomware, regulation, resilience, sbom, software, supply-chain, technology, threat, zero-trustRansomware is not just an availability problem. Treating ransomware as a simple “availability” failure misses the point. Being “up” or “down” is irrelevant when your systems are locked and business halted. What matters is resilience: the engineered ability to absorb damage, fail gracefully, and restore from immutable backups. Availability is binary; resilience is survival. Without…
-
Snake Keylogger Uses Weaponized Emails and PowerShell to Steal Sensitive Data
A newly observed information”stealing campaign is deploying a stealthy variant of the SnakeKeylogger malware via weaponized e-mails that masquerade as legitimate remittance advice from CPA Global and Clarivate. Researchers first identified the infection vector on October 7, 2025, when recipients received messages titled “remittance advice for the payment dated 07″Oct”2025,” urging them to download an…
-
The Rise of AI-Powered Phishing How to Spot New Attacks
In today’s digital age, cybercriminals are leveraging AI to craft more convincing phishing scams. Recently, I encountered a sophisticated phishing attempt that underscores the growing threat of AI-powered fraud. Here’s what you need to know to protect yourself. The phishing email I received included detailed information about my career, likely scraped from my LinkedIn profile…
-
Boomi führt Change Data Capture für SAP-Daten ein Echtzeit-Einblicke für die agentische Transformation
SAP-Kunden können nun in Echtzeit auf Daten aus ECC, S/4HANA und BW zugreifen ohne Code und mit integrierter CDC für intelligentere Entscheidungen in KI und Analytics First seen on infopoint-security.de Jump to article: www.infopoint-security.de/boomi-fuehrt-change-data-capture-fuer-sap-daten-ein-echtzeit-einblicke-fuer-die-agentische-transformation/a42303/
-
KFC Venezuela Suffers Alleged Data Breach Exposing 1 Million Customer Records
A threat actor is claiming responsibility for a data breach at KFC’s Venezuela operations, offering for sale a database containing the personal and order information of more than one million customers. The sale was advertised on a dark web forum on October 8, 2025, where the seller posted a 405 MB CSV file containing exactly…
-
KFC Venezuela Suffers Alleged Data Breach Exposing 1 Million Customer Records
A threat actor is claiming responsibility for a data breach at KFC’s Venezuela operations, offering for sale a database containing the personal and order information of more than one million customers. The sale was advertised on a dark web forum on October 8, 2025, where the seller posted a 405 MB CSV file containing exactly…
-
How to Build a Proactive Cybersecurity Monitoring Program for Modern Threats
Key Takeaways Cyber monitoring has become a core function for modern security teams, but collecting data alone isn’t enough. Effective cyber security monitoring requires a clear structure that ties strategy, data, and detection together into a single, coherent program. This blog walks through a practical, layered approach to building a proactive cyber security monitoring and……
-
Discord data breach affects at least 70,000 users
The platform said in a press release that hackers breached a third-party vendor that Discord uses for age-related appeals. First seen on techcrunch.com Jump to article: techcrunch.com/2025/10/09/discord-suffers-data-breach-impacting-at-least-70000-users/
-
Australia Levies First-Ever Privacy Act Fine in Lab Breach
Australian Clinical Labs Ordered to Pay $5.8M in Data Theft at Medlab Pathology Unit. An Australian court has fined a medical lab $5.8 million for cybersecurity failures leading up to – and following – a 2022 cyberattack that affected 223,000 patients. The penalty marked the first time Australia has levied a civil monetary fine for…
-
Discord data breach affects at least 70,000 users
The platform said in a press release that hackers breached a third-party vendor that Discord uses for age-related appeals. First seen on techcrunch.com Jump to article: techcrunch.com/2025/10/09/discord-suffers-data-breach-impacting-at-least-70000-users/
-
77% of Employees Share Company Secrets on ChatGPT, Report Warns
New report reveals 77% of employees share sensitive company data through ChatGPT and AI tools, creating major security and compliance risks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/shadow-ai-chatgpt-dlp/
-
Breach Roundup: Insurers Spend Big on Cybersecurity
Also, a Renault Breach, WhatsApp Malware and Qilin Claims Asahi Attack. This week, insurer cybersecurity spending, a Renault breach, a WhatsApp malware campaign in Brazil. Germany skeptical of Chat Control. Two UK teens arrested for ransomware attack. Qilin claimed the attack on Japan’s Asahi. Hackers weaponized Nezha. An Invoice data breach exposed personal records. First…
-
GitHub Copilot ‘CamoLeak’ AI Attack Exfiltrates Data
While GitHub has advanced protections for its built-in AI agent, a researcher came up with a creative proof-of-concept (PoC) attack for exfiltrating code and secrets via Copilot. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/github-copilot-camoleak-ai-attack-exfils-data
-
GitHub Copilot ‘CamoLeak’ AI Attack Exfiltrates Data
While GitHub has advanced protections for its built-in AI agent, a researcher came up with a creative proof-of-concept (PoC) attack for exfiltrating code and secrets via Copilot. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/github-copilot-camoleak-ai-attack-exfils-data
-
Clop Attacks Against Oracle E-Business Suite Trace to July
Signs Point to Multiple Exploit Chains, One Including a Zero-Day, Being Employed. Data-stealing attacks targeting Oracle E-Business Suite, for which an affiliate of Russian-speaking Clop ransomware group is claiming credit, appear to have begun by August and involved multiple attack chains, of which one targeted a zero-day vulnerability, report Google threat researchers. First seen on…
-
‘Dozens’ of organizations had data stolen in Oracle-linked hacks
The mass-hacks targeting Oracle E-Business customers is the latest hacking campaign by Clop, an extortion group known for abusing security flaws in enterprise products to steal large amounts of sensitive data. First seen on techcrunch.com Jump to article: techcrunch.com/2025/10/09/dozens-of-organizations-had-data-stolen-in-oracle-linked-hacks/
-
Anatomy of a Modern Threat: Deconstructing the Figma MCP Vulnerability
Threat researchers recently disclosed a severe vulnerability in a Figma Model Context Protocol (MCP) server, as reported by The Hacker News. While the specific patch is important, the discovery itself serves as a critical wake-up call for every organization rushing to adopt AI. This incident provides a blueprint for a new class of attacks that…
-
Anatomy of a Modern Threat: Deconstructing the Figma MCP Vulnerability
Threat researchers recently disclosed a severe vulnerability in a Figma Model Context Protocol (MCP) server, as reported by The Hacker News. While the specific patch is important, the discovery itself serves as a critical wake-up call for every organization rushing to adopt AI. This incident provides a blueprint for a new class of attacks that…
-
Dozens of Oracle customers impacted by Clop data theft for extortion campaign
Researchers said malicious activity dates back to early July and active exploitation was observed two months ago. First seen on cyberscoop.com Jump to article: cyberscoop.com/oracle-customers-attacks-clop-google-mandiant/
-
Discord Says Hackers Stole 70,000 ID Photos, Dismisses Extortion Claims
70,000 Discord users had government ID photos and private data exposed via a third-party vendor breach. See Discord’s full response and critical security steps to protect your identity. First seen on hackread.com Jump to article: hackread.com/discord-hackers-id-photos-dismisses-extortion-claim/
-
Salesforce Rebuffs ShinyHunters Extortionists’ Ransom Demand
Criminals Behind Salesloft Breach Continue to Target Salesforce-Using Customers. Customer relationship management software giant Salesforce has directly notified customers that it won’t be complying with ransom demands issued by the data-stealing crime group ShinyHunters, which continues to pressure Salesforce-using customers who fell victim to the Salesloft breach. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/salesforce-rebuffs-shinyhunters-extortionists-ransom-demand-a-29689
-
Met Police Arrest Teenagers in Kido Nursery Ransomware Attack
Two teens were arrested for a ransomware attack on Kido nurseries that exposed data from 8,000 children. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/met-police-arrest-teenagers-in-kido-nursery-ransomware-attack/
-
LockBit, DragonForce, and Qilin form a ‘cartel’ to dictate ransomware market conditions
Tags: access, attack, breach, control, credentials, cybercrime, data, firewall, group, infrastructure, law, leak, lockbit, network, ransomware, service, technology, vpnCritical infrastructure declared fair game: As part of LockBit’s return announcement, the group revealed that critical infrastructure sectors previously considered off-limits would now be permissible targets for its affiliates. “It is permissible to attack critical infrastructure such as nuclear power plants, thermal power plants, hydroelectric power plants, and other similar organizations,” the group stated, according…
-
LockBit, DragonForce, and Qilin form a ‘cartel’ to dictate ransomware market conditions
Tags: access, attack, breach, control, credentials, cybercrime, data, firewall, group, infrastructure, law, leak, lockbit, network, ransomware, service, technology, vpnCritical infrastructure declared fair game: As part of LockBit’s return announcement, the group revealed that critical infrastructure sectors previously considered off-limits would now be permissible targets for its affiliates. “It is permissible to attack critical infrastructure such as nuclear power plants, thermal power plants, hydroelectric power plants, and other similar organizations,” the group stated, according…
-
Two Teenagers Arrested Following Major Cyberattack on Kido Nurseries
Two 17-year-old boys have been arrested in connection with a cyberattack on Kido, a London-based nursery chain. The incident involved the theft and online exposure of sensitive data from approximately 8,000 children, prompting widespread concern and a swift response from the Metropolitan Police. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cyberattack-on-kido-nursery/
-
ClayRat Spyware Campaign Targets Android Users in Russia
A new ClayRat spyware campaign has been observed targeting Russian users via fake apps on Telegram and exfiltrating data First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/clayrat-spyware-targets-android/