Tag: data
-
13-Year-Old Redis RCE Flaw Lets Attackers Seize Complete Host Control
Tags: control, cve, cvss, cyber, cybersecurity, data, flaw, rce, remote-code-execution, vulnerabilityA remote code execution vulnerability discovered in Redis, the widely-used in-memory data structure store, has sent shockwaves through the cybersecurity community. The flaw, designated CVE-2025-49844 and dubbed >>RediShell
-
Proofage ID leaked in Discord data breach
Video game chat platform tells users that driver’s licences and passports were among the forms of data accessed via a third-party customer service providerVideo game chat platform Discord has suffered a data breach, informing users that their personal information including identity documents of those required to prove their age were compromised.The company stated last week…
-
Why Veeam Is Eyeing a $1.8B Buy of AI Security Firm Securiti
Deal Would Boost Veeam’s Cyber Footprint as Data Protection Vendor Valuations Surge Bloomberg reported that data protection and ransomware recovery giant Veeam is in advanced talks to buy DSPM and AI security vendor Securiti for $1.8 billion, with an announcement coming as soon as this week. The deal would accelerate Veeam’s pivot from backup and…
-
TDL 006 – Beyond the Firewall: How Attackers Weaponize Your DNS
Tags: access, attack, breach, business, cisa, ciso, computer, conference, control, cyber, data, data-breach, dns, exploit, firewall, google, government, group, guide, infrastructure, intelligence, Internet, iraq, jobs, leak, malicious, malware, network, phishing, ransomware, service, software, switch, threat, tool, windowsSummary Beyond the Firewall: How Attackers Weaponize Your DNS For many IT professionals, DNS is the internet’s invisible plumbing, historically managed by a “guy with a Unix beard in the basement,” as Infoblox educator Josh Kuo recalled on the Defenders Log podcast. But this foundational, often overlooked, protocol has become a primary vector for sophisticated…
-
Discord Vendor Hack Exposes ID Data in Ransom Bid
Proliferating Age Verification Systems a Hacker Target. A vendor breach linked to Discord exposed government ID uploads used in age verification, raising alarms among privacy experts who warn that third-party data collection systems are becoming high-value targets amid rising legislative mandates for online age checks. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/discord-vendor-hack-exposes-id-data-in-ransom-bid-a-29661
-
Stronger Oversight Needed as Healthcare Risks Multiply
The Edmund Group’s Adler on Managing Third- and Fourth-Party Risk in Healthcare. Healthcare organizations face growing risks from data distribution, vendor dependencies and global instability. Steven Adler, partner at The Edmund Group, discusses practical steps to strengthen vendor oversight and resilience. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/stronger-oversight-needed-as-healthcare-risks-multiply-a-29651
-
Cl0p Ransomware Group Exploited in a Zero-Day in Oracle EBS Attacks
The Cl0p ransomware group exploited a zero-day security flaw in Oracle’s E-Business Suite to compromise corporate networks and steal data, according to Mandiant. The threat actors are sending emails to executives of those companies demanding payment or risk the data being sold on underground markets or made public. First seen on securityboulevard.com Jump to article:…
-
Oracle zero-day defect amplifies panic over Clop’s data theft attack spree
The notorious ransomware group exploited multiple vulnerabilities, including a zero-day, for at least eight weeks before alleged victims received extortion demands. First seen on cyberscoop.com Jump to article: cyberscoop.com/oracle-zero-day-clop/
-
Discord discloses third-party breach affecting customer support data
Discord reported a data breach at a third-party customer service provider that exposed user data, including contact details, IPs, and billing info. Discord disclosed a breach at a third-party customer support provider that exposed data of users who contacted its Support or Trust & Safety teams. The stolen info includes names, usernames, emails, contact and…
-
Red Hat data breach escalates as ShinyHunters joins extortion
Enterprise software giant Red Hat is now being extorted by the ShinyHunters gang, with samples of stolen customer engagement reports (CERs) leaked on their data leak site. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/red-hat-data-breach-escalates-as-shinyhunters-joins-extortion/
-
From Fortresses to Zero-Trust: What Baghdad’s Green Zone Teaches Us About Modern Cybersecurity
Your Castle Is Already Breached Picture this: your organization’s network is a medieval castle, complete with drawbridge and moat. For decades, this mental model worked. Keep the bad guys outside the walls, and everyone inside stays safe. Except the castle walls have crumbled. Cloud apps scatter your data across continents. Remote workers log in from..…
-
From Fortresses to Zero-Trust: What Baghdad’s Green Zone Teaches Us About Modern Cybersecurity
Your Castle Is Already Breached Picture this: your organization’s network is a medieval castle, complete with drawbridge and moat. For decades, this mental model worked. Keep the bad guys outside the walls, and everyone inside stays safe. Except the castle walls have crumbled. Cloud apps scatter your data across continents. Remote workers log in from..…
-
From Months to Minutes: How Seceon’s Unified Platform Saves Education $300K+ Annually
The education sector has transformed rapidly, digital classrooms, cloud-based research, and connected campuses are now the norm. But with innovation comes risk. Schools and universities store highly sensitive data, from student records and health info to financial aid details and research IP, making them a prime target for cybercriminals. With tight budgets, First seen on…
-
From Months to Minutes: How Seceon’s Unified Platform Saves Education $300K+ Annually
The education sector has transformed rapidly, digital classrooms, cloud-based research, and connected campuses are now the norm. But with innovation comes risk. Schools and universities store highly sensitive data, from student records and health info to financial aid details and research IP, making them a prime target for cybercriminals. With tight budgets, First seen on…
-
Ghosts in the Machine: ASCII Smuggling across Various LLMs FireTail Blog
Oct 06, 2025 – Alan Fagan – Operationalizing Defense The key to catching ASCII Smuggling is monitoring the raw input payload, the exact string the LLM tokenization engine receives, not just the visible text. Ingestion: FireTail continuously records LLM activity logs from all your integrated platforms. Analysis: Our platform analyzes the raw payload data for…
-
Renault Group confirms UK customer data stolen in third-party breach
The incident marks the latest in a series of recent cyberattacks impacting the auto industry. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/renault-uk-customer-data-stolen-third-party/801933/
-
Clop hackers caught exploiting Oracle zero-day bug to steal executives’ personal data
Oracle fixes another security flaw that Clop hackers were using to steal sensitive personal information about executives as part of a mass-extortion campaign. First seen on techcrunch.com Jump to article: techcrunch.com/2025/10/06/clop-hackers-caught-exploiting-oracle-zero-day-bug-to-steal-executives-personal-data/
-
Data sovereignty demand pushes Herabit to get S3 storage
Italian service provider gets Cubbit DS3 distributed S3 storage to provide up to 2PB of cloud services to customers demanding data sovereignty, while cutting costs by up to 50% First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366632209/Data-sovereignty-demand-pushes-Herabit-to-get-S3-storage
-
Europol Calls for Stronger Data Laws to Combat Cybercrime
Europol’s Cybercrime Conference has warned that cybercriminals are exploiting new technologies faster than law enforcement can adapt First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/europol-calls-stronger-data-laws/
-
Hackers steal sensitive Red Hat customer data after breaching GitLab repository
Walmart, American Express and HSBC are among the companies whose sensitive data has been exposed. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/red-hat-jack-customer-data-crimson-collective/802121/
-
LinkedIn sues ProAPIs for using 1M fake accounts to scrape user data
LinkedIn has filed a lawsuit against Delaware company ProAPIs Inc. and its founder and CTO, Rehmat Alam, for allegedly scraping legitimate data through more than a million fake accounts. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/legal/linkedin-sues-proapis-for-using-1m-fake-accounts-to-scrape-user-data/
-
The role of Artificial Intelligence in today’s cybersecurity landscape
AI is transforming cybersecurity”, from detecting phishing and insider threats to accelerating response. See how Waziuh, the open-source XDR and SIEM, integrates AI to turn raw security data into actionable insights and smarter threat hunting. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/the-role-of-artificial-intelligence-in-todays-cybersecurity-landscape/
-
Ransomware Group “Trinity of Chaos” Launches Data Leak Site
A new TOR data leak site published by the Trinity of Chaos ransomware group unveils 39 firms’ data and threatens Salesforce litigation First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/trinity-chaos-launches-data-leak/
-
How Exposure Management Helped Three Companies Transform Their Cybersecurity Program
Tags: application-security, attack, ciso, cloud, compliance, control, cyber, cybersecurity, data, identity, infrastructure, iot, law, risk, software, threat, tool, vulnerability, vulnerability-managementPart two of our Exposure Management Academy series on exposure management maturity explores how organizations like Drogaria Araujo, Tenable and Verizon have applied exposure management to strengthen their security postures. Key takeaways: Case studies of Drogaria Araujo, Tenable and Verizon illustrate how exposure management provides tangible benefits to organizations of different sizes and security maturity…
-
Oracle Now Says ‘Critical’ Zero-Day Flaw Behind Data Extortion Attacks, Releases Patch
Oracle is linking a recent data extortion campaign targeting E-Business Suite customers to a zero-day vulnerability, with fixes released to address the critical-severity flaw, in contrast to its previous contention that the attacks resulted from unpatched known vulnerabilities. First seen on crn.com Jump to article: www.crn.com/news/security/2025/oracle-now-says-critical-zero-day-flaw-behind-data-extortion-attacks-releases-patch
-
Discord users’ data stolen by hackers in third-party data breach
Discord has confirmed that users who contacted its customer support service have had their data stolen by hackers, who have attempted to extort a ransom from the company. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/discord-users-data-stolen-by-hackers-in-third-party-data-breach
-
Rainwalk Pet Insurance Exposes 158 GB of US Customer and Pet Data
A misconfigured database belonging to a pet insurance company, “Rainwalk Pet Insurance,” exposed sensitive PII and veterinary claim data. The data exposure reveals new fraud tactics, including microchip and reimbursement scams. First seen on hackread.com Jump to article: hackread.com/rainwalk-pet-insurance-158-gb-customer-pet-data/
-
LinkedIn sues ProAPIs for $15K/Month LinkedIn data scraping scheme
LinkedIn sued ProAPIs and its CEO Rahmat Alam for running millions of fake accounts to scrape and sell user data, charging up to $15,000 per month. LinkedIn has filed a lawsuit against the software firm ProAPIs and its CEO, Rahmat Alam, accusing them of creating millions of fake accounts to scrape and sell user data.…
-
Hackers launch data leak site to extort 39 victims, or Salesforce
Scattered Lapsus$ Hunters launched a data leak site over the weekend, aiming to pressure organizations whose Salesforce databases they have plundered into paying to prevent … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/06/data-leak-site-extortion-salesforce/
-
Radiant Group won’t touch kids’ data now, but apparently hospitals are fair game
Ransomware crooks utterly fail to find moral compass First seen on theregister.com Jump to article: www.theregister.com/2025/10/06/radiant_group_hospital/