Tag: data
-
Meet ShadowLeak: ‘Impossible to detect’ data theft using AI
Tags: ai, attack, business, ciso, cybersecurity, data, data-breach, email, exploit, gartner, governance, injection, LLM, malicious, RedTeam, resilience, risk, sans, service, sql, supply-chain, technology, theft, tool, update, vulnerabilityWhat CSOs should do: To blunt this kind of attack, he said CSOs should:treat AI agents as privileged actors: apply the same governance used for a human with internal resource access;separate ‘read’ from ‘act’ scopes and service accounts, and where possible sanitize inputs before LLM (large language model) ingestion. Strip/neutralize hidden HTML, flatten to safe…
-
CrowdStrike Aims to Define New Security Model Based on AI Agents
CrowdStrike unveiled its Falcon Agentic Security Platform at Fal.Con 2025, ushering in the “agentic era of cybersecurity.” With AI-powered agents, unified data governance, and threat intelligence, the platform aims to counter adversaries exploiting AI to accelerate attacks, securing identities, IT, and data at machine speed. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/crowdstrike-unveils-new-era-of-agentic-security-at-fal-con-2025/
-
Brazil enacts sweeping bill requiring online age verification, safeguards for children’s data
The Digital ECA mandates that tech companies take “reasonable measures” to block young users from accessing content which features violence, porn, sexual exploitation, drugs or gambling, as well as content that encourages self harm. First seen on therecord.media Jump to article: therecord.media/brazil-enacts-sweeping-children-data-law
-
Crims bust through SonicWall to grab sensitive config data
Vendor pulls plug on cloud backup feature, urges admins to reset passwords and re-secure devices First seen on theregister.com Jump to article: www.theregister.com/2025/09/18/sonicwall_breach/
-
How Top CISOs Approach Exposure Management in the Context of Managing Cyber Risk
Tags: ai, attack, best-practice, business, ciso, control, cvss, cyber, cybersecurity, data, framework, group, intelligence, leak, metric, monitoring, risk, software, strategy, threat, update, vulnerability, vulnerability-managementWondering what your peers think of exposure management? New reports from the Exposure Management Leadership Council, a CISO working group sponsored by Tenable, offer insights. Key takeaways The CISOs who make up the Exposure Management Leadership Council see exposure management as a strategic and game-changing approach to unified proactive security. They believe exposure management can…
-
Cybercriminals pwn 850k+ Americans’ healthcare data
Three US medical centers fess up to serious breaches First seen on theregister.com Jump to article: www.theregister.com/2025/09/18/850k_americans_affected_by_medical/
-
ShinyHunters Counts 1.5 Billion Stolen Salesforce Records
Group Reportedly Scanned Salesloft’s Source Code on GitHub, Recovered OAuth Tokens. The ShinyHunters extortionists behind data-grabbing August attacks on Salesloft Drift users claim to have stolen 1.5 billion Salesforce records from 760 companies after breaching Salesloft’s private Git repository and scanning it for secrets, which led to them recovering working OAuth tokens. First seen on…
-
Study Finds 1.2M Medical Devices Exposed on Internet
Default credentials, weak passwords, misconfigurations and a variety of other security shortcomings are exposing millions of medical devices and their data on the internet, said Soufian El Yadmani, CEO and co-founder of Modat, who shared recent research findings. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/study-finds-12m-medical-devices-exposed-on-internet-i-5494
-
Cybercriminals pwn 850k+ Americans healthcare data
Three US medical centers fess up to serious breaches First seen on theregister.com Jump to article: www.theregister.com/2025/09/18/850k_americans_affected_by_medical/
-
Two UK Teenagers Charged Over TfL Hack Linked to Scattered Spider
Two UK teens have been charged in connection with the TfL hack, as investigators link them to Scattered Spider cyberattacks and data breaches. First seen on hackread.com Jump to article: hackread.com/two-uk-teenagers-charged-tfl-hack-scattered-spider/
-
When Ads Attack: Inside the Growing Malvertising Threat
Malvertising hides malware in online ads, stealing data from users and businesses. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/when-ads-attack-inside-the-growing-malvertising-threat/
-
New York Blood Center Alerts 194,000 People to Data Breach
A breach at the New York Blood Center resulted in theft of data for 194,000 people, including SSNs, IDs, bank and health information First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/new-york-blood-center-data-breach/
-
Brute force attacks hitting SonicWall firewall configuration backups
Tags: attack, authentication, backup, breach, cloud, computer, computing, credentials, data, defense, encryption, firewall, Hardware, login, mfa, password, phishing, software, technology, threatWhat are brute force attacks?: Brute force attacks use trial and error to crack passwords, login credentials, and encryption keys. They’ve been around since the beginning of the computer age, yet are still effective. Why? In part because people still use easily guessable passwords like ‘1234’, or their company’s name, or default passwords left on…
-
LinkedIn now uses your data for AI by default, opt out now!
LinkedIn is making major changes to its User Agreement and Privacy Policy, effective November 3, 2025. Among the most notable updates, the company will now use member data by … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/18/linkedin-ai-data-privacy-policy/
-
LinkedIn now uses your data for AI by default, opt out now!
LinkedIn is making major changes to its User Agreement and Privacy Policy, effective November 3, 2025. Among the most notable updates, the company will now use member data by … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/18/linkedin-ai-data-privacy-policy/
-
1 in 3 Android Apps Leak Sensitive Data
One third of Android and over half iOS apps shown to be leaking insecure APIs and hardcoded secrets First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/android-apps-leak-sensitive-data/
-
Insight Partners Confirms Data Breach Exposing Users’ Personal Data
Insight Partners, a global venture capital and private equity firm, has officially confirmed a significant data breach that exposed personal information of individuals connected to the company. The breach notification reveals sophisticated attack methods and a months-long timeline that has raised serious concerns about data security practices at one of the world’s largest investment firms.…
-
Who Owns Threat and Exposure Management in Your Organization?
A study conducted by Enterprise Strategy Group, now part of Omdia, in partnership with Tenable shows responsibility for exposure management scattered across multiple teams with conflicting priorities. It’s time to build the team of the future, discover what ‘good’ looks like and how to get there. Key takeaways Teams are fragmented, with most organizations lacking…
-
Who Owns Threat and Exposure Management in Your Organization?
A study conducted by Enterprise Strategy Group, now part of Omdia, in partnership with Tenable shows responsibility for exposure management scattered across multiple teams with conflicting priorities. It’s time to build the team of the future, discover what ‘good’ looks like and how to get there. Key takeaways Teams are fragmented, with most organizations lacking…
-
Insight Partners confirms ransomware hit, more than 12,000 caught in data dragnet
VC giant rebuilt boxes, patched holes, and says it’s beefed up security but won’t say who did it First seen on theregister.com Jump to article: www.theregister.com/2025/09/18/vc_giant_insight_partners_confirms/
-
Who Owns Threat and Exposure Management in Your Organization?
A study conducted by Enterprise Strategy Group, now part of Omdia, in partnership with Tenable shows responsibility for exposure management scattered across multiple teams with conflicting priorities. It’s time to build the team of the future, discover what ‘good’ looks like and how to get there. Key takeaways Teams are fragmented, with most organizations lacking…
-
Insight Partners confirms ransomware hit, more than 12,000 caught in data dragnet
VC giant rebuilt boxes, patched holes, and says it’s beefed up security but won’t say who did it First seen on theregister.com Jump to article: www.theregister.com/2025/09/18/vc_giant_insight_partners_confirms/
-
South Korea Personal Information Privacy Act
What is the Data Privacy Act (DPA)? The Philippines Data Privacy Act of 2012 (Republic Act No. 10173), commonly referred to as the DPA, is the country’s primary data protection law. Enacted in August 2012, the Act was designed to safeguard the fundamental right to privacy of every Filipino while ensuring the free flow of……
-
Stealth in Plain Sight: Cryptojackers Hijack PowerShell and Windows Processes to Evade Detection
Darktrace researchers uncovered a sophisticated cryptojacking attempt using PowerShell scripts to inject NBMiner into Windows processes. Experts warn that modern cryptomining malware is more than a nuisance”, posing risks to productivity, data security, and energy costs while exploiting “living off the land” tactics to evade detection. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/stealth-in-plain-sight-cryptojackers-hijack-powershell-and-windows-processes-to-evade-detection/
-
Where CISOs need to see Splunk go next
Tags: ai, api, automation, cisco, ciso, cloud, communications, compliance, conference, crowdstrike, cybersecurity, data, data-breach, detection, finance, framework, google, incident response, intelligence, jobs, metric, microsoft, open-source, RedTeam, resilience, risk, router, siem, soar, strategy, tactics, threat, tool, vulnerabilityResilience resides at the confluence of security and observability: There was also a clear message around resilience, the ability to maintain availability and recover quickly from any IT or security event.From a Cisco/Splunk perspective, this means a more tightly coupled relationship between security and observability.I’m reminded of a chat I had with the chief risk…
-
SQL Injection
SQL Injection (SQLi) remains one of the most persistent and dangerous web application vulnerabilities. Attackers who successfully exploit SQLi can read, modify, or delete sensitive data, bypass authentication, escalate privileges, and in some cases take full control of backend systems. This page explains SQL Injection in plain language, shows why it matters, covers types and…
-
Raven Stealer Targets Google Chrome Users to Exfiltrate Sensitive Data
Raven Stealer, a sophisticated information-stealing malware that has been wreaking havoc on users’ sensitive data. This contemporary malware represents a concerning evolution in credential theft technology, combining advanced evasion techniques with streamlined data exfiltration capabilities. Raven Stealer stands out as a lightweight yet highly effective information-stealing malware developed primarily in Delphi and C++. Cybersecurity researchers…
-
How NHIs Can Help You Relax About Security
Navigating the Landscape of Cybersecurity: Do NHIs Hold the Key? Are you searching for a stress-free solution to safeguard your organization’s data? Understanding the intricacies of Non-Human Identities (NHIs) and Secrets Security Management can offer immense value, providing a promising pathway to achieving NHI security relaxation. Understanding NHIs: The Unseen Protectors What lurks beneath often……
-
Malicious PyPI Packages Deliver SilentSync RAT
IntroductionZscaler ThreatLabz regularly monitors for threats in the popular Python Package Index (PyPI), which contains open source libraries that are frequently used by many Python developers. In July 2025, a malicious Python package named termncolor was identified by ThreatLabz. Just a few weeks later, on August 4, 2025, ThreatLabz uncovered two more malicious Python packages…
-
Warning: Brute force attacks hitting SonicWall firewall configuration backups
Tags: attack, authentication, backup, breach, cloud, computer, computing, credentials, data, defense, encryption, firewall, Hardware, login, mfa, password, phishing, software, technology, threatWhat are brute force attacks?: Brute force attacks use trial and error to crack passwords, login credentials, and encryption keys. They’ve been around since the beginning of the computer age, yet are still effective. Why? In part because people still use easily guessable passwords like ‘1234’, or their company’s name, or default passwords left on…