Collecting Cyber-News from over 60 sources

Tag: data

GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies

Sep 8, 2025 7:08 PM

Tags: breach, data, data-breach, github, mandiant, supply-chain, threat

Salesloft has revealed that the data breach linked to its Drift application started with the compromise of its GitHub account.Google-owned Mandiant, which began an investigation into the incident, said the threat actor, tracked as UNC6395, accessed the Salesloft GitHub account from March through June 2025. So far, 22 companies have confirmed they were impacted by…
Data security gaps stymy enterprise AI plans

Sep 8, 2025 6:08 PM

Tags: ai, cio, ciso, data

Nearly three-quarters of CIOs and CISOs see information complexity as an adoption roadblock, according to a Ponemon Institute study commissioned by OpenText. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/data-complexity-cybersecurity-generative-ai-adoption-opentext/759503/
Salesloft: March GitHub repo breach led to Salesforce data theft attacks

Sep 8, 2025 6:08 PM

Tags: attack, breach, data, github, theft

Salesloft says attackers first breached its GitHub account in March, leading to the theft of Drift OAuth tokens later used in widespread Salesforce data theft attacks in August. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/salesloft-march-github-repo-breach-led-to-salesforce-data-theft-attacks/
Wealthsimple Confirms Data Breach After Supply Chain Attack

Sep 8, 2025 6:08 PM

Tags: attack, breach, data, data-breach, supply-chain

Wealthsimple confirmed a third-party vendor data breach affecting roughly 30,000 customers First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/wealthsimple-confirms-data-breach/
Salesloft: March GitHub repo breach led to Salesforce data theft attacks

Sep 8, 2025 6:08 PM

Tags: attack, breach, data, github, theft

Salesloft says attackers first breached its GitHub account in March, leading to the theft of Drift OAuth tokens later used in widespread Salesforce data theft attacks in August. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/salesloft-march-github-repo-breach-led-to-salesforce-data-theft-attacks/
Canadian investment platform Wealthsimple disclosed a data breach

Sep 8, 2025 5:08 PM

Tags: attack, breach, data, data-breach, software, supply-chain

Wealthsimple reported a data breach affecting some customers due to a supply chain attack via a third-party software package. Canadian investment platform Wealthsimple disclosed a data breach that impacted some customers. The company discovered the security breach on August 30, which stemmed from a supply chain attack via a trusted third-party software package. >>On August 30th,…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
ICYMI: Exposure Management Academy on Attack Surface Management, Proactive Security and More

Sep 8, 2025 5:08 PM

Tags: ai, attack, best-practice, business, cio, cloud, cybersecurity, data, data-breach, group, Internet, jobs, office, risk, skills, technology, threat, update, vulnerability, vulnerability-management, zero-day

Each Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, we look back on the guidance and best practices shared in the past several months. You can read the entire Exposure Management Academy series here. Let’s look back at key…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
Canadian investment platform Wealthsimple disclosed a data breach

Sep 8, 2025 5:08 PM

Tags: attack, breach, data, data-breach, software, supply-chain

Wealthsimple reported a data breach affecting some customers due to a supply chain attack via a third-party software package. Canadian investment platform Wealthsimple disclosed a data breach that impacted some customers. The company discovered the security breach on August 30, which stemmed from a supply chain attack via a trusted third-party software package. >>On August 30th,…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
ICYMI: Exposure Management Academy on Attack Surface Management, Proactive Security and More

Sep 8, 2025 5:08 PM

Tags: ai, attack, best-practice, business, cio, cloud, cybersecurity, data, data-breach, group, Internet, jobs, office, risk, skills, technology, threat, update, vulnerability, vulnerability-management, zero-day

Each Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, we look back on the guidance and best practices shared in the past several months. You can read the entire Exposure Management Academy series here. Let’s look back at key…
How to Secure Grants for Technology and Data Security Projects

Sep 8, 2025 4:08 PM

Tags: data, technology

Learn how to secure grants for technology and data security projects by aligning mission impact, funder priorities, and building strong project plans. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/how-to-secure-grants-for-technology-and-data-security-projects/
LunaLock Ransomware Attacking Artists to Steal and Encrypt Data

Sep 8, 2025 4:08 PM

Tags: breach, cyber, data, data-breach, group, marketplace, ransom, ransomware

LunaLock, a newly surfaced ransomware strain, has launched a targeted campaign against independent artists and their clients, demanding a hefty ransom in exchange for stolen creative works and leaked personal data. Emerging in early September 2025, the LunaLock group claims responsibility for breaching Artists & Clients, a popular digital marketplace where illustrators connect with patrons…
How to Secure Grants for Technology and Data Security Projects

Sep 8, 2025 4:08 PM

Tags: data, technology

Learn how to secure grants for technology and data security projects by aligning mission impact, funder priorities, and building strong project plans. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/how-to-secure-grants-for-technology-and-data-security-projects/
Kimsuky Hackers’ Playbook Uncovered in Exposed ‘Kim’ Data Dump

Sep 8, 2025 3:08 PM

Tags: breach, china, cyber, data, data-breach, hacker, infrastructure, linux, phishing

A rare breach attributed to a North Koreanaffiliated actor named “Kim” by the leakers has unveiled unprecedented insight into Kimsuky (APT43) operations. Dubbed the “Kim” dump, the 9 GB dataset includes active bash histories, phishing domains, OCR workflows, custom stagers, and Linux rootkit evidence”, revealed a hybrid campaign that leverages Chinese-language tooling and infrastructure to…
PCI council eyes wider data protection role beyond payments

Sep 8, 2025 2:08 PM

Tags: credit-card, data, PCI

Hailed as the gold standard for securing credit card information, the Payment Card Industry Data Security Standard (PCI DSS) could be extended to protect other kinds of data following industry feedback First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366630421/PCI-council-eyes-wider-data-protection-role-beyond-payments
Salesloft Drift data breach: Investigation reveals how attackers got in

Sep 8, 2025 2:08 PM

Tags: attack, breach, data, data-breach, github, supply-chain

The attack that resulted in the Salesloft Drift data breach started with the compromise of the company’s GitHub account, Salesloft confirmed this weekend. Supply chain … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/08/salesloft-drift-data-breach-investigation-results/
PCI council eyes wider data protection role beyond payments

Sep 8, 2025 2:08 PM

Tags: credit-card, data, PCI

Hailed as the gold standard for securing credit card information, the Payment Card Industry Data Security Standard (PCI DSS) could be extended to protect other kinds of data following industry feedback First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366630421/PCI-council-eyes-wider-data-protection-role-beyond-payments
Salesloft Drift data breach: Investigation reveals how attackers got in

Sep 8, 2025 2:08 PM

Tags: attack, breach, data, data-breach, github, supply-chain

The attack that resulted in the Salesloft Drift data breach started with the compromise of the company’s GitHub account, Salesloft confirmed this weekend. Supply chain … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/08/salesloft-drift-data-breach-investigation-results/
Pakistan Launches Probe After Massive SIM Data Leak Hits Millions

Sep 8, 2025 1:08 PM

Tags: data, data-breach, government, leak

The Pakistani government has launched an urgent investigation following reports of a massive data leak involving SIM holders’ personal information, including that of Interior Minister Mohsin Naqvi. The leaked SIM data, reportedly being sold openly online, has sparked national concern over digital security and privacy. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/pakistan-probes-sim-data/
Lazarus Group Deploys Malware With ClickFix Scam in Fake Job Interviews

Sep 8, 2025 1:08 PM

Tags: crypto, data, group, jobs, korea, lazarus, malware, north-korea, scam

North Korea’s Lazarus Group uses the ClickFix scam in fake crypto job interviews to deploy malware, steal data,… First seen on hackread.com Jump to article: hackread.com/lazarus-group-malware-clickfix-scam-fake-job-interview/
Go-to Resources for Secure Cloud Storage

Sep 8, 2025 12:08 PM

Tags: cloud, data

The cloud is becoming the norm when it comes to data storage, but it’s not without its challenges. The right policies and procedures can go a long way toward safely storing data in the cloud. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/resources-for-secure-cloud-storage/
macOS Under Attack: Atomic Stealer Hidden in Pirated Software

Sep 8, 2025 11:08 AM

Tags: apple, attack, cyber, cybercrime, cybersecurity, data, macOS, malware, software, theft, threat

The cybersecurity landscape for macOS users has taken a dangerous turn as cybercriminals increasingly target Apple’s ecosystem with sophisticated malware campaigns. Atomic macOS Stealer (AMOS), a specialized data-theft malware, has emerged as one of the most significant threats to Mac users, particularly those seeking cracked software applications. While macOS has historically maintained a reputation as…
Salesforce Under Fire: The Salesloft Drift Supply-Chain Breach

Sep 8, 2025 10:08 AM

Tags: attack, breach, cyber, data, data-breach, network, supply-chain

In this episode, we discuss a recent significant cyber attack where Palo Alto Networks experienced a data breach through their Salesforce environment due to a compromised SalesLoft drift integration. Throughout the discussion, we highlight why Salesforce, a crucial CRM platform for many businesses, is becoming a prime target for supply chain attackers. The hosts discuss……
The importance of reviewing AI data centers’ policies

Sep 8, 2025 10:08 AM

Tags: ai, attack, backdoor, corporate, cybersecurity, data, government, Hardware, jobs, monitoring, risk, side-channel, supply-chain, threat, tool, vulnerability

What cybersecurity leaders need to consider: Given these expanded threats, cybersecurity leaders and decision makers must closely scrutinize whether their AI data center operators are implementing corporate policies that require technical measures to secure AI data centers across all layers of security, including hardware, data, and geopolitical. Examples of such policies include: closely inspecting hardware…
Tenable Data Breach Confirmed -Customer Contact Details Compromised

Sep 8, 2025 10:08 AM

Tags: attack, breach, cyber, cybersecurity, data, data-breach, theft

Tenable, a well-known cybersecurity company, has confirmed that it was affected by a recent large-scale data theft campaign. The attack targeted Salesforce and Salesloft Drift integrations, and Tenable was one of the organizations caught up in the incident. The company stressed that while customer contact details were accessed, Tenable products and the data inside those…
Lazarus APT Deploys ClickFix Technique to Exfiltrate Sensitive Intelligence Data

Sep 8, 2025 9:08 AM

Tags: apt, attack, cyber, data, espionage, group, intelligence, lazarus, social-engineering

The notorious Lazarus APT group, suspected of having Northeast Asian origins and internally tracked as APT-Q-1 by Qi’anxin, has evolved its attack methodologies by incorporating the sophisticated ClickFix social engineering technique into their cyber espionage operations. This development represents a significant escalation in the group’s capabilities to deceive victims and steal sensitive intelligence data through…
Ausnutzung ohne Authentifizierung – Pufferüberlauf in Arcserves Unified Data Protection

Sep 8, 2025 8:08 AM

Tags: authentication, data

First seen on security-insider.de Jump to article: www.security-insider.de/kritische-sicherheitsluecken-arcserve-udp-a-66aeb7d96907b11d41b6e357e2b93790/
AI moves fast, but data security must move faster

Sep 8, 2025 7:08 AM

Tags: ai, data, service

Generative AI is showing up everywhere in the enterprise, from customer service chatbots to marketing campaigns. It promises speed and innovation, but it also brings new and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/08/ai-data-security-risks-report/