Tag: data
-
A CISO’s guide to monitoring the dark web
Tags: access, attack, authentication, breach, ciso, cloud, credentials, cyber, cybercrime, dark-web, data, data-breach, detection, extortion, guide, identity, incident response, intelligence, law, leak, marketplace, mfa, monitoring, okta, risk, saas, service, supply-chain, technology, threat, vpn, vulnerabilityIs your company data on the dark web? Here’s what to look for and what do if your data now lives on the dark web. Sıla Özeren / Picus Security If you’re looking for broader threats against your organization, pay close attention to what initial access brokers (IABs) are offering for sale on the dark…
-
Hackers Turn Personal: Scattered LapSus Hunters Demand Google Sack Employees
A hacker collective identifying itself as the Scattered LapSus Hunters has issued a direct threat to Google, demanding the termination of two of the company’s security employees. The group claims it will leak internal data unless Google complies. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/hacker-collective-threatens-google/
-
Hackers Turn Personal: Scattered LapSus Hunters Demand Google Sack Employees
A hacker collective identifying itself as the Scattered LapSus Hunters has issued a direct threat to Google, demanding the termination of two of the company’s security employees. The group claims it will leak internal data unless Google complies. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/hacker-collective-threatens-google/
-
Stealthy Python Malware Uses Discord to Steal Windows Data
Inf0s3c Stealer, a stealthy Python-based grabber built to harvest system information and user data from Windows hosts. Packed as a 64-bit PE file compressed with UPX and bundled via PyInstaller, the executable imports a suite of Windows API functions to enumerate processes, navigate directories, manipulate memory, and manage security settings. Once executed, it methodically collects…
-
Stealthy Python Malware Uses Discord to Steal Windows Data
Inf0s3c Stealer, a stealthy Python-based grabber built to harvest system information and user data from Windows hosts. Packed as a 64-bit PE file compressed with UPX and bundled via PyInstaller, the executable imports a suite of Windows API functions to enumerate processes, navigate directories, manipulate memory, and manage security settings. Once executed, it methodically collects…
-
Cloudflare Confirms Data Breach Customer Data Exposed via Salesforce Attack
Cloudflare has disclosed a significant data breach affecting customer information following a sophisticated supply chain attack targeting its Salesforce integration with Salesloft Drift. The incident, which occurred between August 12-17, 2025, resulted in the exposure of customer support case data and potentially sensitive credentials shared through support channels. The Breach Details The cybersecurity company became…
-
10 Ways to Optimize Data Center Operations
Running a data center efficiently is no small feat. From managing energy costs to preventing downtime, there’s a lot that can go wrong”, and a lot that can be optimized. Discover 10 actionable strategies to enhance your data center operations, including real-time monitoring, asset auto-discovery, and predictive analytics. Learn how Hyperview can help you cut…
-
10 Ways to Optimize Data Center Operations
Running a data center efficiently is no small feat. From managing energy costs to preventing downtime, there’s a lot that can go wrong”, and a lot that can be optimized. Discover 10 actionable strategies to enhance your data center operations, including real-time monitoring, asset auto-discovery, and predictive analytics. Learn how Hyperview can help you cut…
-
TDL 002 – Defending the DNS: How Quad9 Protects the Internet with John Todd
Tags: access, apple, attack, business, china, ciso, communications, control, country, crime, cyber, cybersecurity, data, defense, dns, email, encryption, firewall, google, ibm, india, infrastructure, intelligence, Internet, jobs, law, malicious, malware, network, phishing, privacy, service, strategy, technology, threat, tool, zero-trustSummary The Defender’s Log episode features John Todd from Quad9, discussing their mission to protect the internet through secure DNS. Quad9, a non-profit launched in 2017 with founding partners Global Cyber Alliance, Packet Clearing House, and IBM, provides a free, global recursive DNS resolver that blocks malicious domains. Todd emphasizes that Quad9’s success is a…
-
Cloudflare Says Customer Support Data Impacted In Salesloft Drift Breach
Cloudflare disclosed Tuesday that customer support data may have been compromised in the widespread attacks targeting Salesloft Drift. First seen on crn.com Jump to article: www.crn.com/news/security/2025/cloudflare-says-customer-support-data-impacted-in-salesloft-drift-breach
-
Disney agrees to $10 million settlement for collecting data from children
Tags: dataThe Federal Trade Commission (FTC) announced Disney has agreed to pay $10 million to settle allegations that it collected personal data from children watching YouTube videos without parental notification or consent. First seen on therecord.media Jump to article: therecord.media/disney-settles-with-ftc-millions
-
Disney agrees to $10 million settlement for collecting data from children
Tags: dataThe Federal Trade Commission (FTC) announced Disney has agreed to pay $10 million to settle allegations that it collected personal data from children watching YouTube videos without parental notification or consent. First seen on therecord.media Jump to article: therecord.media/disney-settles-with-ftc-millions
-
Cloudflare Confirms Data Breach Linked to Salesforce and Salesloft Drift
Cloudflare confirms a Salesforce-linked data breach via Salesloft Drift, exposing customer support case data but leaving core systems… First seen on hackread.com Jump to article: hackread.com/cloudflare-data-breach-salesforce-and-salesloft-drift/
-
Cloudflare Confirms Data Breach Linked to Salesforce and Salesloft Drift
Cloudflare confirms a Salesforce-linked data breach via Salesloft Drift, exposing customer support case data but leaving core systems… First seen on hackread.com Jump to article: hackread.com/cloudflare-data-breach-salesforce-and-salesloft-drift/
-
Navy Federal Credit Union Backup Exposed Online
Researcher: Internal Data Belonging to World’s Largest Lender Exposed on AWS. Navy Federal, the world’s largest credit union, left hundreds of gigabytes of internal backup files exposed on Amazon’s cloud storage service, says cybersecurity researcher Jeremiah Fowler. Exposed data included email addresses, hashed passwords and what appeared to be internal system data. First seen on…
-
Cloudflare hit by data breach in Salesloft Drift supply chain attack
Cloudflare is the latest company impacted in a recent string of Salesloft Drift breaches, part of a supply-chain attack disclosed last week. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cloudflare-hit-by-data-breach-in-salesloft-drift-supply-chain-attack/
-
1965 Cryptanalysis Training Workbook Released by the NSA
In the early 1960s, National Security Agency cryptanalyst and cryptanalysis instructor Lambros D. Callimahos coined the term “Stethoscope” to describe a diagnostic computer program used to unravel the internal structure of pre-computer ciphertexts. The term appears in the newly declassified September 1965 document Cryptanalytic Diagnosis with the Aid of a Computer, which compiled 147 listings…
-
Cyberattack Disrupts Jaguar Land Rover Assembly Line
Company Says No Evidence of Customer Data Exfiltration. British carmaker Jaguar Land Rover shut down its Liverpool assembly line Tuesday following a cyberattack. At this stage, there is no evidence any customer data has been stolen, but our retail and production activities have been severely disrupted, the company said. First seen on govinfosecurity.com Jump to…
-
Zscaler latest victim of Salesloft Drift attacks, customer data exposed
Joins Google, Palo Alto Networks in the ever-growing supply chain compromise First seen on theregister.com Jump to article: www.theregister.com/2025/09/02/zscaler_customer_data_drift_compromise/
-
Quantum Is Closer Than You Think”, So Why Are You Still Encrypting Like It’s 2015?
Tags: access, ai, business, cloud, communications, compliance, computer, computing, container, crypto, cryptography, data, defense, encryption, endpoint, exploit, government, guide, Hardware, infrastructure, network, nist, privacy, regulation, resilience, risk, risk-assessment, service, software, strategy, technology, threat, tool, update, vulnerabilityQuantum Is Closer Than You Think”, So Why Are You Still Encrypting Like It’s 2015? madhav Tue, 09/02/2025 – 05:43 Not long ago, the idea that quantum computers could one day break today’s strongest encryption felt like science fiction. Today, it’s no longer about if”, but when. While real-world demonstrations of quantum algorithms like Shor’s…
-
Researchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control
Cybersecurity researchers have disclosed a stealthy new backdoor called MystRodX that comes with a variety of features to capture sensitive data from compromised systems.”MystRodX is a typical backdoor implemented in C++, supporting features like file management, port forwarding, reverse shell, and socket management,” QiAnXin XLab said in a report published last week. “Compared to typical…
-
Palo Alto Networks, Zscaler Among Victims Of Salesforce Third-Party Breach
Palo Alto Networks and Zscaler confirmed they’re among the latest victims in the campaign targeting widespread theft of Salesforce data through compromising Salesloft Drift, a popular third-party Salesforce application. First seen on crn.com Jump to article: www.crn.com/news/security/2025/palo-alto-networks-zscaler-among-victims-of-salesforce-third-party-breach
-
Grau Data präsentiert auf der it-sa Ransomware-Schutz für Backups mit Blocky for Veeam
Grau Data präsentiert auf der it-sa 2025 seinen Backup-Ransomware-Schutz Blocky for Veeam in der Version 3.5. Die Software ist derzeit der einzige Ransomware-Schutz für Backups, der direkt auf dem Veeam-Windows-Server aufsetzt und mit der erprobten Grau-Data-WORM (Write Once, Read Many) -Technologie einen unveränderlichen Schutzschild für Veeam-Backups erzeugt. Durch den Einsatz der WORM-Technologie verhindert Blocky for…
-
Stolen OAuth tokens expose Palo Alto customer data
Security firm’s Salesforce instance accessed using credentials stolen from Salesloft’s Drift platform breach First seen on theregister.com Jump to article: www.theregister.com/2025/09/02/stolen_oauth_tokens_expose_palo/
-
Palo Alto Networks, Zscaler and PagerDuty Hit in Salesforce Linked Data Breaches
Hackers exploited the Salesloft Drift app to steal OAuth tokens and access Salesforce data, exposing customer details at… First seen on hackread.com Jump to article: hackread.com/palo-alto-networks-zscaler-pagerduty-salesforce-data-breach/
-
No, Google did not warn 2.5 billion Gmail users to reset passwords
Google has disputed a widely reported story about the company warning all Gmail users to reset their passwords due to a recent data breach that also affected some Workspace accounts. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/technology/no-google-did-not-warn-25-billion-gmail-users-to-reset-passwords/