Tag: data
-
Why Do HIPAA Risk Analyses Miss the Mark So Often?
Common Weaknesses Healthcare Providers Must Overcome to Avoid Regulators’ Wrath. Regulators have long pushed HIPAA-regulated providers to ensure their enterprise-wide security risk analysis is comprehensive and timely, so they can identify security issues before they become data breaches. Why do so many organizations struggle with this top HIPAA priority? First seen on govinfosecurity.com Jump to…
-
Millions Allegedly Affected in Allianz Insurance Breach
Have I Been Pwned claims that the compromised data includes physical addresses, dates of birth, phone numbers, and more, for life insurance customers. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/millions-allianz-insurance-breach
-
Australian ISP iiNet Reports Data Breach, Customer Accounts Stolen
Australian ISP iiNet confirms data breach as hackers stole 280,000 email accounts, phone numbers and user data using… First seen on hackread.com Jump to article: hackread.com/australia-isp-iinet-data-breach-customer-accounts-stolen/
-
Mobile Phishers Target Brokerage Customers in ‘Ramp and Dump’ Cashout Scheme
Cybercriminal groups specializing in advanced mobile phishing kits have evolved their operations beyond stealing payment card data for mobile wallet enrollment, now pivoting to exploit brokerage accounts in sophisticated ‘ramp and dump’ schemes. This shift, as detailed in recent research by security experts, leverages compromised user credentials to manipulate foreign stock prices, circumventing traditional security…
-
Highly Sensitive Medical Cannabis Patient Data Exposed by Unsecured Database
Nearly a million records, which appear to be linked to a medical cannabis card company in Ohio, included Social Security numbers, government IDs, health conditions, and more. First seen on wired.com Jump to article: www.wired.com/story/highly-sensitive-medical-cannabis-patient-data-exposed-by-unsecured-database/
-
Highly Sensitive Medical Cannabis Patient Data Exposed by Unsecured Database
Nearly a million records, which appear to be linked to a medical cannabis card company in Ohio, included Social Security numbers, government IDs, health conditions, and more. First seen on wired.com Jump to article: www.wired.com/story/highly-sensitive-medical-cannabis-patient-data-exposed-by-unsecured-database/
-
Casino tech outfit Bragg cops to intrusion but says data jackpot untouched
Toronto company says weekend cyber raid hit internal IT, not punters’ wallets First seen on theregister.com Jump to article: www.theregister.com/2025/08/19/bragg_attack/
-
Webinar: Why AI and SaaS are now the same attack surface
The lines between SaaS and AI are vanishing. AI agents are now first-class citizens in your SaaS universe: accessing sensitive data, triggering workflows, and introducing new … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/19/vorlon-webinar-ai-and-saas-attack-surface/
-
Allianz Life Data Breach Exposes Personal Data of 1.1 Million Customers
A cyber-attack on Allianz Life, linked to the ShinyHunters group, has exposed the personal information of 1.1 million customers First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/allianz-life-breach-exposes/
-
Pharma firm Inotiv says ransomware attack impacted operations
American pharmaceutical company Inotiv has disclosed that some of its systems and data have been encrypted in a ransomware attack, impacting the company’s business operations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/pharma-firm-inotiv-says-ransomware-attack-impacted-operations/
-
Pharma firm Inotiv says ransomware attack impacted operations
American pharmaceutical company Inotiv has disclosed that some of its systems and data have been encrypted in a ransomware attack, impacting the company’s business operations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/pharma-firm-inotiv-says-ransomware-attack-impacted-operations/
-
Canadian Financial Regulator Hacked, Exposing Personal Data from Member Organizations
The Canadian Investment Regulatory Organization (CIRO) said it will work to identify the personal information breached and notify those affected First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/canadian-financial-regulator-hacked/
-
Canadian Financial Regulator Hacked, Exposing Personal Data from Member Organizations
The Canadian Investment Regulatory Organization (CIRO) said it will work to identify the personal information breached and notify those affected First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/canadian-financial-regulator-hacked/
-
Pharma firm Inotiv says ransomware attack impacted operations
American pharmaceutical company Inotiv has disclosed that some of its systems and data have been encrypted in a ransomware attack, impacting the company’s business operations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/pharma-firm-inotiv-says-ransomware-attack-impacted-operations/
-
NY Business Council discloses data breach affecting 47,000 people
The Business Council of New York State (BCNYS) has revealed that attackers who breached its network in February stole the personal, financial, and health information of over 47,000 individuals. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/business-council-of-new-york-state-discloses-data-breach-affecting-47-000-people/
-
NY Business Council discloses data breach affecting 47,000 people
The Business Council of New York State (BCNYS) has revealed that attackers who breached its network in February stole the personal, financial, and health information of over 47,000 individuals. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/business-council-of-new-york-state-discloses-data-breach-affecting-47-000-people/
-
Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution
A new exploit combining two critical, now-patched security flaws in SAP NetWeaver has emerged in the wild, putting organizations at risk of system compromise and data theft.The exploit in question chains together CVE-2025-31324 and CVE-2025-42999 to bypass authentication and achieve remote code execution, SAP security company Onapsis said.CVE-2025-31324 (CVSS score: 10.0) – Missing First seen…
-
96,000 UK Police Bodycam Videos Lost After Data Transfer Mishap
Tags: dataThe UK’s South Yorkshire Police lost 96,000 bodycam videos in a data transfer mishap, impacting 126 cases. Poor… First seen on hackread.com Jump to article: hackread.com/96000-uk-police-bodycam-videos-lost-data-transfer/
-
U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback
The U.K. government has apparently abandoned its plans to force Apple to weaken encryption protections and include a backdoor that would have enabled access to the protected data of U.S. citizens.U.S. Director of National Intelligence (DNI) Tulsi Gabbard, in a statement posted on X, said the U.S. government had been working with its partners with…
-
Cooking with Code: A DevOps Kitchen Secured by Thales
Tags: access, ai, api, cctv, cloud, compliance, control, data, encryption, GDPR, identity, infrastructure, injection, least-privilege, malicious, mfa, military, monitoring, PCI, service, software, strategy, tool, waf, zero-day, zero-trustCooking with Code: A DevOps Kitchen Secured by Thales madhav Tue, 08/19/2025 – 05:13 In today’s hyperconnected digital world, deploying applications is a lot like running a high-performance, Michelin-star kitchen. You need the right setup, a disciplined process, and seamless coordination, where every tool, role, and task moves in harmony, executed flawlessly. Speed and precision…
-
Singapore issues critical alert on Dire Wolf ransomware targeting global tech and manufacturing firms
Tags: attack, authentication, backup, business, compliance, control, credentials, cyber, data, defense, email, endpoint, extortion, insurance, intelligence, leak, malicious, mfa, msp, network, phishing, ransom, ransomware, resilience, risk, supply-chain, threat, updateRipple effects on global enterprises: The global business fallout of Dire Wolf ransomware attacks is significant and poses a multi-layered, high-impact threat to global enterprises.”Its attacks directly disrupt operations and supply chains, particularly in manufacturing and tech, leading to production delays, revenue loss, and downstream customer impact,” said Manish Rawat, analyst at TechInsights. “Financial impact…
-
The Hidden Risks of External AI Models and How Businesses can Mitigate Them
As AI adoption accelerates, businesses face hidden risks from third-party models like ChatGPT and Claude, including data leakage and malicious data infiltration. By implementing corporate AI tools and educating employees, companies can harness generative AI’s benefits while safeguarding sensitive data, compliance, and trust. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/the-hidden-risks-of-external-ai-models-and-how-businesses-can-mitigate-them/
-
Australian ISP iiNet Suffers Breach of 280,000+ Records
Over 280,000 customers of Australian ISP iiNet have been impacted by a data breach First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/aussie-isp-iinet-breach-280000/
-
Allianz Life security breach impacted 1.1 million customers
Allianz Life breach exposed data of most of its 1.4M customers; HIBP lists 1.1M impacted, though the insurer hasn’t confirmed exact figures. In July, Allianz Life disclosed a breach where hackers stole data from a cloud database, affecting most of its 1.4M customers and staff. Now, the data breach notification site Have I Been Pwned…
-
7 signs it’s time for a managed security service provider
Tags: access, best-practice, breach, business, ciso, compliance, cyber, cybersecurity, data, data-breach, defense, detection, edr, incident, incident response, intelligence, mitigation, monitoring, mssp, ransomware, risk, service, siem, soc, software, supply-chain, threat, tool, update, vulnerability, vulnerability-management2. Your security team is wasting time addressing and evaluating alerts: When your SOC team is ignoring 300 daily alerts and manually triaging what should be automated, that’s your cue to consider an MSSP, says Toby Basalla, founder and principal data consultant at data consulting firm Synthelize.When confusion reigns, who in the SOC team knows…
-
Massive Allianz Life data breach impacts 1.1 million people
Hackers have stolen the personal information of 1.1 million individuals in a Salesforce data theft attack, which impacted U.S. insurance giant Allianz Life in July. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/massive-allianz-life-data-breach-impacts-11-million-people/
-
Intel Websites Compromised, Allowing Hackers Access to Employee and Confidential Data
A series of critical security flaws in Intel’s internal web infrastructure exposed the personal details of more than 270,000 employees and potentially provided attackers with access to sensitive corporate and supplier information. The discoveries highlight severe weaknesses across multiple Intel-owned websites, raising broader concerns about the company’s handling of web application security. According to security…