Tag: data
-
Google won’t say if UK secretly demanded a backdoor for user data
Google said it has “never built a backdoor” for its services, but would not explicitly say if the company had received a secret U.K. surveillance order demanding access. First seen on techcrunch.com Jump to article: techcrunch.com/2025/07/29/google-wont-say-if-uk-secretly-demanded-a-backdoor-for-user-data/
-
Tea app’s second data breach exposed over a million private messages
Dating safety app Tea experienced a second data breach in as many weeks, exposing over a million sensitive messages between users. First seen on techcrunch.com Jump to article: techcrunch.com/2025/07/29/tea-apps-data-breach-gets-much-worse-exposing-over-a-million-private-messages/
-
New Choicejacking Attack Steals Data from Phones via Public Chargers
Choicejacking is a new USB attack that tricks phones into sharing data at public charging stations, bypassing security prompts in milliseconds. First seen on hackread.com Jump to article: hackread.com/choicejacking-attack-steals-data-phones-public-chargers/
-
Ransomware attacks against oil and gas firms surge
Manufacturing remains the number one ransomware target, new data from Zscaler shows. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/zscaler-ransomware-report-manufacturing-targeted/756147/
-
Unveiling the Lumma Password Stealer Attack: Infection Chain and Escalation Tactics Exposed
Lumma, a sophisticated C++-based information stealer, has surged in prevalence over recent years, posing significant risks to both individuals and organizations by exfiltrating sensitive data such as browser credentials, cryptocurrency wallets, and personal files. Developed since December 2022 and distributed as Malware-as-a-Service (MaaS) via Telegram channels with tiered subscriptions, Lumma relies on initial access brokers…
-
Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asia’s Mobile Networks
Cybersecurity researchers have discovered a new, large-scale mobile malware campaign that’s targeting Android and iOS platforms with fake dating, social networking, cloud storage, and car service apps to steal sensitive personal data.The cross-platform threat has been codenamed SarangTrap by Zimperium zLabs. Users in South Korea appear to be the primary focus.”This extensive campaign involved First…
-
How FinServ Firms Can Navigate Secure Open Finance in 2025 and Beyond
Banks Must Secure APIs, Vet Partners and Prepare for Open Finance Threats in 2025 Open finance is revolutionizing banking, but it’s also expanding the attack surface. Discover the critical API, data privacy and third-party risks facing financial institutions in 2025 – and how to build a secure future. First seen on govinfosecurity.com Jump to article:…
-
Charity Fined After Destroying “Irreplaceable” Records
Tags: dataA Scottish charity has been fined £18,000 for systematic data protection failings First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/charity-fined-destroying-records/
-
Seychelles Commercial Bank Reported Cybersecurity Incident
Seychelles Commercial Bank on Friday said it had recently identified and contained a cybersecurity incident. A hacker claims to have stolen and sold the personal data of clients of Seychelles Commercial Bank. The bank, which provides personal and corporate services on Seychelles, one of the world’s smallest countries, notified customers of a hack, but said…
-
New macOS Vulnerability Allows Attackers to Steal Private Files by Bypassing TCC
Microsoft Threat Intelligence has uncovered a critical macOS vulnerability that enables attackers to bypass Apple’s Transparency, Consent, and Control (TCC) framework, potentially exposing sensitive user data including files protected by privacy controls and information cached by Apple Intelligence. Vulnerability Overview The newly discovered vulnerability, dubbed >>Sploitlight
-
HYCU erneut als Visionär im Gartner Magic Quadrant for Backup and Data Protection Platforms positioniert
Die Auszeichnung als Visionär spiegelt nicht nur Innovation wider, sondern symbolisiert auch die Ausrichtung auf die dringenden Anforderungen der IT-Führungskräfte von heute First seen on infopoint-security.de Jump to article: www.infopoint-security.de/hycu-erneut-als-visionaer-im-gartner-magic-quadrant-for-backup-and-data-protection-platforms-positioniert/a41521/
-
Cyber Circle: Awareness Training neu gedacht
True Crime Cyber Video Prevention Podcast”, wie die beiden Akteure das neue Format mit einem Augenzwinkern benennen, wollen dabei vieles neu und anders machen. Ihr Anspruch ist es, die Zuschauer mit dem Format nicht nur zu informieren, sondern auch zu unterhalten.In der Erstausgabe des Video-Serie steht das Thema Awareness Training im Mittelpunkt. Studiogast Holger Könnecke…
-
Cyber Circle: Awareness Training neu gedacht
True Crime Cyber Video Prevention Podcast”, wie die beiden Akteure das neue Format mit einem Augenzwinkern benennen, wollen dabei vieles neu und anders machen. Ihr Anspruch ist es, die Zuschauer mit dem Format nicht nur zu informieren, sondern auch zu unterhalten.In der Erstausgabe des Video-Serie steht das Thema Awareness Training im Mittelpunkt. Studiogast Holger Könnecke…
-
Threat Actors Use Phishing to Target Belgian Grand Prix Fans and Teams
Cybersecurity experts have pointed to an increase in sophisticated threat actor activity following the July 27 2025 Belgian Grand Prix at Spa-Francorchamps, which takes advantage of the event’s worldwide attraction. Formula 1’s reliance on advanced telemetry systems, which process real-time data like tire thermodynamics and engine metrics for strategic optimization, positions teams as high-value targets…
-
Threat Actors Use Phishing to Target Belgian Grand Prix Fans and Teams
Cybersecurity experts have pointed to an increase in sophisticated threat actor activity following the July 27 2025 Belgian Grand Prix at Spa-Francorchamps, which takes advantage of the event’s worldwide attraction. Formula 1’s reliance on advanced telemetry systems, which process real-time data like tire thermodynamics and engine metrics for strategic optimization, positions teams as high-value targets…
-
10 Major Cyberattacks And Data Breaches In 2025 (So Far)
Major cyberattacks in 2025 so far have included the Microsoft SharePoint Server “ToolShell” attacks, the ransomware attack against IT distributor Ingram Micro and a series of Scattered Spider attacks targeting numerous industries. First seen on crn.com Jump to article: www.crn.com/news/security/2025/10-major-cyberattacks-and-data-breaches-in-2025-so-far
-
Inside the application security crisis no one wants to talk about
Despite knowing the risks, most organizations are still shipping insecure software. That’s one of the stark findings from Cypress Data Defense’s 2025 State of Application … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/29/application-security-crisis-report/
-
Aeroflot Hit by Year”‘Long Cyber Operation That Allegedly Wiped 7,000 Servers
Russia’s flagship carrier Aeroflot is reeling from a devastating cyberattack that pro-Ukraine hacking groups claim wiped approximately 7,000 servers and stole over 20 terabytes of sensitive data during a year-long clandestine operation. The airline was forced to cancel dozens of flights Monday morning, leaving passengers stranded at Moscow’s Sheremetyevo Airport amid what officials described as…
-
Microsoft uncovers macOS flaw allowing bypass TCC protections and exposing sensitive data
Microsoft found a macOS flaw letting attackers access private data from protected areas like Downloads and Apple Intelligence caches. Microsoft Threat Intelligence researchers discovered a macOS vulnerability that could allow attackers to steal private data of files normally protected by Transparency, Consent, and Control (TCC). Apple’s Transparency, Consent, and Control framework in macOS is designed…
-
Security pros are drowning in threat-intel data and it’s making everything more dangerous
Plus, 60% don’t have enough analysts to make sense of it First seen on theregister.com Jump to article: www.theregister.com/2025/07/28/security_pros_drowning_in_threatintel/
-
GLOBAL GROUP Ransomware Claims Breach of Media Giant Albavisión
GLOBAL GROUP Ransomware targets media giant Albavisión, claims 400 GB data theft as it continues hitting global sectors with advanced extortion tactics. First seen on hackread.com Jump to article: hackread.com/global-group-ransomware-media-giant-albavision-breach/
-
Tea app leak worsens with second database exposing user chats
The Tea app data breach has grown into an even larger leak, with the stolen data now shared on hacking forums and a second database discovered that allegedly contains 1.1 million private messages exchanged between the app’s members. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/tea-app-leak-worsens-with-second-database-exposing-user-chats/
-
Allianz Life Breach Tied to CRM Compromise
Attackers Stole US Customer Data Using Social Engineering. A malicious actor breached a customer relationship management platform used by Allianz Life Insurance of North America on July 16 and stole personally identifiable information of most of its 1.4 million U.S. customers, financial professionals and some employees, the company said. First seen on govinfosecurity.com Jump to…
-
Microsoft SharePoint Hackers Switch Gears to Spread Ransomware
Threat actors exploit SharePoint flaws to access internal systems, steal sensitive data, and carry out surveillance, impersonation, and extortion. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/microsoft/sharepoint-vulnerabilities-exploitation/
-
Flaw in Gemini CLI AI coding assistant allowed stealthy code execution
A vulnerability in Google’s Gemini CLI allowed attackers to silently execute malicious commands and exfiltrate data from developers’ computers using allowlisted programs. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/flaw-in-gemini-cli-ai-coding-assistant-allowed-stealthy-code-execution/
-
macOS Sploitlight Flaw Exposes Apple Intelligence-Cached Data to Attackers
macOS flaw dubbed Sploitlight allows attackers to access Apple Intelligence-cached data by abusing Spotlight plugins, bypassing privacy controls. First seen on hackread.com Jump to article: hackread.com/macos-sploitlight-flaw-apple-intelligence-cached-data/