Tag: data
-
Topsy-Turvy Data Breach Reality: Incidents Up, Victims Down
Most Compromises Trace to Financial Services, Healthcare, Professional Services. Data breaches rage on. In the first half of this year, the Identity Theft Resource Center counted 1,732 total data breaches affecting 166 million people, marking a rise in data breaches but a decline in victims, likely due to a drop in mega-breaches. First seen on…
-
Massistant: Chinese Mobile Forensic Tool Accesses SMS, Images, Audio, and GPS Data
Cybersecurity researchers at Lookout Threat Lab have uncovered a sophisticated mobile forensics application called Massistant, deployed by Chinese law enforcement to extract comprehensive data from confiscated mobile devices. The tool represents a significant evolution from its predecessor MFSocket, incorporating advanced capabilities to bypass device security measures and collect sensitive information including SMS messages, images, audio…
-
Oracle-Lücke birgt Gefahr für RCE-Attacken
Tags: access, bug, cloud, cve, cyberattack, data, exploit, infrastructure, linux, oracle, rce, remote-code-execution, tool, vulnerabilityOracle hat das Sicherheitsproblem im Code Editor bereits gefixt.Forscher von Tenable Research haben eine Sicherheitslücke im Code-Editor von Oracle Cloud Infrastructure (OCI) entdeckt, die Unternehmen für Remote-Code-Execution-Angriffe (RCE) anfällig macht. Die webbasierte integrierte Entwicklungsumgebung (IDI) dient zur Verwaltung von Ressourcen wie Functions, Resource Manager und Data Science und sorgt für nahtlose Entwickler-Workflows.Die enge Integration mit…
-
Devman Claims Cyberattack on Thailand Ministry of Labour, Demands $15M Ransom
A threat actor named Devman has claimed responsibility for a cyberattack on Thailand Ministry of Labour, compromising over 300 gigabytes of sensitive data and severely disrupting government operations. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/thailand-ministry-of-labour-cyberattack/
-
UK’s Co-op Retailer Hit by Cyberattack, 6.5 Million Members’ Data Exposed
The UK’s Co-op retailer has disclosed that all 6.5 million of its members had their personal data stolen during a devastating cyberattack in April 2024. Chief Executive Shirine Khoury-Haq confirmed the full extent of the breach in her first public interview since the incident, expressing her devastation over the attack’s impact on both members and…
-
Belk Suffers Major Data Breach; Law Firm Investigates Class Action
The popular U.S. department store chain Belk is under First seen on thecyberexpress.com Jump to article: thecyberexpress.com/belk-data-breach/
-
Hackers Use DNS Queries to Evade Defenses and Exfiltrate Data
Cybercriminals are increasingly exploiting the Domain Name System (DNS) to bypass corporate security measures and steal sensitive data, according to new research from cybersecurity experts. This sophisticated technique, known as DNS tunneling, transforms the internet’s essential >>phonebook
-
US Data Breaches Head for Another Record Year After 11% Surge
There were 1732 publicly reported US data breaches in the first half of 2025, according to the latest ITRC report First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/us-data-breaches-record-year/
-
UNC6148 deploys Overstep malware on SonicWall devices, possibly for ransomware operations
UNC6148 targets SonicWall devices with Overstep malware, using a backdoor and rootkit for data theft, extortion, or ransomware. Google’s Threat Intelligence Group warns that a threat actor tracked as UNC6148 has been targeting SonicWall SMA appliances with new malware dubbed Overstep. Active since at least October 2024, the group uses a backdoor and user-mode rootkit…
-
Most European Financial Firms Still Lagging on DORA Compliance
A Veeam survey found that 96% of financial services organizations believe their current levels of data resilience falls short of DORA compliance, citing major challenges First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/european-financial-dora-compliance/
-
How AI is changing the GRC strategy
Tags: access, ai, best-practice, breach, business, ciso, compliance, control, data, detection, finance, framework, fraud, governance, grc, guide, law, monitoring, network, nist, privacy, regulation, risk, risk-analysis, risk-management, strategy, threat, toolAdapting existing frameworks with AI risk controls: AI risks include data safety, misuse of AI tools, privacy considerations, shadow AI, bias and ethical considerations, hallucinations and validating results, legal and reputational issues, and model governance to name a few.AI-related risks should be established as a distinct category within the organization’s risk portfolio by integrating into…
-
United Australia Party Confirms Major Ransomware Attack and Data Breach
The United Australia Party (UAP), led by mining magnate Clive Palmer, has confirmed that it fell victim to a cyberattack late last month, resulting in a serious UAP data breach that may have exposed personal and sensitive information belonging to members, supporters, and others associated with the party. First seen on thecyberexpress.com Jump to article:…
-
Mangelnde Vorbereitung auf EU-Verordnung – Die Data-Act-Stunde hat bald geschlagen
Tags: dataFirst seen on security-insider.de Jump to article: www.security-insider.de/die-data-act-stunde-hat-bald-geschlagen-a-45560ebbea30c0d2336042de4b78dd59/
-
Machine unlearning gets a practical privacy upgrade
Machine learning models are everywhere now, from chatbots to credit scoring tools, and they carry traces of the data they were trained on. When someone asks to have their … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/17/machine-unlearning-privacy-upgrade/
-
Clive Palmer’s Trumpet of Patriots and United Australia parties hit with data breach
Data potentially compromised by the June ransomware attack includes banking records, contact details and employment historyThe political parties run by Australian mining magnate Clive Palmer have been hit with a ransomware attack, with banking records, employment history and other personal information potentially compromised.The Trumpet of Patriots, which ran <a href=”https://www.theguardian.com/australia-news/2025/may/04/clive-palmers-trumpet-of-patriots-fails-to-pick-up-single-lower-house-seat-despite-text-spam-and-ad-blitz”>but did not secure any seats…
-
Unbefugter Zugriff bei einem Schulbezirk in Michigan, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a227ebae-c41d-4b42-9b3d-742c45724a25.html
-
Cyber-Zwischenfall bei einer US-Wirtschaftsförderungsgesellschaft
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/92432803-595d-4344-adcb-727e9eff6573.html
-
Hackbots biggest cloud security risk, slashing attack times to minutes
With cyber criminals using automated tools to steal data in minutes, organisations must focus on runtime protection and automated responses to combat the rising threat from AI and misconfigured cloud assets First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366627892/Hackbots-biggest-cloud-security-risk-slashing-attack-times-to-minutes
-
Unbefugter Zugriff bei einem Hersteller von Explosionsschutztechnik in Singapur
Information About Possible Data Access First seen on bartec.com Jump to article: bartec.com/company/magazine/information-about-possible-data-access
-
Tired of gaps in your security? These open-source tools can help
When it comes to spotting threats, security teams need tools that can pull data from all over and make it easier to analyze. In this article, we’ll take a look at some popular … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/17/open-source-threat-detection-solutions/
-
How Secure Is Online Fax: Privacy and Data Protection Standards
When it comes to sharing sensitive documents online, security sits at the top of everyone’s checklist. Online faxing is… First seen on hackread.com Jump to article: hackread.com/how-secure-online-fax-privacy-data-protection-standards/
-
Co-op confirms data of 6.5 million members stolen in cyberattack
UK retailer Co-op has confirmed that personal data of 6.5 million members was stolen in the massive cyberattack in April that shut down systems and caused food shortages in its grocery stores. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/co-op-confirms-data-of-65-million-members-stolen-in-cyberattack/
-
Red Teaming AI Systems: Why Traditional Security Testing Falls Short
What if your AI-powered application leaked sensitive data, generated harmful content, or revealed internal instructions and none of your security tools caught it? This isn’t hypothetical. It’s happening now and exposing critical gaps in how we secure modern AI systems. When AI systems like LLMs, agents, or AI-driven applications reach production, many security teams.. First…
-
Louis Vuitton says regional data breaches tied to same cyberattack
Luxury fashion giant Louis Vuitton confirmed that breaches impacting customers in the UK, South Korea, and Turkey stem from the same security incident, which is believed to be linked to the ShinyHunters extortion group. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/louis-vuitton-says-regional-data-breaches-tied-to-same-cyberattack/
-
Co-op chief ‘incredibly sorry’ for theft of 6.5m members’ data
Co-op chief executive Shirine Khoury-Haq has revealed that all the personal data of all 6.5 million of its members was compromised in the April 2025 cyber attack on its systems. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366627833/Co-op-chief-incredibly-sorry-for-theft-of-65m-members-data
-
Adoption Agency Data Exposure Revealed Information About Children and Parents
Tags: dataA trove of 1.1 million records left accessible on the open web shows how much sensitive information can be created”, and made vulnerable”, during the adoption process. First seen on wired.com Jump to article: www.wired.com/story/adoption-agency-data-exposure-revealed-information-about-children-and-parents/
-
Italian police dismantle Romanian ransomware gang targeting nonprofits, film companies
The group, known as “Diskstation,” is accused of encrypting victims’ systems and demanding large cryptocurrency ransoms to restore access to their data, Italy’s Postal and Cybersecurity Police said in a statement. First seen on therecord.media Jump to article: therecord.media/italian-police-dismantle-romanian-ransomware-gang
-
Securonix tackles security data deluge with AI-driven platform
As security data volumes grow and security budgets tighten, Securonix is betting on its AI-driven platform to help businesses manage threats cost-effectively, says its CEO First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366627527/Securonix-tackles-security-data-deluge-with-AI-driven-platform
-
Over 5.4 Million Affected in Healthcare Data Breach at Episource
A data breach at Episource has exposed the personal information of 5.4 million individuals after attackers accessed systems for 10 days First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/54-million-affected-episource/
-
Nvidia-GPUs anfällig für Rowhammer-Angriffe
Cyberkriminelle könnten über einen Rowhammer-Angriff auf Nvidia-GPUs zugreifen.Nvidia hat kürzlich eine Sicherheitswarnung an Anwendungsentwickler, Computerhersteller und IT-Verantwortliche herausgegeben, dass moderne Speicherchips in Grafikprozessoren potenziell anfällig für sogenannte Rowhammer-Exploits sind. Bereits zuvor hatten kanadische Universitätsforscher nachgewiesen, dass eine Nvidia A6000 GPU mit einem ähnlichen Angriff erfolgreich kompromittiert werden kann.Bei einem Rowhammer-Angriff handelt es sich um eine…