Tag: data
-
Malicious Browser Add-Ons Target Major AI Chatbot Users
Malicious browser add-ons are actively harvesting conversations and personal data from users of major AI platforms including ChatGPT, Claude, Copilot, Gemini, and DeepSeek. The threat leverages ostensibly helpful Chrome extensions VPNs, sidebars, and “AI assistants” to intercept agentic-AI interactions, exfiltrate chat histories, and aggregate sensitive information that users routinely share with generative models. Analysis of…
-
Data Lineage macht sichtbar, wohin Daten wirklich fließen – Wer Datenflüsse nicht versteht, verliert im KI-Zeitalter die Kontrolle
First seen on security-insider.de Jump to article: www.security-insider.de/data-lineage-datenfluesse-ki-agenten-nachverfolgbarkeit-compliance-a-abf4f248085f29575d8c92047f9083c6/
-
SentinelOne Lays Off 8% of Staff as Internal Use of AI Grows
Frontier AI Models Accelerate Tasks Once Measured in Months to Weeks or Days. SentinelOne will cut about 240 employees, citing productivity gains from frontier AI models that have dramatically accelerated internal workflows, while redirecting savings into AI security, cloud, data and endpoint initiatives to drive long-term growth and profitability. First seen on govinfosecurity.com Jump to…
-
Credit card theft campaign abuses Stripe to host stolen payment info
A new Magecart campaign is using Stripe’s API infrastructure to host the credit card-stealing payload and the data exfiltrated from checkout pages. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/credit-card-theft-campaign-abuses-stripe-to-host-stolen-payment-info/
-
FTC considers setting aside or modifying $150 million privacy penalty against X
Twitter, renamed X in 2023, filed a petition saying that the settlement terms are unfair because the order was issued against a company that “no longer exists,” the workers responsible for the scheme no longer work for X and the firm has since established a “world class” privacy and data protection program. First seen on…
-
DentaQuest data breach exposed info of 2.6 million accounts
A data breach at the dental benefits administrator DentaQuest has reportedly exposed the sensitive data of 2.6 million accounts. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dentaquest-data-breach-exposed-info-of-26-million-accounts/
-
Bugcrowd Launches EU Data Residency Option For Evolving Data Sovereignty Needs
Tags: dataOrganizations are growing serious about what nation’s rules apply to their data. Experts point to geopolitical tensions as a main contributing factor. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/bugcrowd-launches-eu-data-residency-option-for-evolving-data-sovereignty-needs
-
Your AI agent could become your biggest insider threat
New research details how the increasing integration of AI agents into businesses is making it easier than ever for insiders – malicious or otherwise – to put sensitive data at risk. First seen on cyberscoop.com Jump to article: cyberscoop.com/ai-agent-insider-threat-cybersecurity-dtex/
-
EU Prepares Path for Shutting Out US Cloud Providers
Commission Proposes That Sensitive Public Data Should Be Kept Local. The European Union’s executive arm singled a strong dislike for U.S. cloud service provider participation in public-sector procurements in a long-delayed legislative package meant to bolster continental self-sufficiency. The proposal called for sensitive public data to be stored locally. First seen on govinfosecurity.com Jump to…
-
Meta Silently Added Face-Recognition Code for Its Smart Glasses to Millions of Phones
Code reviewed by WIRED uncovered an unreleased face-recognition system embedded in Meta’s smart glasses platform. It’s designed to identify people via biometric data stored on users’ phones. First seen on wired.com Jump to article: www.wired.com/story/meta-smart-glasses-face-recognition-nametag-connections/
-
Supreme Court rules FCC fines punishing telecom giants for sharing location data were legal
Tags: dataThe Trump administration had backed the FCC’s position and, apart from Justice Clarence Thomas, the high court agreed. First seen on therecord.media Jump to article: therecord.media/supreme-court-rules-fcc-fines-telecom-location-data-legal
-
iFood Confirms Data Breach Affecting 1.2 Million Users in Brazil
iFood confirms a data breach affecting 1.2 million customers in Brazil, while hackers on BreachForums claim the actual theft is much larger. First seen on hackread.com Jump to article: hackread.com/ifood-confirms-data-breach-brazil-users/
-
US Firms Try DeepSeek as Silicon Valley AI Costs Rise
US firms are testing China’s DeepSeek as Silicon Valley AI costs rise, raising questions about savings, data residency, and risk. The post US Firms Try DeepSeek as Silicon Valley AI Costs Rise appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-us-firms-try-deepseek-ai-costs-rise/
-
UN food agency investigates breach exposing data of Gaza aid recipients
In a message sent to aid recipients via Telegram over the weekend, the World Food Programme (WFP) said that “unauthorized parties” had accessed data stored in its self-registration application in Gaza. First seen on therecord.media Jump to article: therecord.media/un-food-agency-investigates-gaza-aid-breach
-
Phishing Attacks Pivot to Infostealer Malware Over Fake Login Pages
Cybercriminal tactics are evolving as phishing campaigns increasingly shift away from fake login pages toward infostealer malware designed to quietly harvest sensitive data from infected systems. While traditional credential-harvesting pages remain in use, threat actors are now prioritizing methods that reduce user interaction and increase data collection efficiency. Infostealers are purpose-built malware families that extract…
-
ClawHub, Cisco, and Vercel Skill Detection Tools Evaded by Malicious Uploads
Security researchers have shown that AI skill security scanners from ClawHub, Cisco, and Vercel’s skills.sh can be reliably bypassed using simple techniques, raising serious concerns about agentic AI supply chain defenses. In tests conducted by Trail of Bits, multiple malicious skills designed to exfiltrate data, hijack agents, or execute arbitrary code were successfully uploaded and…
-
Automated Bots Overtake Human Users in Global Internet Traffic for the First Time
Automated bots have officially overtaken human users in global internet traffic for the first time, marking a major shift in how the web is accessed and used. Recent data from Cloudflare Radar shows that bots now generate 57.5% of all HTTP requests to HTML pages. In comparison, human activity has dropped to 42.5%. The trend…
-
ETSI sets security requirements for AI data centers and cloud platforms
ETSI has published TS 104 033, a technical specification that defines security requirements for AI computing platforms. The specification establishes a security framework for … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/04/etsi-securing-ai-computing-platforms-standard/
-
Smashing Security podcast #470: This AI security flaw might be impossible to fix
A website called “UK visa portal” has been quietly collecting passport scans, selfies, and personal data from thousands of travellers who thought they were applying through official channels. They weren’t. And when a journalist tried to warn the company, it was lawyers who responded. First seen on grahamcluley.com Jump to article: grahamcluley.com/smashing-security-podcast-470/
-
Vobis Ventures Buys Optiv Consulting to Expand AI Security
500-Person Team Will Help Vobis Blend AI, Data and Security Architecture Services. Vobis Ventures acquired Optiv’s 500-person consulting business to combine cybersecurity architecture expertise with AI implementation, governance and agentic AI security capabilities as enterprises struggle to manage the risks of rapidly expanding AI deployments. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/vobis-ventures-buys-optiv-consulting-to-expand-ai-security-a-31857
-
How to Recover Data from iCloud Backup Without Resetting Your iPhone
Restore data from an iCloud backup without the necessity of resetting your iPhone. Discover proven methods to get back your photos, messages, contacts, and many more things in a very easy way. First seen on hackread.com Jump to article: hackread.com/how-to-recover-icloud-backup-data-resetting-iphone/
-
Musk’s X Asks US FTC to Nullify Data Security Order
Social Media Platform Files Petition With Agency Over May 2022 Consent Order. Elon Musk’s social media company wants a do-over with the U.S. Federal Trade Commission in a petition arguing the agency should terminate data security oversight 16 years early. The FTC began Tuesday a public comment period for X’s request to set aside or…
-
Ultrahuman says hackers accessed customers’ wellness data via internal tool
The breach at wearable ring maker Ultrahuman stemmed from credentials stolen from a malware-infected employee laptop. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/03/ultrahuman-says-hackers-accessed-customers-wellness-data-via-internal-tool/
-
The worst hacks and breaches of 2026 (so far)
From a massive DOGE data breach and the hacking of critical energy and water systems to the hack of an FBI surveillance system, here are the most damaging security incidents and data breaches of 2026. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/03/the-worst-hacks-and-breaches-of-2026-so-far/
-
Alcasec, >>Robin Hood of Spanish Hackers,<< Jailed for 31 Months Over Data Theft
Alcasec, the “Robin Hood of Spanish Hackers,” is jailed for 31 months after admitting to stealing and selling Spanish citizens’ banking data. First seen on hackread.com Jump to article: hackread.com/alcasec-robin-hood-of-spanish-hackers-jail-data-theft/
-
Only 11% of production agents pass the AI agent security bar
Enterprise teams are running AI agents that write code, drive browsers, answer customer calls, manage cloud infrastructure, and query data warehouses with standing … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/03/research-ai-agent-security-capability/
-
Russian hackers exploit WinRAR vulnerability for data theft
First seen on scworld.com Jump to article: www.scworld.com/brief/russian-hackers-exploit-winrar-vulnerability-for-data-theft
-
Spanish police arrest individual in connection with data leak from state organizations
First seen on scworld.com Jump to article: www.scworld.com/brief/spanish-police-arrest-individual-in-connection-with-data-leak-from-state-organizations
-
Grand Theft Auto V cheat service Atlas Menu hacked, user data exposed
First seen on scworld.com Jump to article: www.scworld.com/brief/grand-theft-auto-v-cheat-service-atlas-menu-hacked-user-data-exposed