Tag: data
-
Data breach at healthcare services firm Episource affects 5.4M
The incident, one of the largest breaches reported to federal regulators this year, came after a cybercriminal accessed data on the company’s computer systems over the winter. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/episource-healthcare-data-breach-impacts-5-4-million/751960/
-
Swiss nonprofit health organization breached by Sarcoma ransomware group
Sarcoma, a recently emerged cybercrime group, was responsible for a data breach of Swiss health nonprofit Radix, according to a statement by the Zurich-based organization. First seen on therecord.media Jump to article: therecord.media/sarcoma-ransomware-breach-swiss-healthcare-nonprofit-radix
-
How 2 Ransomware Attacks on 2 Hospitals Led to 2 Deaths in Europe
Two deadly Ransomware Attacks on European hospitals show cybercrime now risks lives not just data with patients dying after treatment delays. First seen on hackread.com Jump to article: hackread.com/how-ransomware-attacks-hospitals-2-deaths-in-europe/
-
FBI: Cybercriminals steal health data posing as fraud investigators
The Federal Bureau of Investigation (FBI) has warned Americans of cybercriminals impersonating health fraud investigators to steal their sensitive information. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-warns-cybercriminals-steal-health-data-posing-as-fraud-investigators/
-
Germany Urges Apple and Google to Ban Chinese AI App DeepSeek Over Privacy Concerns
Berlin’s data protection commissioner, Meike Kamp, has raised serious alarms over the Chinese AI application DeepSeek, accusing the company of unlawfully transferring personal data of German users to China in violation of the European Union’s stringent General Data Protection Regulation (GDPR). In a statement released on Friday, Kamp highlighted that DeepSeek has failed to demonstrate…
-
Russian Throttling of Cloudflare ‘Renders Many Websites Barely Usable’
Russian ISPs, under the direction of the government, are choking the access of Russian citizens to websites protected by Cloudflare, limiting them to 16 KB of data, which the U.S.-based company said makes the sites “barely usable.” First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/russian-throttling-of-cloudflare-renders-many-websites-barely-usable/
-
Patch now: Citrix Bleed 2 vulnerability actively exploited in the wild
Indications of real-world exploitation: ReliaQuest researchers said that, in multiple incidents, attackers were seen hijacking active Citrix web sessions and bypassing multi-factor authentication (MFA) without requiring user credentials. The research also highlighted “session reuse across multiple IPs, including combinations of expected and suspicious IPs.”In compromised environments, attackers proceeded with post-authentication reconnaissance, issuing lightweight directory access…
-
Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories
Identity-based attacks are on the rise. Attacks in which malicious actors assume the identity of an entity to easily gain access to resources and sensitive data have been increasing in number and frequency over the last few years. Some recent reports estimate that 83% of attacks involve compromised secrets. According to reports such as the…
-
Ahold Delhaize data breach affected over 2.2 Million individuals
A ransomware attack on grocery giant Ahold Delhaize led to a data breach that affected more than 2.2 million people. A ransomware attack on Dutch grocery giant Ahold Delhaize has led to a data breach affecting over 2.2 million people. Ahold Delhaizeis a Dutch-Belgian multinational retail and wholesale holding company. Its name comes from the…
-
Ahold Delhaize Data Breach Exposes Personal Information of 2.2″¯Million Shoppers
Ahold Delhaize USA Services, LLC, a major grocery retail operator, has confirmed a significant data breach that compromised the personal information of over 2.2 million shoppers across the United States, including nearly 100,000 residents of Maine. The breach, which was the result of an external hacking incident, has prompted the company to notify affected customers…
-
Ahold Delhaize Confirms Data Breach of 2.2M amid INC Ransomware Claims
Grocery giant Ahold Delhaize USA faced a major data breach affecting over 2.2 million employees. Learn what sensitive info was stolen and the ransomware group behind the Nov 2024 attack. First seen on hackread.com Jump to article: hackread.com/ahold-delhaize-data-breach-amid-inc-ransomware-claims/
-
Beyond CVE: The hunt for other sources of vulnerability intel
Tags: advisory, application-security, china, cisa, cve, cyber, cybersecurity, data, exploit, flaw, github, government, guide, infrastructure, intelligence, kev, microsoft, nvd, oracle, ransomware, risk, siem, soar, software, threat, tool, update, vulnerability, zero-dayCurrent alternatives include diverse vendor sources: Independent providers of aggregated vulnerability information such as Flashpoint, VulnCheck, Tenable, BitSight and others are another option. Many of these vendors offer curated datasets that capture vulnerabilities often missed or delayed by CVE, Lefkowitz points out. They also offer critical context such as exploitability, ransomware risk, and social risk.”To…
-
Synology ABM Vulnerability Leaks Microsoft 365 Sensitive Information
A critical vulnerability inSynology’s Active Backup for Microsoft 365 (ABM)has exposed sensitive data from Microsoft 365 tenants worldwide, potentially impacting over a million organizations relying on the popular backup solution. The flaw, tracked as CVE-2025-4679, allowed attackers to access confidential Microsoft 365 content”, including Teams messages, group memberships, Outlook conversations, and calendar data”, without requiring prior…
-
How exposure-enriched SOC data can cut cyberattacks in half by 2028
Gartner projects that by 2028, organizations enriching their Security Operations Center (SOC) data with exposure insights will reduce the frequency and impact of cyberattacks … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/30/plextrac-data-exposure-management/
-
NIST’s CURBy Uses Quantum to Verify Randomness of Numbers
Scientists with NIST and the University of Colorado Boulder developed CURBy, a system that can verify the randomness of strings of numbers, which will add more protection to encrypted data in the coming era of quantum computing. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/nists-curby-uses-quantum-to-verify-randomness-of-numbers/
-
Stay Ahead: Upgrading Your NHI Strategy for Cloud Security
Why Upgrade Your NHI Strategy for Cloud Security? Cybersecurity threats have been steadily increasing, requiring cybersecurity professionals to frequently reassess and upgrade their strategies. A robust Non-Human Identities (NHIs) strategy, an essential aspect of data management, is often overlooked despite its crucial role in cloud security. So, why should organizations prioritize an NHI strategy upgrade?……
-
Threat Actors Transform GIFTEDCROOK Stealer into an Intelligence-Gathering Tool
The Arctic Wolf Labs team has uncovered a dramatic transformation in the capabilities of the GIFTEDCROOK infostealer, wielded by the threat group UAC-0226. Initially identified as a rudimentary browser data stealer in early 2025, this malware has undergone rapid evolution through versions 1.2 and 1.3, morphing into a sophisticated intelligence-gathering tool by June 2025. This…
-
CVE-2025-5777, CVE-2025-6543: Frequently Asked Questions About CitrixBleed 2 and Citrix NetScaler Exploitation
Frequently asked questions about recent Citrix NetScaler ADC and Gateway vulnerabilities that have reportedly been exploited in the wild, including CVE-2025-5777 known as CitrixBleed 2. Background Tenable’s Research Special Operations (RSO) team has compiled this blog to answer Frequently Asked Questions (FAQ) regarding CVE-2025-5777 and CVE-2025-6543, two Citrix NetScaler ADC and Gateway vulnerabilities that have…
-
US Department of Defense will stop sending critical hurricane satellite data
No replacement in the wings for info streamed from past their prime rigs, ‘termination will be permanent’ First seen on theregister.com Jump to article: www.theregister.com/2025/06/27/us_hurricane_satellite_data_to_stop/
-
‘IntelBroker’ Hacker Arrested for Wave of High-Profile Data Breaches
Kai West, a 25-year-old British citizen, is accused of being the notorious “IntelBroker” hacker, who with co-conspirators attached dozens of major companies, stealing data and offering it for sale on the underground BreachForums site. The attacks cost victims as much as $25 million in damages, prosecutors say. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/intelbroker-hacker-arrested-for-wave-of-high-profile-data-breaches/
-
ESET Warns Cybercriminals Are Targeting NFC Data for Contactless Payments
ESET researchers have uncovered a sophisticated attack vector exploiting Near Field Communication (NFC) data, initially targeting Czech banking customers but now spreading worldwide. According to the ESET Threat Report H1 2025, the incidence of NFC-related attacks has skyrocketed, with telemetry data showing a staggering 35-fold increase in the first half of 2025 compared to the…
-
BreachForums broken up? French police arrest five members of notorious cybercrime site
Suspected high-ranking members of one of the world’s largest online marketplaces for leaked data have been arrested by French police. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/breachforums-broken-up-french-police-arrest-five-members-of-notorious-cybercrime-site
-
Cybercriminals Exploit CapCut Popularity to Steal Apple ID Credentials and Credit Card Data
Threat actors have capitalized on the immense popularity of CapCut, the leading short-form video editing app, to orchestrate a highly deceptive phishing campaign. According to the Cofense Phishing Defense Center (PDC), attackers are deploying meticulously crafted fake invoices that impersonate CapCut’s branding to lure users into surrendering their Apple ID credentials and credit card information.…
-
GIFTEDCROOK Malware Evolves: From Browser Stealer to Intelligence-Gathering Tool
The threat actor behind the GIFTEDCROOK malware has made significant updates to turn the malicious program from a basic browser data stealer to a potent intelligence-gathering tool.”Recent campaigns in June 2025 demonstrate GIFTEDCROOK’s enhanced ability to exfiltrate a broad range of sensitive documents from the devices of targeted individuals, including potentially proprietary files and First…
-
From Packets to Protection: How Network Observability Powers Security and Forensics
In cybersecurity, the old maxim >>you can’t secure what you can’t see
-
Over 2 million affected by US supermarket breach
Belgian-Dutch supermarket operator Ahold Delhaize reveals that over two million people, including employees, had their data compromised following a November 2024 ransomware attack. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366626681/Over-2-million-affected-by-US-supermarket-breach
-
Cybersecurity Snapshot: U.S. Gov’t Urges Adoption of Memory-Safe Languages and Warns About Iran Cyber Threat
Tags: access, advisory, ai, api, attack, authentication, best-practice, cisa, computer, computing, crypto, cryptography, cyber, cybersecurity, data, defense, encryption, exploit, finance, framework, google, governance, government, group, hacker, healthcare, infrastructure, injection, intelligence, Internet, iran, login, mfa, military, mitigation, mitre, network, nist, passkey, password, programming, ransomware, risk, rust, service, software, strategy, tactics, technology, terrorism, threat, tool, training, vulnerability, warfareCheck out the U.S. government’s latest call for developers to use memory-safe programming languages, as well as its warning for cybersecurity teams regarding cyber risk from hackers tied to Iran. Plus, get the latest on ransomware trends, the quantum computing cyber threat and more! Dive into five things that are top of mind for the…
-
So you CAN turn an entire car into a video game controller
Tags: dataPen Test Partners hijack data from Renault Clio to steer, brake, and accelerate in SuperTuxKart First seen on theregister.com Jump to article: www.theregister.com/2025/06/27/renault_clio_racing_controller/