Tag: data
-
ISMG Editors: Et Tu, AI? When Frontier Models Choose Murder
Also: India’s New Privacy Law; Monitoring Operational Technology Environments. In this week’s update, four ISMG editors discussed frontier artificial intelligence models’ propensity to engage in unethical behavior, getting ready for India’s new data protection law and how to improve hardening and security monitoring for operational technology environments. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-editors-et-tu-ai-when-frontier-models-choose-murder-a-28843
-
Some Brother printers have a remote code execution vulnerability, and they can’t fix it
The centerpiece of Rapid7’s disclosure is CVE-2024-51978, a vulnerability rated critical (CVSS 9.8 out of 10) that enables attackers to derive the default administrator password from the device’s serial number.While another of the discovered flaws, a medium severity information disclosure vulnerability (CVE-2024-51977), potentially allows an attacker to leak the prerequisite unique serial number via the…
-
Food Retail Giant’s Breach: 2.2 Million Employees Affected
Personal Data Stolen in Ransomware Hit, Says Dutch Owner of Stop & Shop, Giant Food. Food retail giant Ahold Delhaize USA is notifying 2.2 million current and former employees, as well as an unspecified number of employees in the Netherlands, that a November 2024 data breach exposed their personally identifiable information, including Social Security numbers…
-
Hackers stole data on 2.2 million people in cyberattack affecting American grocery chains
The Dutch conglomerate behind Hannaford, Stop & Shop and other major grocery brands informed state regulators of the scope of a November cyberattack that hampered online orders and leaked sensitive data. First seen on therecord.media Jump to article: therecord.media/hackers-cyberattack-grocery-chain
-
Data spill in aisle 5: Grocery giant Ahold Delhaize says 2.2M affected after cyberattack
Finance, health, and national identification details compromised First seen on theregister.com Jump to article: www.theregister.com/2025/06/27/ahold_delhaize_breach/
-
Microsoft-Lücke ermöglicht E-Mail-Versand ohne Authentifizierung
Tags: access, authentication, ciso, cyberattack, data, defense, dkim, dmarc, exploit, framework, hacker, infrastructure, mail, microsoft, phishing, powershell, qr, risk, tool, usa, vulnerability, zero-dayDrucker und Scanner werden dank einer Schwachstelle in der Microsoft 365 Direct Send-Funktion zunehmend zu Mitteln für Hacker, um Phishing-Angriffe durchzuführen.Das Forensik-Team von Varonis hat eine Schwachstelle entdeckt, die es internen Geräten wie Druckern ermöglicht, E-Mails ohne Authentifizierung zu versenden. Dem Bericht zufolgewurde die Lücke bereits genutzt, um mehr als 70 Unternehmen, vorwiegend in den…
-
Navigating a Heightened Cyber Threat Landscape: Military Conflict Increases Attack Risks
Tags: advisory, ai, attack, authentication, breach, business, cloud, container, control, cyber, cyberattack, cybersecurity, data, data-breach, defense, detection, exploit, finance, firmware, group, hacker, hacking, Hardware, identity, infrastructure, intelligence, Internet, iran, mfa, military, network, password, risk, russia, service, strategy, tactics, technology, terrorism, threat, tool, update, vulnerability, vulnerability-managementThe current geopolitical climate demands a proactive, comprehensive approach to cybersecurity. Here’s what you need to know, and how Tenable can help. The cybersecurity landscape is in constant flux, but rarely do we see such a rapid escalation of threats as we are currently experiencing. The U.S. Department of Homeland Security’s (DHS) National Terrorism Advisory…
-
Frequently Asked Questions About Iranian Cyber Operations
Tags: access, advisory, api, apt, attack, authentication, awareness, cisa, cloud, credentials, cve, cyber, cybersecurity, data, data-breach, defense, dos, exploit, finance, framework, government, group, Hardware, identity, infrastructure, injection, Internet, iran, ivanti, malware, mfa, microsoft, middle-east, military, mitre, monitoring, network, password, ransomware, rce, remote-code-execution, risk, service, software, supply-chain, tactics, technology, terrorism, threat, tool, update, vpn, vulnerability, windowsTenable’s Research Special Operations team focuses on some frequently asked questions about Iranian cyber operations, including the tactics, techniques and procedures employed by Iran-based threat actors. Background Tenable’s Research Special Operations (RSO) team has compiled this blog to answer Frequently Asked Questions (FAQ) regarding Iranian cyber operations in the wake of the recent conflict and…
-
How to Keep Client Data Safe in a World Full of Online Threats
Businesses, big or small, must prioritize data security not only to maintain trust but also to stay compliant with evolving regulations. This article explores practical, actionable strategies to safeguard client information, including encryption, access control, employee training, and secure cloud practices. Learn how to build a resilient security culture that protects your clients and your…
-
The Age of Integrity
We need to talk about data integrity. Narrowly, the term refers to ensuring that data isn’t tampered with, either in transit or in storage. Manipulating account balances in bank databases, removing entries from criminal records, and murder by removing notations about allergies from medical records are all integrity attacks. More broadly, integrity refers to ensuring…
-
Researchers Warn Free VPNs Could Leak US Data to China
Tech Transparency Project warns Chinese-owned VPNs like Turbo VPN and X-VPN remain on Apple and Google app stores, raising national security concerns. First seen on hackread.com Jump to article: hackread.com/researchers-warn-free-vpns-leak-us-data-to-china/
-
Retail giant Ahold Delhaize says data breach affects 2.2 million people
Ahold Delhaize, one of the world’s largest food retail chains, is notifying over 2.2 million individuals that their personal, financial, and health information was stolen in a November ransomware attack that impacted its U.S. systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-says-data-breach-affects-22-million-people/
-
Abstract Security Adds Data Lake to Reduce Storage Costs
Abstract Security this week added a data lake, dubbed LakeVilla, to a portfolio of tools for migrating data between cybersecurity tools to provide a less expensive alternative to a security information event management (SIEM) platform for storing data. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/abstract-security-adds-data-lake-to-reduce-storage-costs/
-
MOVEit Transfer Faces Increased Threats as Scanning Surges and CVE Flaws Are Targeted
Threat intelligence firm GreyNoise is warning of a “notable surge” in scanning activity targeting Progress MOVEit Transfer systems starting May 27, 2025″, suggesting that attackers may be preparing for another mass exploitation campaign or probing for unpatched systems.MOVEit Transfer is a popular managed file transfer solution used by businesses and government agencies to share sensitive…
-
6 key trends redefining the XDR market
Tags: access, ai, apache, attack, cloud, country, crowdstrike, cybersecurity, data, detection, edr, endpoint, framework, identity, incident response, infrastructure, intelligence, marketplace, microsoft, ml, monitoring, msp, mssp, network, office, open-source, ransomware, service, siem, soc, sophos, threat, toolXDR-as-a-service on the rise: A fully staffed SOC is out of reach for many organizations and that’s why the rise of XDR-as-a-service reflects growing demand for managed, scalable security capabilities.”With stretched teams and expanding attack surfaces, many organizations are turning to trusted providers to deliver round-the-clock detection and response,” says Santiago Pontiroli, lead security researcher…
-
University Student Charged for Alleged Hacking and Data Theft
A 27-year-old former student of Western Sydney University has been charged with a string of cyber offences, following an extensive investigation into a series of cyber attacks that have plagued the institution since 2021. The arrest comes after a coordinated operation by the NSW Police Cybercrime Squad under Strike Force Docker, working in partnership with…
-
‘Cyber Fattah’ Hacktivist Group Leaks Saudi Games Data
As tensions in the Middle East rise, hacktivist groups are coming out of the woodwork with their own agendas, leading to notable shifts in the hacktivist threat landscape. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/cyber-fattah-hacktivist-leaks-saudi-games-data
-
AI Assistant
Product Update: Version 5.0 We’ve rolled out our biggest update yet, and it’s packed with lots of great stuff that make managing your data center even easier, smarter, and more efficient. Here’s a quick look at what’s new. AI Assistant, Your Smart New Sidekick Need help finding … First seen on securityboulevard.com Jump to article:…
-
Don’t trust that email: It could be from a hacker using your printer to scam you
Tags: authentication, control, credentials, data, defense, dkim, dmarc, email, endpoint, exploit, framework, hacker, infrastructure, iot, login, mail, microsoft, monitoring, network, phishing, powershell, qr, risk, scam, tactics, tool, vulnerability, zero-daytenantname.mail.protection.outlook.com, and companies’ internal email address formats can be trivial to figure out or easy to scrape from public sources or social media. Once an attacker has the domain and a valid email address, they are able to send emails that appear to come from inside the organization.In the campaign observed by Varonis’ forensics experts,…
-
Cisco warns of critical API vulnerabilities in ISE and ISE-PIC
Tags: access, ai, api, application-security, attack, authentication, automation, best-practice, business, ceo, cisco, ciso, cloud, communications, control, credentials, data, defense, email, endpoint, exploit, firewall, flaw, framework, guide, Hardware, incident response, malicious, microsoft, mobile, network, penetration-testing, programming, risk, router, saas, sans, service, software, threat, update, vpn, vulnerability, wafroot user.The fault behind both vulnerabilities: Holes in application programming interfaces (APIs).”Take this vulnerability seriously,” said Moses Frost, senior course instructor on cloud penetration testing at the SANS Institute. “In my experience assessing networks, I have found through testing that many lack essential patches and security hardening on their core network devices. I have seen Cisco…
-
How an Email, Crypto Wallet and YouTube Activity Led the FBI to IntelBroker
FBI tracked IntelBroker as UK’s Kai West using an email address, crypto trails, YouTube activity and forum posts after dozens of high-profile data breaches and darknet activity. First seen on hackread.com Jump to article: hackread.com/email-crypto-wallet-youtube-activity-fbi-intelbroker/
-
Nationwide Recovery Service Hack Grows to 500,000 Victims
Debt Collector’s 2024 Data Breach Affected Multiple Hospitals and Medical Practices. The list of healthcare sector clients reporting large health data breaches from the 2024 hack on debt collection firm Nationwide Recovery Service continues to grow, as does the vast number of affected patients. So far, the hack has affected at least 500,000 patients. First…
-
Complaint says Bumble feature connected to OpenAI violates European data privacy rules
The stand-alone Bumble for Friends app runs afoul of Europe’s data privacy rules with a feature called Icebreaker that uses OpenAI technology to analyze users’ profiles, according to a complaint filed by the organization noyb. First seen on therecord.media Jump to article: therecord.media/bumble-for-friends-openai-noyb-complaint-gdpr
-
Separate healthcare data breaches impact over 200K
First seen on scworld.com Jump to article: www.scworld.com/brief/separate-healthcare-data-breaches-impact-over-200k
-
Kiteworks Acquires Zivver to Unify Email Security and EU Data Protection
First seen on scworld.com Jump to article: www.scworld.com/news/kiteworks-acquires-zivver-to-unify-email-security-and-eu-data-protection
-
Infostealer behind extensive Paraguayan data breach
First seen on scworld.com Jump to article: www.scworld.com/brief/infostealer-behind-extensive-paraguayan-data-breach
-
Data encrypting ransomware attacks decline
First seen on scworld.com Jump to article: www.scworld.com/brief/data-encrypting-ransomware-attacks-decline
-
Meta scores worst on GenAI data privacy ranking
First seen on scworld.com Jump to article: www.scworld.com/news/meta-scores-worst-on-genai-data-privacy-ranking
-
HPE Expands Hybrid Cloud and AI Capabilities with New Infrastructure, Data Resilience, and Partner Integrations
First seen on scworld.com Jump to article: www.scworld.com/news/hpe-expands-hybrid-cloud-and-ai-capabilities-with-new-infrastructure-data-resilience-and-partner-integrations