Tag: data
-
Kai West, aka IntelBroker, indicted for cyberattacks causing $25M in damages
British national Kai West, aka IntelBroker, was charged in U.S. for a global hacking scheme that stole and sold data, causing millions in damages. Kai West (25), a British national, has been charged in the U.S. for operating as ‘IntelBroker,’ running a global hacking scheme that stole and sold data, causing millions in damages. The…
-
IBM WebSphere Application Server Flaw Enables Arbitrary Code Execution
A severe security flaw has been identified in IBM WebSphere Application Server, potentially allowing remote attackers to execute arbitrary code on affected systems. Tracked under CVE-2025-36038, this vulnerability stems from a deserialization of untrusted data issue, classified under CWE-502. IBM has assigned a critical CVSS Base Score of 9 to this flaw, with a vector…
-
Randall Munroe’s XKCD ‘Interoperability’
Tags: datavia the cosmic humor & dry-as-the-desert wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/randall-munroes-xkcd-interoperability/
-
Why Data-Centric Security Matters Now
Forcepoint’s Ronan Murphy on Data-Centric Security in the AI Era. Technologies such as AI and cloud are accelerating digital transformation programs across all industries, leaving CISOs with a stark choice: Hit the brakes on innovation or secure the data that’s fueling it. Forcepoint’s Ronan Murphy shares ways to navigate this changing security landscape. First seen…
-
Ex-student charged over hacking university for cheap parking, data breaches
New South Wales police in Australia have arrested a 27-year-old former Western Sydney University (WSU) student for allegedly hacking into the University’s systems on multiple occasions, starting with a scheme to obtain cheaper parking. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ex-student-charged-over-hacking-university-for-cheap-parking-data-breaches/
-
Notorious cybercriminal ‘IntelBroker’ arrested in France, awaits extradition to US
Kai West, a 25-year-old British national, is accused of stealing data from more than 40 organizations during a two-year spree. First seen on cyberscoop.com Jump to article: cyberscoop.com/intelbroker-cybercriminal-kai-west-arrested/
-
Hundreds of MCP Servers at Risk of RCE and Data Leaks
Misconfigured AI-linked MCP servers are exposing users to data breaches and remote code execution threats First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/mcp-servers-risk-rce-data-leaks/
-
Australia’s 28-Day Cyber Comeback
Australian and New Zealand companies are bouncing back from cyberattacks nearly three weeks faster than they did a year ago, according to a new survey commissioned by U.S. data-protection vendor Commvault and published by Reuters. The poll of 408 IT leaders found the typical recovery window has shrunk to 28 days, down from 45 days……
-
The Toxic Cloud Trilogy: Why Your Workloads Are a Ticking Time Bomb
Tags: access, attack, breach, business, cloud, container, credentials, cve, data, data-breach, detection, exploit, group, iam, identity, infrastructure, Internet, least-privilege, mitigation, monitoring, network, remote-code-execution, risk, service, vulnerabilityDon’t let hidden cloud risks become tomorrow’s headline breach. The time to dismantle the toxic cloud trilogy is now. Here’s how Tenable Cloud Security can help. In today’s cloud environments, individual misconfigurations or vulnerabilities are dangerous, but it’s their combinations that can lead to catastrophic breaches. The Tenable Cloud Security Risk Report 2025 reveals that…
-
Glasgow City Council online services crippled following cyberattack
Nothing confirmed but authority is operating under the assumption that data has been stolen First seen on theregister.com Jump to article: www.theregister.com/2025/06/26/glasgow_city_council_cyberattack/
-
The Hidden Risks of SaaS: Why Built-In Protections Aren’t Enough for Modern Data Resilience
SaaS Adoption is Skyrocketing, Resilience Hasn’t Kept PaceSaaS platforms have revolutionized how businesses operate. They simplify collaboration, accelerate deployment, and reduce the overhead of managing infrastructure. But with their rise comes a subtle, dangerous assumption: that the convenience of SaaS extends to resilience.It doesn’t.These platforms weren’t built with full-scale data First seen on thehackernews.com Jump…
-
BreachForums: ShinyHunters Members Arrested, IntelBroker Identified as Kai West
Four alleged ShinyHunters members arrested, IntelBroker exposed as British national Kai West in global crackdown linked to BreachForums and major data breaches. First seen on hackread.com Jump to article: hackread.com/breachforums-shinyhunters-arrested-intelbroker-kai-west/
-
Stability in Cybersecurity: The Role of NHIs
What Does Stability In Cybersecurity Mean? Stability in cybersecurity refers to a state where an organization’s data, applications, networks, and devices are secure and resistant to breaches, attacks, and data leaks. Achieving this stability requires the integration of numerous strategies and tools, and amongst these, the role of Non-Human Identities (NHIs) cannot be ignored. NHIs……
-
Supply Chain Incident Imperils Glasgow Council Services and Data
Glasgow City Council has warned of service disruption and potential data loss after a security incident First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/supply-chain-imperils-glasgow/
-
How to make your multicloud security more effective
Tags: ai, automation, ciso, cloud, container, control, data, infrastructure, LLM, risk, risk-analysis, software, technology, threat, toolIs it time to repatriate to the data center?: Perhaps. Some organizations, such as Zoom, have moved workloads to on-premises because it provides more predictable performance for real-time needs of their apps. John Qian, who once worked there and now is the CISO for security vendor Aviatrix, tells CSO that Zoom uses all three of…
-
CISA Issues Alert on ControlID iDSecure Flaws Enabling Bypass Authentication
Tags: access, authentication, cisa, control, cyber, cybersecurity, data, flaw, infrastructure, leak, software, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding critical vulnerabilities in ControlID’s iDSecure On-premises software, a widely used vehicle control and access management platform. The alert, designated ICSA-25-175-05 and released on June 24, 2025, highlights multiple security flaws that could allow attackers to bypass authentication, leak sensitive data, and perform…
-
CC Signals lets you set boundaries with AI without locking down your work
Creative Commons introduced CC Signals, a new framework that helps data and content owners communicate how they want their work used by AI systems. The idea is to build a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/26/cc-signals-ai-boundaries/
-
Kanister: Open-source data protection workflow management tool
Kanister is an open-source tool that lets domain experts define how to manage application data using blueprints that are easy to share and update. It handles the complex parts … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/26/kanister-open-source-data-protection-workflow-management-tool/
-
Authorities Arrest Five Operators Behind Infamous BreachForums Cybercrime Hub
In a sweeping crackdown that has sent shockwaves through the global cybercrime community, French authorities have arrested five key operators behind BreachForums, one of the world’s most notorious online marketplaces for stolen data. The arrests mark a significant victory for international law enforcement in the fight against digital crime and data trafficking. The operation, led…
-
Bankers Association’s Attack on Cybersecurity Transparency
Tags: attack, awareness, banking, breach, ciso, control, cybersecurity, data, extortion, finance, group, incident response, infrastructure, insurance, law, malicious, ransomware, riskA coalition of banking industry associations, including SIFA, the American Bankers Association (ABA), Bank Policy Institute (BPI), and several other lobbying groups have made a disgraceful appeal to the SEC to eliminate the rule requiring public disclosure of material cybersecurity incidents within four days of detection. This rule was established to ensure shareholders are properly…
-
The top red teamer in the US is an AI bot
Tags: ai, attack, breach, cybersecurity, data, email, exploit, infrastructure, monitoring, ransomware, risk, software, threat, tool, training, updateDefenders need to rethink their approach: While Xbow is now besting human red-teamers, and at a rapid clip, defenders still have a long way to go to keep up with the onslaught of AI-perpetrated attacks, experts say.”Hackers are quickly adopting new tools that allow them to move faster, hit harder, and target more precisely than…
-
Bridewell report indicates rise in lone wolf ransomware actors
Tags: attack, cybersecurity, data, encryption, extortion, ransomware, service, strategy, theft, threatBridewell, a UK-based cybersecurity services company, has released its latest CTI Annual Report a comprehensive deep dive into ransomware trends. It highlighted a significant shift in attack strategies, payment dynamics and threat actor behaviours, revealing that data theft and extortion have overtaken traditional encryption-only ransomware as the most successful approach for attackers. While encryption-based The…
-
Hacker ‘IntelBroker’ charged in US for global data theft breaches
A British national known online as “IntelBroker” has been charged by the U.S. for stealing and selling sensitive data from dozens of victims, causing an estimated $25 million in damages. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/british-hacker-intelbroker-charged-with-25m-in-cybercrime-damages/
-
Hacker Who Stole Lawmaker Data From Insurance Market Charged
‘IntelBroker’ Faces Four-Count Indictment in Manhattan Federal Court. A hacker known online as IntelBroker and who has a history of spilling sensitive information faces a four-count criminal indictment in the United States after French police arrested him in February. IntelBroker’s true identity is British national Kai West, U.S. federal Manhattan prosecutors said. First seen on…
-
Many data brokers aren’t registering across state lines, privacy groups say
An analysis of four states with data broker registry laws found that hundreds of brokers are registered as such in one state but not in others. First seen on cyberscoop.com Jump to article: cyberscoop.com/many-data-brokers-arent-registering-across-state-lines-privacy-groups-say/