Tag: data
-
Ukraine’s military intelligence agency stole 4.4GB of highly classified internal data from Tupolev
Ukraine’s GUR hacked the Russian aerospace and defense company Tupolev, stealing 4.4GB of highly classified internal data. Ukraine’s military intelligence agency GUR (aka HUR) claims the hack of the Russian aerospace and defense company Tupolev. According to Kyiv Post, Ukraine’s Military Intelligence compromised the United Aircraft Company (UAC) Tupolev division, which is a key developer…
-
Vishing Crew Targets Salesforce Data
A group Google is tracking as UNC6040 has been tricking users into installing a malicious version of a Salesforce app to gain access to and steal data from the platform. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/vishing-crew-salesforce-data
-
Randall Munroe’s XKCD ‘Check Engine’
Tags: datavia the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/randall-munroes-xkcd-check-engine/
-
Ransomware gang claims responsibility for Kettering Health hack
A group of cybercriminals known as Interlock is advertising stolen data from Kettering Health, which includes patients’ data. First seen on techcrunch.com Jump to article: techcrunch.com/2025/06/04/ransomware-gang-claims-responsibility-for-kettering-health-hack/
-
Ransomware scum leak patient data after disrupting chemo treatments at Kettering
Literally adding insult to injury First seen on theregister.com Jump to article: www.theregister.com/2025/06/04/ransomware_scum_leak_kettering_patient_data/
-
Exclusive: Hackers Leak 86 Million ATT Records with Decrypted SSNs
Hackers leak data of 88 million ATT customers with decrypted SSNs; latest breach raises questions about links to earlier Snowflake-related attack. First seen on hackread.com Jump to article: hackread.com/hackers-leak-86m-att-records-with-decrypted-ssns/
-
Newspaper giant Lee Enterprises says nearly 40,000 Social Security numbers leaked in ransomware attack
Lee Enterprises notified regulators in Maine of the impact on customer data after a ransomware attack in February that caused significant disruptions. First seen on therecord.media Jump to article: therecord.media/newspaper-lee-enterprises-cyberattack-ssn
-
European Commission should rescind UK data adequacy
Civil society organisations have urged the European Commissioner to not renew the UK’s data adequacy, given the country’s growing divergence from European data protection standards First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366625354/European-Commission-should-rescind-UK-data-adequacy
-
Data breach at newspaper giant Lee Enterprises affects 40,000 people
The ransomware attack paralyzed newspaper printing and disrupted operations at media outlets across the country for weeks. First seen on techcrunch.com Jump to article: techcrunch.com/2025/06/04/data-breach-at-newspaper-giant-lee-enterprises-affects-40000-people/
-
Google Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App
Google has disclosed details of a financially motivated threat cluster that it said “specialises” in voice phishing (aka vishing) campaigns designed to breach organizations’ Salesforce instances for large-scale data theft and subsequent extortion.The tech giant’s threat intelligence team is tracking the activity under the moniker UNC6040, which it said exhibits characteristics that align with First…
-
Hackers abuse malicious version of Salesforce tool for data theft, extortion
A threat group is using voice phishing to trick targeted organizations into sharing sensitive credentials. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/hackers-abuse-salesforce-tool-extortion/749790/
-
Google warns of cybercriminals targeting Salesforce app to steal data, extort companies
Researchers at Google said the current campaign involving versions of the Salesforce Data Loader tool has targeted about 20 organizations and is ongoing. First seen on therecord.media Jump to article: therecord.media/google-warns-cybercriminals-targeting-salesforce-apps
-
Fake IT support calls hit 20 orgs, end in stolen Salesforce data and extortion, Google warns
Victims include hospitality, retail and education sectors First seen on theregister.com Jump to article: www.theregister.com/2025/06/04/fake_it_support_calls_hit/
-
Attackers Impersonate Ruby Packages to Steal Sensitive Telegram Data
Malicious RubyGems pose as a legitimate plug-in for the popular Fastlane rapid development platform in a geopolitically motivated attack with global supply chain reach. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/attackers-impersonate-ruby-packages-telegram-data
-
Attackers fake IT support calls to steal Salesforce data
Over the past several months, a threat group has been actively breaching organizations’ Salesforce instances and exfiltrating customer and business data, Google Threat … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/04/salesforce-vishing-attacks/
-
HPE fixed multiple flaws in its StoreOnce software
Hewlett Packard Enterprise (HPE) addressed multiple flaws in its StoreOnce data backup and deduplication solution. HPE has released security patches for eight vulnerabilities in its StoreOnce backup solution. These issues could allow remote code execution, authentication bypass, data leaks, and more. >>Potential security vulnerabilities have been identified in HPE StoreOnce Software.>These […] First seen on…
-
Media giant Lee Enterprises says data breach affects 39,000 people
Publishing giant Lee Enterprises is notifying over 39,000 people whose personal information was stolen in a February 2025 ransomware attack. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/media-giant-lee-enterprises-says-data-breach-affects-39-000-people/
-
Crims stole 40,000 people’s data from our network, admits publisher Lee Enterprises
Did somebody say ransomware? Not the newspaper group, not even to deny it First seen on theregister.com Jump to article: www.theregister.com/2025/06/04/cyberattack_lee_enterprises/
-
Your SaaS Data Isn’t Safe: Why Traditional DLP Solutions Fail in the Browser Era
Traditional data leakage prevention (DLP) tools aren’t keeping pace with the realities of how modern businesses use SaaS applications.Companies today rely heavily on SaaS platforms like Google Workspace, Salesforce, Slack, and generative AI tools, significantly altering the way sensitive information is handled. In these environments, data rarely appears as traditional files or crosses networks First…
-
#Infosec2025: Concern Grows Over Agentic AI Security Risks
Agentic AI systems could threaten security and data privacy, unless organizations test each model and component First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/infosec2025-agentic-ai-risks/
-
Coinbase Aware of Data Breach Since January, Report Reveals
Major Coinbase breach involving a significant customer data leak. Stay informed and protect your assets. Read more! First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/coinbase-aware-of-data-breach-since-january-report-reveals/
-
Nearly 3,000 North Face website customer accounts breached as retail incidents continue
The parent company of apparel brand The North Face sent data breach notification letters to about 3,000 customer accounts, saying attackers used the technique known as credential stuffing. First seen on therecord.media Jump to article: therecord.media/north-face-customer-accounts-data-breach-notification
-
HPE StoreOnce Faces Critical CVE-2025-37093 Vulnerability, Urges Immediate Patch Upgrade
Hewlett Packard Enterprise (HPE) has issued a new security advisory addressing eight newly discovered vulnerabilities in its StoreOnce data backup and deduplication platform. Among these, the most severe is an authentication bypass vulnerability tracked as CVE-2025-37093, which carries a near-maximum CVSS score of 9.8, indicating a critical risk to affected systems. First seen on thecyberexpress.com…
-
#Infosec2025: Device Theft Causes More Data Loss Than Ransomware
Stolen devices are a bigger cause of data loss than stolen credentials or ransomware, according to a new Blancco study First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/device-theft-data-loss-ransomware/
-
New Malware Attack Uses Malicious Chrome Edge Extensions to Steal Sensitive Data
Cybersecurity experts from Positive Technologies’ Security Expert Center have uncovered a sophisticated malicious campaign dubbed >>Phantom Enigma,
-
35,000 Internet-Connected Solar Power Systems Vulnerable to Cyberattacks
Forescout Research Vedere Labs has uncovered that nearly 35,000 solar power devices, including inverters, data loggers, and gateways from 42 vendors, are exposed on the internet with vulnerable management interfaces. Identified using the Shodan search engine, these devices represent a critical cybersecurity risk to global power grids, especially as renewable energy sources like solar power…
-
IBM QRadar Vulnerabilities Expose Sensitive Configuration Files to Attackers
IBM has issued a security bulletin highlighting multiple vulnerabilities in its QRadar Suite Software and Cloud Pak for Security platforms. The flaws, which range from medium to critical severity, could enable attackers to compromise sensitive data, execute arbitrary code, or disrupt service operations. Security experts and IBM strongly recommend that all affected organizations upgrade to…