Collecting Cyber-News from over 60 sources

Tag: data

How the Mass-Adoption of AI is Redefining the Shift to Continuous Threat Exposure Management

Aug 18, 2026 1:55 PM

Tags: ai, attack, data, threat

AI adoption is expanding the enterprise attack surface faster than security teams can respond. Exposure management helps organizations discover shadow AI, protect sensitive data and prioritize exploitable risk. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/how-the-mass-adoption-of-ai-is-redefining-the-shift-to-continuous-threat-exposure-management/
The AI Factory’s Blind Spot Is Trust: Why Confidential AI Is the Missing Infrastructure Layer

Aug 18, 2026 1:55 PM

Tags: ai, data, data-breach, encryption, Hardware, infrastructure

AI factories promise scalable enterprise AI, but traditional security leaves sensitive data and model weights exposed during processing. Confidential AI closes the gap by protecting data in use with hardware isolation, encryption and cryptographic attestation. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/the-ai-factorys-blind-spot-is-trust-why-confidential-ai-is-the-missing-infrastructure-layer/
Securing Software at the Speed of AI: What Four Years of Data Reveal

Aug 18, 2026 1:55 PM

Tags: ai, data, software

<div cla AI-assisted development is changing the speed at which software gets built, but speed is only part of the story. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/securing-software-at-the-speed-of-ai-what-four-years-of-data-reveal/
Securing Software at the Speed of AI: What Four Years of Data Reveal

Aug 18, 2026 1:55 PM

Tags: ai, data, software

<div cla AI-assisted development is changing the speed at which software gets built, but speed is only part of the story. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/securing-software-at-the-speed-of-ai-what-four-years-of-data-reveal/
CISA Warns of Active Exploitation of Ray-Project Ray Code Injection Vulnerability

Aug 18, 2026 1:55 PM

Tags: ai, cisa, computing, cve, cyber, cybersecurity, data, exploit, flaw, framework, infrastructure, injection, intelligence, kev, open-source, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. This vulnerability, tracked as CVE-2025-62593, is a code injection flaw in the Ray Project, a widely used open-source distributed computing framework often deployed for artificial intelligence workloads, machine learning development, data processing, and scalable Python…
Securing Model Context Protocol (MCP) tool integrations

Aug 18, 2026 12:55 PM

Tags: business, control, data, leak, tool

Model Context Protocol, or MCP, is becoming a practical way to connect large language models to internal tools, data sources, and workflows. For security teams, that changes the control problem. A chat-only assistant can still leak information or be manipulated, but an MCP-enabled assistant can also trigger actions in business systems, query sensitive data, and……
Securing Model Context Protocol (MCP) tool integrations

Aug 18, 2026 12:55 PM

Tags: business, control, data, leak, tool

Model Context Protocol, or MCP, is becoming a practical way to connect large language models to internal tools, data sources, and workflows. For security teams, that changes the control problem. A chat-only assistant can still leak information or be manipulated, but an MCP-enabled assistant can also trigger actions in business systems, query sensitive data, and……
Kimsuky Uses Local AI Development Environment to Expand Cyber Espionage Tooling in Operation GitPower

Aug 18, 2026 12:55 PM

Tags: ai, cyber, data, espionage, intelligence, malware, north-korea, phishing, social-engineering, threat

North Korean state-backed threat actor Kimsuky is extending its established espionage playbook with locally hosted artificial intelligence tooling, according to new research into an activity cluster tracked as Operation GitPower. The campaign retains familiar phishing-led intrusion chains but shows the operators preparing AI-assisted capabilities for malware development, data analysis, social engineering, and operational automation. The…
SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

Aug 18, 2026 11:55 AM

Tags: data, data-breach, email, flaw, Hardware, phone

SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers.The hardware wallet maker said all affected customers were notified individually by email on August 16 from security@safepal.com, with the subject line “[Important] Your SafePal Order First seen on…
From Demo to Production: Scaling Continuous Control Monitoring with ServiceNow and Atlassian

Aug 18, 2026 10:56 AM

Tags: control, data, grc, infrastructure, jobs, monitoring, software

Enterprises answered the question: is my software actually working? about a decade ago. Not by hiring more people to read logs but by instrumenting the data plane once and letting anyone query it. Observability became infrastructure, and the people who used to read logs went and solved harder problems. GRC has never had that moment….The…
UK Legal Regulator Raises AI Misuse Concerns

Aug 18, 2026 10:56 AM

Tags: ai, data, leak, regulation

Solicitors Regulation Authority sounds the alarm over AI hallucinations and data leaks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/uk-legal-regulator-raises-ai/
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
TDL 028 – When Privacy Creates Blind Spots – Andrew Campling

Aug 18, 2026 9:55 AM

Tags: ai, attack, ciso, communications, compliance, control, corporate, cybersecurity, data, defense, dns, encryption, exploit, finance, fraud, government, group, Internet, malicious, monitoring, network, phone, privacy, risk, router, scam, service, software, strategy, technology, theft, threat, tool, training, unauthorized, vulnerability, zero-day, zero-trust

The Blind Spot of Absolute Privacy: Why Defenders Need a Seat at the Standards Table When standard-setters build tighter internet encryption, who pays the price? In this episode of The Defender’s Log, host David Redekop sat down with Andrew Campling”, Director of 419 Consulting, IETF contributor, and trustee at the Internet Watch Foundation”, to unpack…
Google’s open-source HEIR lets AI work with data it can’t see

Aug 18, 2026 8:55 AM

Tags: ai, data, encryption, google, open-source

Google’s researchers and engineers developed the Homomorphic Encryption Intermediate Representation (HEIR) compiler project, an open-source compiler toolchain and development … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/18/google-heir-open-source-compiler-toolchain/
A hollowed out data layer is making CISOs fly blind into AI attacks

Aug 18, 2026 7:55 AM

Tags: ai, attack, ciso, data, defense, offense, soc

The security industry is currently transitioning to an era where both offense and defense are AI-led, and every SOC operates at machine speed. However, what most CISOs have … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/18/siem-data-blind-spots-mapping/
PokÃ©mon Center Data Breach Exposes Customers’ Personal and Order Data

Aug 18, 2026 7:55 AM

Tags: breach, cyber, cyberattack, data, data-breach, germany

PokÃ©mon Center has begun notifying customers in the United Kingdom and Germany that personal information from their online orders was exposed following a cyberattack on CEVA Logistics, its third-party fulfillment partner. The retailer clarified that the incident did not originate from PokÃ©mon Center’s own systems or website. Instead, attackers compromised the systems CEVA uses to…
SafePal warns of data breach affecting nearly 40,000 customers

Aug 18, 2026 5:55 AM

Tags: breach, data, data-breach

First seen on scworld.com Jump to article: www.scworld.com/brief/safepal-warns-of-data-breach-affecting-nearly-40000-customers
Why regulated industries can’t afford to skip data privacy for their AI projects

Aug 18, 2026 5:55 AM

Tags: ai, data, privacy

First seen on scworld.com Jump to article: www.scworld.com/perspective/why-regulated-industries-cant-afford-to-skip-data-privacy-for-their-ai-projects
US FCC Weighs Chinese Transceiver Supply-Chain Crackdown

Aug 18, 2026 1:55 AM

Tags: ai, china, data, supply-chain

Draft Covered List Expansion Would Reach Components Inside AI Data Center Switches. The U.S. FCC reportedly may restrict imports of new-model optical transceivers made in China, a move that would reach AI data center interconnects for the first time and leaves open how regulators would define origin, what counts as a new model and whether…
Clop Claims Data Theft From More Than 40 Companies

Aug 18, 2026 1:55 AM

Tags: backup, breach, corporate, data, exploit, flaw, remote-code-execution, russia, theft

Victims Are Assessing Claims of Stolen Databases, CAD Files and Backups. Russia-linked Clop claims it stole databases, engineering files, backups and other sensitive corporate data from more than 40 organizations in a breach wave tied to exploitation of a critical remote code execution flaw in PTC Windchill and FlexPLM. First seen on govinfosecurity.com Jump to…
Hack on Med Software Firm Hits Half of Poland’s Population

Aug 18, 2026 12:55 AM

Tags: country, data, government, healthcare, software, theft

19M Patients Affected by Data Theft Including National ID Numbers. A hack into IT systems of MyDr, a Polish provider of electronic medical documentation software, has affected more than 12,000 healthcare facilities and nearly 19 million individuals in Poland, about half the country’s population. Government officials have launched an investigation. First seen on govinfosecurity.com Jump…