Tag: data
-
Scaling the SOC Is a Data Problem: What MSSPs Need to Get Right
First seen on scworld.com Jump to article: www.scworld.com/perspective/scaling-the-soc-is-a-data-problem-what-mssps-need-to-get-right
-
Senator urges classified briefing after CISA data leak on GitHub
First seen on scworld.com Jump to article: www.scworld.com/news/senator-urges-classified-briefing-after-cisa-data-leak-on-github
-
Data Sanitization Challenges Are Increasing in the AI Era
A new Blancco report shows AI and poor sanitization practices are increasing data security risks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/data-sanitization-challenges-are-increasing-in-the-ai-era/
-
Data Sanitization Challenges Are Increasing in the AI Era
A new Blancco report shows AI and poor sanitization practices are increasing data security risks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/data-sanitization-challenges-are-increasing-in-the-ai-era/
-
Trump Mobile phone provider reportedly leaking customer data
First seen on scworld.com Jump to article: www.scworld.com/brief/trump-mobile-phone-provider-leaking-customer-data
-
Confluent Targets Real-Time AI Data Gaps
First seen on scworld.com Jump to article: www.scworld.com/brief/confluent-targets-real-time-ai-data-gaps
-
Cato Adds Data Context to XOps
Tags: dataFirst seen on scworld.com Jump to article: www.scworld.com/brief/cato-adds-data-context-to-xops
-
First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups
Authorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by criminal actors to obscure the origins of ransomware attacks, data theft, scanning, and denial-of-service attacks.The disruption of First VPN Service was led by France and the Netherlands, with several other nations supporting the investigation since…
-
Trump Mobile confirms it exposed customers’ personal data, including phone numbers and home addresses
President Trump’s branded cell phone maker and cell provider said the exposure was linked to a third-party platform, and was evaluating whether it needs to notify customers. First seen on techcrunch.com Jump to article: techcrunch.com/2026/05/22/trump-mobile-confirms-it-exposed-customers-personal-data-including-phone-numbers-and-home-addresses/
-
Hackers steal patient and billing data from German hospitals via third-party provider
The large-scale data breach reportedly hit Unimed, a company that handles billing services for privately insured and self-paying patients on behalf of numerous German hospitals. First seen on therecord.media Jump to article: therecord.media/hackers-steal-patient-billing-data-german-hospitals
-
Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning
The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/
-
Splunk Patches Multiple Vulnerabilities Enabling DoS Attacks and Data Exposure
Splunk has released security updates to fix three newly disclosed vulnerabilities that could allow low-privileged users to access sensitive data or disrupt Splunk Enterprise deployments through denial-of-service (DoS) conditions. The patches address issues in both Splunk Enterprise and the Splunk Cloud Platform, as well as the Splunk AI Toolkit app. The flaws include improper access…
-
Processes & Culture Top Reasons Behind Data Breaches
Government leaders revealed that, in spite of state laws meant to improve cyber hygiene, an analysis of incidents showed issues persist and visibility falls short. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/processes-and-culture-top-reasons-behind-data-breaches
-
Hackers Abuse Hugging Face to Deliver npm Malware
A newly uncovered supply chain attack targeting the npm ecosystem has been linked to North Korean (DPRK)-aligned threat actors. The campaign centers around a malicious npm package named terminal-logger-utils, which embeds a sophisticated multi-stage malware capable of keylogging, data exfiltration, and remote system control. The package was distributed through three dependent libraries pretty-logger-utils, ts-logger-pack, and pinno-loggers which automatically…
-
Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
Cisco has rolled out updates for a maximum-severity security flaw impacting Secure Workload that could allow an unauthenticated, remote attacker to access sensitive data.Tracked as CVE-2026-20223 (CVSS score: 10.0), the vulnerability arises from insufficient validation and authentication when accessing REST API endpoints.”An attacker could exploit this vulnerability if they are able to send First seen…
-
Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
Cisco has rolled out updates for a maximum-severity security flaw impacting Secure Workload that could allow an unauthenticated, remote attacker to access sensitive data.Tracked as CVE-2026-20223 (CVSS score: 10.0), the vulnerability arises from insufficient validation and authentication when accessing REST API endpoints.”An attacker could exploit this vulnerability if they are able to send First seen…
-
Liberty Mutual Sued Over Alleged Everest Group Data Theft
Incident Comes Months After NYS Fined Liberty Mutual $2M in Other Hacks. Insurance carrier Liberty Mutual is facing proposed class action litigation filed by policyholders who allege their sensitive information was compromised in an April data theft claimed by cybercrime gang Everest Group. The incident is the company’s latest data security related troubles. First seen…
-
Breach Roundup: Shai-Hulud Copycat Hits npm
Also, YellowKey Gets CVE, 7-Eleven Breach, Linux Maintainers Warn on AI Bug Spam. This week, more incidents that we can here list. Among them: cloned Shai-Hulud malware, a new maximum CVSS Cisco flaw. Edge to stop loading passwords in plaintext. Tycoon 2FA offers a way around Microsoft multifactor. Convenience, taquitos and data breach: The 7-Eleven…
-
Global law enforcement operation takes First VPN offline
Police seized First VPN in a global crackdown, exposed its cybercrime users, and shut down infrastructure tied to ransomware and data theft. A major international law enforcement operation has taken First VPN offline, a service that had become a quiet staple for ransomware crews, data thieves, and other cybercriminals trying to hide in plain sight. >>The coordinated…
-
Defenders fall behind, as AI rewrites the rules of a data breach
For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon Data Breach Investigations Report (DBIR). But that’s no longer the case. First seen on fortra.com Jump to article: www.fortra.com/blog/defenders-fall-behind-ai-rewrites-rules-data-breach
-
Deleted Google API Keys Remain Active up to 23 Minutes, Study Finds
Deleted Google API Keys remain active for up to 23 minutes after deletion, exposing GCP, Gemini, BigQuery, and Maps data to attackers. First seen on hackread.com Jump to article: hackread.com/deleted-google-api-keys-active-23-minutes/
-
Europol Seizes First VPN Used by Ransomware Gangs, Arrests Administrator
Europol has seized First VPN, a service used by ransomware gangs, arrested its administrator and gained access to data linked to thousands of users. First seen on hackread.com Jump to article: hackread.com/europol-seizes-first-vpn-ransomware-administrator-arrest/
-
Police seize “First VPN” service used in ransomware, data theft attacks
A virtual private network service called ‘First VPN,’ used in ransomware and data theft attacks, has been taken offline in a joint international law enforcement operation. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/police-seize-first-vpn-service-used-in-ransomware-data-theft-attacks/
-
Industry Reacts to Verizon DBIR 2026 as Vulnerability Exploitation Takes Top Spot
Tags: access, ai, attack, breach, credentials, data, data-breach, exploit, risk, threat, vulnerabilityThe 2026 Verizon Data Breach Investigations Report (DBIR) has sparked widespread industry reaction, with security leaders warning that AI-enabled attacks, vulnerability exploitation, and third-party risk are reshaping the threat landscape faster than many organisations can respond. For the first time in the report’s history, vulnerability exploitation overtook stolen credentials as the leading initial access vector,…
-
Grafana Labs Says Code Breach Stemmed from TanStack Attack
Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/grafana-labs-code-breach-tanstack/
-
Verizon Data Breach Investigations Report 2026 – Exploits lösen Zugangsdaten als Einfallstor ab
First seen on security-insider.de Jump to article: www.security-insider.de/verizon-dbir-2026-exploits-haeufigster-breach-einstieg-a-86fe2cc5cff58b28ab6ef23126ef6aa9/
-
Most dark web activity revolves around a handful of topics
Dark web activity often becomes visible during marketplace seizures, major data leaks, or sudden spikes in criminal activity. Those events can create an impression of an … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/21/dark-web-activity-research/