Tag: data
-
BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan
At least two different cybercrime groups BianLian and RansomExx are said to have exploited a recently disclosed security flaw in SAP NetWeaver, indicating that multiple threat actors are taking advantage of the bug.Cybersecurity firm ReliaQuest, in a new update published today, said it uncovered evidence suggesting involvement from the BianLian data extortion crew and the…
-
CFPB Quietly Kills Rule to Shield Americans From Data Brokers
Russell Vought, acting director of the Consumer Financial Protection Bureau, has canceled plans to more tightly regulate the sale of Americans’ sensitive personal data. First seen on wired.com Jump to article: www.wired.com/story/cfpb-quietly-kills-rule-to-shield-americans-from-data-brokers/
-
Australian Human Rights Commission leaks docs to search engines
The Australian Human Rights Commission (AHRC) disclosed a data breach incident where private documents leaked online and were indexed by major search engines. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/australian-human-rights-commission-leaks-docs-to-search-engines/
-
Xinbi Telegram Market Tied to $8.4B in Crypto Crime, Romance Scams, North Korea Laundering
Tags: blockchain, china, crime, crypto, data, data-breach, korea, marketplace, north-korea, scam, technologyA Chinese-language, Telegram-based marketplace called Xinbi Guarantee has facilitated no less than $8.4 billion in transactions since 2022, making it the second major black market to be exposed after HuiOne Guarantee.According to a report published by blockchain analytics firm Elliptic, merchants on the marketplace have been found to peddle technology, personal data, and money laundering…
-
Meta’s still violating GDPR rules with latest plan to train AI on EU user data, says noyb
‘Legitimate interest’ won’t wash, says privacy outfit, as Zuck’s org claims activists want to ‘delay AI innovation’ First seen on theregister.com Jump to article: www.theregister.com/2025/05/14/metas_still_violating_gdpr_rules/
-
Marks & Spencer Confirms Customer Data Stolen in Cyberattack
The British retailer said no account passwords were compromised in last month’s cyberattack, but the company will require customers to reset passwords for extra peace of mind. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/marks-spencer-confirms-customer-data-stolen
-
Cyberattacks on Long Island Schools Highlight Growing Threat
In a concerning development, over 20 school districts across Long Island have fallen victim to cyberattacks, compromising the personal data of more than 10,000 students. According to state education records, 28 incidents were reported in 2024 alone, affecting districts such as Great Neck, Smithtown, Brentwood, and Hewlett-Woodmere. New York Post+1New York Post+1 The Nature of…
-
Retail in the Crosshairs: The MS Data Breach and the Rising Cost of Customer Trust
Retail giant Marks & Spencer (M&S) has confirmed that customer information was compromised in a recent cyberattack involving one of its third-party service providers. According to Reuters, the breach did not impact M&S’s internal systems but still resulted in the exposure of sensitive customer data. The incident is the latest in a series of supply…
-
“Dance of the Hillary” and the Expanding Use of Malware in Regional Cyber Conflict
A recent advisory from the Punjab Police’s cybercrime wing warns of a new wave of malware attacks potentially originating from Pakistan, with a tool known as “Dance of the Hillary” at the center of the campaign. Targeting users through phishing links and malicious attachments, this strain of malware is designed to steal sensitive data and…
-
UK government outlines plan to surveil migrants with eVisa data
Electronic visa data and biometric technologies will be used by the UK’s immigration enforcement authorities to surveil migrants living in the country and to ‘tighten control of the border’, attracting strong criticism from migrant support groups First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366623863/UK-government-outlines-plan-to-surveil-migrants-with-eVisa-data
-
Threat Actors Leverage Weaponized HTML Files to Deliver Horabot Malware
A recent discovery by FortiGuard Labs has unveiled a cunning phishing campaign orchestrated by threat actors deploying Horabot malware, predominantly targeting Spanish-speaking users in Latin America. This high-severity threat, detailed in the 2025 Global Threat Landscape Report, exploits malicious HTML files embedded in phishing emails to steal sensitive information, including email credentials and banking data,…
-
Fashion giant Dior discloses cyberattack, warns of data breach
House of Dior, the French luxury fashion brand commonly referred to as Dior, has disclosed a cybersecurity incident that has exposed customer information. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fashion-giant-dior-discloses-cyberattack-warns-of-data-breach/
-
Katz Stealer Malware Hits 78+ Chromium and Gecko-Based Browsers
Newly disclosed information-stealing malware dubbed Katz Stealer has emerged as a significant threat to users of Chromium and Gecko-based browsers, with capabilities to extract sensitive data from over 78 browser variants. Developed in C and Assembly (ASM) for lightweight efficiency, the malware targets credentials, cookies (including version 20+), autofill data, CVV2 codes, OAuth tokens, cryptocurrency…
-
Nation-State Actors Target Healthcare Institutions to Sabotage IT and OT Systems
The nation-state actors have increasingly set their sights on healthcare institutions worldwide, launching sophisticated cyberattacks aimed at disrupting both Information Technology (IT) and Operational Technology (OT) systems. These attacks, often orchestrated by state-sponsored groups with significant resources, pose a severe threat to patient safety, data integrity, and the operational continuity of critical healthcare services. Cybersecurity…
-
Strengthening Cloud Security: API Posture Governance, Threat Detection, and Attack Chain Visibility with Salt Security and Wiz
Tags: api, attack, authentication, best-practice, cloud, compliance, data, detection, exploit, google, governance, incident response, malicious, risk, risk-assessment, threat, tool, vulnerabilityIntroduction In the current cloud-centric environment, strong API security is essential. Google’s acquisition of Wiz underscores the urgent necessity for all-encompassing cloud security solutions. Organizations should focus on both governing API posture, ensuring secure configuration and deployment to reduce vulnerabilities and assure compliance, and on effective threat detection and response. Salt Security’s API Protection Platform…
-
ENISA Launches European Vulnerability Database to Bolster EU Cyber Resilience
The European Union Agency for Cybersecurity (ENISA) has unveiled the European Vulnerability Database (EUVD), a strategic move designed to enhance digital security across the bloc and reduce reliance on U.S.-centric cybersecurity infrastructure. The EUVD, now live for consultation, aggregates vulnerability data from a wide range of sources, including national Computer Security Incident Response Teams (CSIRTs),…
-
Learning How to Hack: Why Offensive Security Training Benefits Your Entire Security Team
Tags: access, attack, breach, cloud, cyberattack, data, data-breach, exploit, infrastructure, training, vulnerabilityOrganizations across industries are experiencing significant escalations in cyberattacks, particularly targeting critical infrastructure providers and cloud-based enterprises. Verizon’s recently released 2025 Data Breach Investigations Report found an 18% YoY increase in confirmed breaches, with the exploitation of vulnerabilities as an initial access step growing by 34%. As attacks rise First seen on thehackernews.com Jump to…
-
New ‘Chihuahua’ Infostealer Targets Browser Data and Crypto Wallet Extensions
While appearing unsophisticated on the surface, Chihuahua Stealer uses advanced methods First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chihuahua-stealer-browser-crypto/
-
New Microsoft Scripting Engine Vulnerability Exposes Systems to Remote Code Attacks
Critical zero-day vulnerability in Microsoft’s Scripting Engine (CVE-2025-30397) has been confirmed to enable remote code execution (RCE) attacks over networks, raising urgent concerns for enterprises and individual users alike. The flaw, classified as a type confusion weakness (CWE-843), allows attackers to bypass security mechanisms by manipulating how the engine processes data types in memory. Microsoft…
-
Feel Supported by Advanced IAM Strategies
Are You Maximizing the Potential of Your IAM Strategies? Effective data management requires a nuanced understanding of advanced Identity and Access Management (IAM) strategies. Where cyber threats are evolving at a rapid pace, an organization’s cybersecurity fortification needs to keep pace. When a crucial component of successful cybersecurity, IAM strategies are essential for controlling who……
-
12 AI terms you (and your flirty chatbot) should know by now
1. Artificial general intelligence (AGI) The ultimate manifestation of AI has already played a featured role in dozens of apocalyptic movies. AGI is the point at which machines become capable of original thought and either a) save us from our worst impulses or b) decide they’ve had enough of us puny humans. While some AI…
-
4 critical leadership priorities for CISOs in the AI era
1. Guide the C-suite As businesses rush to implement AI effectively, CISOs can play an important role in guiding the C-suite on a variety of matters, starting with vetting AI use cases, Alexander says. “These are conversations with technologists, security, and the business. You can’t just jump into the AI game without really understanding what…
-
Cyberhaven Taps Product Chief Nishant Doshi as Interim CEO
CEO Howard Ting’s Resignation Comes as Data Protection Company Hits $1B Valuation. Cyberhaven appointed product chief Nishant Doshi as interim CEO as longtime leader Howard Ting transitions to the board. With a sevenfold valuation increase and deep investment in Gen AI security and DSPM, the company is preparing to unify data controls across enterprises. First…
-
Noodlophile Malware Distributed Through Bogus AI Video Generators: Who Are the Targets?
By downloading what they believe is an AI-generated video, victims have installed malware that can steal their data or offer attackers remote access to infected devices. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-noodlophile-malware-ai-videos/
-
Intel’s data-leaking Spectre defenses scared off yet again
ETH Zurich boffins exploit branch prediction race condition to steal info from memory, fixes have mild perf hit First seen on theregister.com Jump to article: www.theregister.com/2025/05/13/intel_spectre_race_condition/
-
M&S forces customer password resets after data breach
M&S is instructing all its customers to change their account passwords after a significant amount of data was stolen in a DragonForce ransomware attack. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366623565/MS-forces-customer-password-resets-after-data-breach
-
Entro and Wiz Partner to Strengthen Non-Human Identity Security with Cloud Data Risk Context
First seen on scworld.com Jump to article: www.scworld.com/news/entro-and-wiz-partner-to-strengthen-non-human-identity-security-with-cloud-data-risk-context
-
Data compromise disclosed by GlobalX
Tags: dataFirst seen on scworld.com Jump to article: www.scworld.com/brief/data-compromise-disclosed-by-globalx