Tag: data
-
River Bank obtained assurances from the attackers that the stolen data in the June attack was deleted
River Bank says hackers deleted data stolen in its June ransomware attack, though the investigation into the incident is still ongoing. River Financial Corporation, the parent company of River Bank & Trust, says hackers deleted data stolen during a ransomware attack that hit parts of its server environment in June. The breach began on June…
-
ExfilSquad hackers leak info of over 100,000 UK police officers, staff
A cyberattack on the U.K.’s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/exfilsquad-hackers-leak-info-of-over-100-000-uk-police-officers-staff/
-
AI Agent Guardrails: How to Set Boundaries Before You Give an LLM Access to Your Systems
AI agents are crossing a line that traditional chatbots never crossed. A chatbot produces text. An AI agent can retrieve customer records, query financial data,…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/08/ai-agent-guardrails-how-to-set-boundaries-before-you-give-an-llm-access-to-your-systems/
-
Huntress Makes RMM-Blocking Feature Free for All Customers as Attacks Surge 277%
Cybersecurity vendor Huntress has opened up a new application control capability to its entire customer base for free, as new data shows attacks abusing remote monitoring and management (RMM) tools rose sharply over the past year. The feature, called RMM Guard, is part of a broader product Huntress is building called Managed Endpoint Security Posture…
-
PNLD Confirms Data Breach Affecting UK Police and Justice Staff
UK police legal database breach exposed officers’ names and work emails, increasing phishing risks. NCA is investigating. The Police National Legal Database (PNLD), the legal reference system used by all 43 Home Office police forces in England and Wales, confirmed that a data breach exposed the contact details of police officers, staff, and criminal justice…
-
Hims Hers Shares Sensitive Data with Third Parties and the FTC Doesn’t Like It
The FTC accuses Hims Hers of sharing sensitive health data and using deceptive subscription practices, highlighting wider privacy and cybersecurity risks in telehealth. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/hims-hers-shares-sensitive-data-with-third-parties-and-the-ftc-doesnt-like-it/
-
Biotech giant Amgen says patient data stolen from third-party cloud systems
The biotech giant Amgen informed regulators that patient information and proprietary company data were accessed through a breach of third-party cloud systems. First seen on therecord.media Jump to article: therecord.media/amgen-hackers-cyberattack-sec
-
Veeam stellt mit ‘Data Cloud Vault Archive” eine neue Cloud-Ebene für die langfristige Archivierung von ‘Cold Data” vor
Veeam hat die allgemeine Verfügbarkeit von Veeam-Data-Cloud-Vault-Archive bekannt gegeben. Dabei handelt es sich um eine neue Cloud-Ebene der Archivklasse innerhalb der Veeam-Data-Cloud-Vault-Familie. Sie wurde für eine sichere, konforme und langfristige Aufbewahrung von Backups zu den Preiskonditionen der Archivklasse entwickelt. Die neue Lösung hilft Unternehmen, ältere, selten genutzte Backup-Daten aus teuren Speichersystemen auszulagern und sie gleichzeitig…
-
30 days with Claude Mythos Preview: How Tenable adapted our security program, and why yours is next
Tags: ai, api, attack, business, control, cybersecurity, data, data-breach, endpoint, exploit, flaw, injection, LLM, remote-code-execution, risk, service, threat, tool, update, vulnerabilityTenable spent 30 days running frontier AI models against our own code. It didn’t just find bugs, it proved they’re real, with reproducible exploits. That fundamentally changes code security from ranking potential code defects to a much higher signal focused on the findings that matter. Read on to learn how it reshaped our security team’s…
-
PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.The data included names, organisations and work email addresses belonging to police officers, police staff, criminal justice professionals, government partners and customers.The incident, identified on July 26, also exposed some names First seen…
-
Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys
Alleged Å»abka data leak offered for Euro5,000 includes Jira data, GitLab repos, and secrets; researchers verified much of the sample. A brand-new forum account showed up on August 2, posted once, and asked five grand for what it claims is a full data dump from Å»abka Polska. Å»abka Polska is Poland’s largest convenience store operator…
-
Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them.The vendor’s July 31 security bulletin says nearly undetectable changes to .fsa and .hid outputs could occur if laboratory controls are circumvented.Thermo Fisher tracks the issue as CVE-2026-17583 and…
-
CareCloud Breach Exposes Medical and Financial Data of 345,000
CareCloud disclosed a breach affecting 345,000 people after hackers stole medical and financial data from its AWS-hosted systems. TechCrunch reports that CareCloud, the New Jersey-based health tech company that stores patient records for more than 45,000 providers across the US, is finally notifying people impacted by a breach the firm first disclosed back in March.…
-
UK’s state investments agency hit by data breach
Security lapse leaves sensitive information and contact details of 51 government officials exposed for 40 hoursThe public body in charge of the UK’s state investments has been pushed to improve its internal security after a data breach left “high-level management information” publicly accessible for nearly two days.UK Government Investments (UKGI), the agency that manages the…
-
KT Corporation fined $39 million for 11-month data breach
First seen on scworld.com Jump to article: www.scworld.com/brief/kt-corporation-fined-39-million-for-11-month-data-breach
-
YAML’d
H/T to Trey Blalock from Verification Labs :: Penetration Testing Specialists – Trey Blalock GCTI, GWAPT, GCFA, GPEN, GPCS, GCPN, CRISC, CISA, CISM, CISSP, SSCP, CDPSE. This comic is a meme template based on a “Fortune Teller” comic created by Jon Sullivan per that fount of knowledge, Google. First seen on securityboulevard.com Jump to article:…
-
Public Water Systems Are Targeted by State Actors: How to Protect PLCs and HMIs in the Operational Technology Network
We hate to say I told you so, but in our recent blog post OT Cyber Resilience and Microsegmentation for AI Attacks, we discussed how hackers are increasingly targeting operational technology networks. And they’re doing so with good reason, tactically speaking; hacking OT doesn’t just compromise customer data or encrypt business systems for a ransom……
-
To Ban or Not Ban Chinese Open-Weight AI Models
Tags: ai, backdoor, china, control, cybersecurity, data, defense, finance, government, infrastructure, international, malicious, microsoft, military, network, nvidia, open-source, openai, regulation, risk, software, supply-chain, technology, usaShould the US ban American companies from using Chinese open-weight AI models? That is the ugly question. US officials have openly expressed concerns and a desire to implement regulations. The technology community has aggressively responded, with over 20 leading AI companies, including Microsoft, Nvidia, Meta, and Dell, urging legislators not to rush imposing restrictions on…
-
CRPx0 Ransomware Claims Hyundai Turkey Breach, Steals 1.5GB of Assessment Data
The double-extortion ransomware group CRPx0 has listed Hyundai’s Turkish operations on its dark web leak site, claiming to have exfiltrated 1.5 GB of sensitive personnel and recruitment data from the automaker’s assessment systems. According to CyberWatch, first flagged on its data-leak portal, the target is described as a >>Korean automotive manufacturer (Turkish operations)<< with the…
-
Zukunftssichere Verschlüsselung mit Quantum-resistentem Confidential Computing
Management Summary Post-Quantum-Sicherheit wird zur strategischen Pflichtaufgabe: enclaive adressiert mit krypto-agilem Confidential Computing die wachsende Gefahr durch Quantencomputer und »Harvest now, decrypt later«-Szenarien. Verschlüsselung muss auch während der Verarbeitung greifen: Confidential Computing schließt die Lücke bei Data in Use und schützt Anwendungen, Datenbanken und KI-Workloads selbst dann, wenn sie in Cloud-Infrastrukturen betrieben werden. Krypto-Agilität entscheidet……
-
Amgen says cloud data breach exposed patient health, proprietary info
Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/amgen-says-cloud-data-breach-exposed-patient-health-proprietary-info/
-
DentaQuest Data Theft Hack Affects 15M Patients
Number of Victims Is 5 Times Higher Than Claims by ShinyHunters Ransomware Gang. Dental and vision benefits administrator DentaQuest is notifying 15 million patients that their information was compromised in a May hack. The reported victim total is significantly higher than the number claimed by extortion gang ShinyHunters, which took credit for the data theft…
-
FTC Sues Hims Hers Over Alleged Privacy Violations, Subscription Practices
The FTC has sued Hims Hers over allegations it shared sensitive health data with advertisers and used deceptive subscription practices. Here’s what users should know. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cybersecurity/news-ftc-hims-hers-health-data-privacy-lawsuit/
-
AI-Enabled Data Breaches Cost Organizations $6 Million on Average
IBM found AI-enabled breaches cost organizations $6 million on average, exposing gaps in vulnerability management, access controls, and AI governance. The post IBM: AI-Enabled Data Breaches Cost Organizations $6 Million on Average appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ibm-ai-enabled-data-breach-costs/
-
ShinyHunters Claims Brinks Home Salesforce Data Theft
ShinyHunters claims it breached Brinks Home through a Microsoft Entra vishing attack. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/shinyhunters-claims-brinks-home-salesforce-data-theft/
-
How Status Labs Helps Brands Get Cited in ChatGPT: The Data Behind AI Search Visibility
Disclosure: This article was created in collaboration with Status Labs. First seen on hackread.com Jump to article: hackread.com/status-labs-brands-cited-chatgpt-data-ai-search-visibility/
-
Anthropic AI Models Hacked 3 Real Companies
Setup Error Let Models Steal Data and Release Malware Online. Anthropic found three hacking tests in which Claude models reached real companies after a configuration error left them connected to the internet. One accessed customer data, another released malware that ran on 15 computers and a third scanned 9,000 systems. First seen on govinfosecurity.com Jump…
-
The Cyber Express Weekly Roundup: AI Fraud, Data Leaks, Malware Campaigns, and Critical Infrastructure Threats
Tags: ai, cyber, cyberattack, data, exploit, finance, fraud, government, infrastructure, intelligence, leak, malicious, malware, software, threatThis weekly roundup highlights the growing complexity of digital threats affecting governments, businesses, developers, and consumers. From artificial intelligence being misused for financial fraud to large-scale customer data exposures, malicious software targeting developer ecosystems, and cyberattacks against critical infrastructure, recent incidents demonstrate how attackers are exploiting both emerging technologies and existing security weaknesses. First seen…