Tag: data
-
SolyxImmortal Malware Steals Passwords, Cookies, Files, and Keystrokes
A newly analyzed Python-based information stealer named SolyxImmortal is actively targeting sensitive user data, including browser credentials, cookies, documents, screenshots, and keystrokes. The malware uses common Python libraries and multi-threading techniques to run multiple surveillance and data theft operations simultaneously, making it efficient and difficult to detect during execution. Security researchers, including Cyfirma, report that…
-
Spain arrests doxer leaking sensitive data of govt employees
The Spanish National Police has arrested an individual for leaking sensitive information related to members of various key state organizations, including the National Cybersecurity Institute (INCIBE). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/spain-arrests-doxer-leaking-sensitive-data-of-govt-employees/
-
Why Most Enterprise AI Failures Aren’t Technical
OpenText CIO Shannon Bell on Governance and Operational Maturity. Enterprise AI often fails not because the models are weak, but because organizations lack operational maturity. OpenText’s Shannon Bell explains why governance, data context and accountability determine whether agentic AI succeeds in production. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/most-enterprise-ai-failures-arent-technical-a-31822
-
Grand Theft Auto V cheat service gets hacked, exposing thousands of gamers
Hackers stole usernames, hashed passwords, and other data from a service that allowed players to cheat in Grand Theft Auto V. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/01/grand-theft-auto-v-cheat-service-gets-hacked-exposing-thousands-of-gamers/
-
Ransomware Operators Keep Business Hours. The Data Proves It
16,699 ransomware leak posts over 2 years show 84% drop MondayFriday, peak at European afternoon hours. October spikes yearly. Someone analyzed 16,699 ransomware leak-site posts across 200 groups over two years and asked the question most threat intelligence reports dance around: when does this actually happen? The answer is mundane and useful. Ransomware runs on…
-
FSB Group Gamaredon Hides Worm in Windows Data Streams
FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/
-
Top 4 data security best practices for the AI-enabled enterprise
To maximize AI’s value without increasing security risk, organizations must enforce best”‘practice data protections across their environment. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/spons/top-4-data-security-best-practices-for-the-ai-enabled-enterprise/820564/
-
The Pentagon Finally Admits That Location Data Is a Battlefield Problem
The Pentagon confirmed adversaries are using commercial location data to track U.S. troops, exposing risks tied to smartphones and ad-tech networks. For years, security researchers, privacy advocates, and intelligence analysts have been warning about the same thing: smartphone location data isn’t just an advertising product. It’s surveillance infrastructure that anyone with enough money can access.…
-
Data discovery gaps that catch enterprises off guard
In this interview with Help Net Security, Avani Desai, CEO at Schellman, talks about the gap between what organizations think they know about their data and what discovery … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/01/avani-desai-schellman-data-discovery-gaps/
-
Hackers Target Signal Users to Steal Backups in New Attack Wave
Hackers are abusing Signal’s in”‘app messaging to trick users into giving up their backup recovery keys, allowing attackers to unlock years of supposedly private conversations in a new phishing wave. The campaign uses messages that appear to come from “Signal Support” and warn of imminent data loss. However, they are fraudulent and designed to steal…
-
Security Affairs newsletter Round 579 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. ShinyHunters Leaks Charter Communications Data, Potentially Impacting 5 Million Customers Signal Phishing Campaign Targets Journalists and…
-
ShinyHunters Leaks Charter Communications Data, Potentially Impacting 5 Million Customers
Cybercrime group ShinyHunters leaked data allegedly stolen from Charter Communications, exposing millions of customer records after a failed extortion attempt. The ShinyHunters extortion group has published data allegedly stolen from Charter Communications after the company apparently refused to pay a ransom. Charter Communications is one of the largest telecommunications companies in the United States. It…
-
Cybercrime Crew Claims It Hacked Mike Lindell’s MyPillow
Plus: A ransomware group is now stealing data in person, BusPatrol wants to hand its license plate surveillance data to the cops, and more. First seen on wired.com Jump to article: www.wired.com/story/security-news-this-week-cybercrime-crew-claims-it-hacked-mike-lindells-mypillow/
-
Oncology Firm Says Vendor Hack Compromised Patient Data
Breach Is Among Several Recent Major Incidents Involving Billing Software Providers. A publicly traded cancer treatment firm notified investors that a yet-undisclosed number of patients’ information was compromised in a 2025 cybersecurity incident involving a third-party billing software vendor. The Oncology Institute provides cancer treatment care to nearly 2 million patients. First seen on govinfosecurity.com…
-
LA Metro Hack Was Part of an Iranian Campaign
Ababil of Minab Claimed Hacktivism, But Research Points to Iran. Researchers say Iran-linked operators behind Ababil of Minab, not independent hacktivists, disrupted L.A. Metro in March by stealing data, deleting systems and targeting backups, signaling a shift toward destructive attacks on recovery infrastructure. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/la-metro-hack-was-part-iranian-campaign-a-31781
-
How Lineage Reveals Your Data’s Secrets
Tags: dataData lineage helps security teams track sensitive data movement across users, systems, and applications. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/how-lineage-reveals-your-datas-secrets/
-
Charter confirms data breach after ShinyHunters extortion threat
U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/charter-confirms-data-breach-after-shinyhunters-extortion-threat/
-
Veeam präsentiert neues ‘Data and AI Trust Maturity Model” zur Bewertung von KI-Reife und Governance
Das Thema dürfte angesichts wachsender regulatorischer Anforderungen rund um vertrauenswürdige KI und AI Governance weiter an Bedeutung gewinnen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/veeam-praesentiert-neues-data-and-ai-trust-maturity-model-zur-bewertung-von-ki-reife-und-governance/a45300/
-
Iranian hackers blamed for breach of Los Angeles transit system that took weeks to recover
An Israeli cybersecurity firm said Iran’s government is behind Ababil of Minab, a fake hacktivist persona that has claimed a series of data breaches after the start of the war in Iran. First seen on techcrunch.com Jump to article: techcrunch.com/2026/05/26/iranian-hackers-blamed-for-breach-of-los-angeles-transit-system-that-took-weeks-to-recover/
-
Prüfung des KI-Reifegrads in Unternehmen
Veeam Software, das Unternehmen für Data- und AI-Trust, hat die Einführung seines ‘Data and AI Trust Maturity Model” bekanntgegeben. Dabei handelt es sich um ein wissenschaftlich fundiertes und von Kunden validiertes Rahmenwerk zur Prüfung des KI-Reifegrads in Unternehmen. Es hilft Unternehmen, die Effektivität ihrer KI-Steuerung und -Operationalisierung zu bewerten, zu vergleichen und zu verbessern. Denn…
-
How Varonis Atlas integrates Claude Compliance API for AI governance
AI governance requires visibility into how AI tools interact with enterprise data. Varonis explains how its Atlas platform uses Claude Compliance API data to help monitor usage, investigate risk, and support compliance. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/how-varonis-atlas-integrates-claude-compliance-api-for-ai-governance/
-
7-Eleven data breach affects over 185,000 people’s personal data
The data breach included names, dates-of-birth, postal addresses, and Social Security numbers, according to a state government listing. First seen on techcrunch.com Jump to article: techcrunch.com/2026/05/26/7-eleven-data-breach-affects-over-185000-peoples-personal-data/
-
Personal information of 185,000 people exposed after cyberattack on 7-Eleven
Data belonging to about 185,000 people was exposed following a cyberattack on convenience store chain 7-Eleven that was later claimed by the ShinyHunters extortion gang, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/26/7-eleven-data-breach-shinyhunters/
-
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
Microsoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions to be met.The vulnerability, tracked as CVE-2026-45659, carries a CVSS score of 8.8. It has been assigned an important severity.”Deserialization of untrusted data in Microsoft Office SharePoint…
-
NightSpire Ransomware Abuses RDP for Stealthy Persistence
NightSpire has quickly emerged as a significant ransomware threat since its discovery in early 2025, combining classic double-extortion tactics with stealthy intrusion techniques. The malware not only encrypts victim data but also exfiltrates sensitive files, threatening to publish them on a Tor-based leak site if ransom demands are not met. In just a three-month window…
-
US Law Enforcement Warns of ‘Anti-Tech Extremism’ as AI Hatred Grows
As Americans stew over the looming risk of job-stealing AI and data centers in their back yards, the feds are raising the alarm about a new category of threat, documents obtained by WIRED show. First seen on wired.com Jump to article: www.wired.com/story/us-law-enforcement-warns-of-anti-tech-extremism/
-
7-Eleven data breach exposes personal information of 185,000 people
The ShinyHunters extortion gang stole the personal information of over 183,000 people after hacking the systems of convenience store chain giant 7-Eleven in April, according to data breach notification service Have I Been Pwned. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/7-eleven-data-breach-exposes-personal-information-of-185-000-people/
-
Phishing Campaigns Exploit RCS and iMessage to Evade SMS Security Filters
Phishing campaigns are entering a new phase as attackers abandon traditional SMS delivery and static credential theft in favor of encrypted messaging channels and real-time account takeover techniques. Unlike conventional SMS phishing, RCS and iMessage operate over data networks with end-to-end encryption, limiting carriers’ ability to inspect or block malicious content. Threat actors are exploiting…
-
Multiple 7-Zip Vulnerabilities Enable Arbitrary Code Execution
Multiple memory safety bugs in 7″‘Zip 26.00 allow remote attackers to leak sensitive data and, in at least one case, execute arbitrary code when a victim opens a crafted archive file. GitHub Security Lab has disclosed a critical heap buffer overflow in 7″‘Zip’s NTFS handler (GHSL”‘2026″‘140, CVE”‘2026″‘48095), alongside a cluster of additional memory access violations…