Collecting Cyber-News from over 60 sources

Tag: data

“Claudy Day” Flaws Allow Data Theft via Fake Claude AI Ads, Report

Mar 18, 2026 7:10 PM

Tags: ai, data, flaw, google, theft

Researchers detail “Claudy Day” flaws in Claude AI that could enable data theft using fake Google Ads, hidden… First seen on hackread.com Jump to article: hackread.com/claudy-day-flaws-data-theft-fake-claude-ai-ads/
Claudy Day Forecast: Chat Data Theft

Mar 18, 2026 7:10 PM

Tags: api, attack, data, injection, malware, theft

Researchers Detail Prompt Injection, API and Redirect Flaws. Oasis Security researchers found three bugs in Claude that attackers can chain to steal user chat data without malware or phishing. The Claudy Day attack links hidden prompt injection, Anthropic’s Files API and an open redirect. Anthropic has fixed the core flaw. First seen on govinfosecurity.com Jump…
Everyone Is Deploying AI Agents. Almost Nobody Knows What They’re Doing.

Mar 18, 2026 6:10 PM

Tags: access, ai, api, attack, ceo, ciso, credentials, data, data-breach, finance, infrastructure, Internet, LLM, risk, service, tool, vulnerability, waf

One constant I hear from CISOs I speak with is that AI agents are not coming. They are already inside organizations, reasoning through goals, selecting tools, and taking action through the same APIs that connect your most sensitive systems. And most security teams have no idea what those agents are doing. The problem Is not…
Everyone Is Deploying AI Agents. Almost Nobody Knows What They’re Doing.

Mar 18, 2026 6:10 PM

Tags: access, ai, api, attack, ceo, ciso, credentials, data, data-breach, finance, infrastructure, Internet, LLM, risk, service, tool, vulnerability, waf

One constant I hear from CISOs I speak with is that AI agents are not coming. They are already inside organizations, reasoning through goals, selecting tools, and taking action through the same APIs that connect your most sensitive systems. And most security teams have no idea what those agents are doing. The problem Is not…
Protect Your Privacy: Best Secure Messaging Apps in 2026

Mar 18, 2026 6:10 PM

Tags: data, encryption, privacy

Looking for the safest way to chat in 2026? Explore the best secure messaging apps with end-to-end encryption and zero data tracking. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/products/best-secure-messaging-apps/
‘Claudy Day’ Trio of Flaws Exposes Claude Users to Data Theft

Mar 18, 2026 6:10 PM

Tags: attack, data, flaw, google, injection, theft, vulnerability

A prompt injection vulnerability paired with other flaws can turn a Google search into a full attack chain that could threaten enterprise networks. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/claudy-day-trio-flaws-claude-users-data-theft
Interview mit Cristie Data CleanRoom Recovery

Mar 18, 2026 5:10 PM

Tags: backup, data, strategy

Was ist Cleanroom-Recovery und warum ist diese Technologie wichtig für eine sichere Backup-Strategie? Darüber sprach Netzpalaver im Remote-Interview mit Christof Gedig, Geschäftsführer bei Cristie Data. Sein zusammenfassender Spoiler: Schlussendlich ist Cleanroom-Recovery ein Sicherheitsansatz in der IT, bei dem Daten und Systeme in einer isolierten, vertrauenswürdigen Umgebung wiederhergestellt und geprüft werden, bevor sie zurück in die…
Marquis: Ransomware gang stole data of 672K people in cyberattack

Mar 18, 2026 5:10 PM

Tags: cyberattack, data, finance, ransomware, service

Marquis, a Texas-based financial services provider, revealed this week that a ransomware gang stole the data of over 670,000 individuals in an August 2025 cyberattack that also disrupted operations at 74 banks across the United States. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/marquis-ransomware-gang-stole-data-of-672-000-people-in-2025-cyberattack/
Marquis says over 672,000 people had personal and financial data stolen in ransomware attack

Mar 18, 2026 4:10 PM

Tags: attack, breach, data, finance, fintech, hacker, ransomware

Fintech company Marquis is notifying hundreds of thousands of people that hackers stole their personal and financial information, including their Social Security numbers. First seen on techcrunch.com Jump to article: techcrunch.com/2026/03/18/marquis-says-over-672000-people-had-personal-and-financial-data-stolen-in-ransomware-attack/
Russians caught stealing personal data from Ukrainians with new advanced iPhone hacking tools

Mar 18, 2026 4:10 PM

Tags: data, espionage, government, group, hacker, hacking, iphone, russia, tool, ukraine

A suspected group of Russian government hackers was caught targeting Ukrainians with new iPhone hacking tools designed for espionage and potentially to steal crypto. First seen on techcrunch.com Jump to article: techcrunch.com/2026/03/18/russians-caught-stealing-personal-data-from-ukrainians-with-new-advanced-iphone-hacking-tools/
Top 7 Full Disk Encryption Software Solutions in 2026

Mar 18, 2026 4:10 PM

Tags: data, encryption, software

Protect your data with the best disk encryption solutions in 2026. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/networks/top-full-disk-software-products/
New “Darksword” iOS exploit used in infostealer attack on iPhones

Mar 18, 2026 4:10 PM

Tags: attack, crypto, data, exploit, framework, iphone

A new exploit kit for iOS devices and delivery framework dubbed “Darksword” has been used to steal a wide range of personal information, including data from cryptocurrency wallet app. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-darksword-ios-exploit-used-in-infostealer-attack-on-iphones/
New “Darksword” iOS exploit used in infostealer attack on iPhones

Mar 18, 2026 4:10 PM

Tags: attack, crypto, data, exploit, framework, iphone

A new exploit kit for iOS devices and delivery framework dubbed “Darksword” has been used to steal a wide range of personal information, including data from cryptocurrency wallet app. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-darksword-ios-exploit-used-in-infostealer-attack-on-iphones/
Crypto Scam ShieldGuard Dismantled After Malware Discovery

Mar 18, 2026 4:10 PM

Tags: browser, chrome, crypto, data, malware, scam, tool

ShieldGuard Chrome extension posed as a crypto security tool but stole wallets and drained user data First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/crypto-scam-shieldguard-dismantled/
Apple patches WebKit bug that could let sites access your data

Mar 18, 2026 2:10 PM

Tags: access, apple, data, vulnerability

Apple has released a Background Security Improvement that silently fixes a WebKit vulnerability (CVE-2026-20643). First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/apple-patches-webkit-bug-that-could-let-sites-access-your-data/
Reco targets AI agent blind spots with new security capability

Mar 18, 2026 2:10 PM

Tags: access, ai, api, automation, compliance, data, monitoring, risk, saas, tool

Aiming where traditional SSPM falls short: Reco positions the launch as a break from traditional SSPM, arguing that those tools were never designed for autonomous systems.”SSPM sees connections. We see behavior,” Klein said. While a typical SSPM might flag a Zapier-Salesforce link as a third-party integration, “We identify that this specific Zapier workflow is an…
Claude Code Security and Magecart: Getting the Threat Model Right

Mar 18, 2026 2:10 PM

Tags: ai, data, malicious, threat

When a Magecart payload hides inside the EXIF data of a dynamically loaded third-party favicon, no repository scanner will catch it because the malicious code never actually touches your repo. As teams adopt Claude Code Security for static analysis, this is the exact technical boundary where AI code scanning stops and client-side runtime execution begins.A…
OpenAI Introduces GPT-5.4 Mini and Nano for Faster, Lightweight AI Performance

Mar 18, 2026 12:09 PM

Tags: ai, cyber, data, openai, programming

OpenAI has officially launched GPT-5.4 mini and GPT-5.4 nano, introducing high-efficiency models optimized for automated workflows, coding subagents, and latency-sensitive deployments. These models are designed to reduce application programming interface (API) overhead while maintaining complex reasoning capabilities, making them highly relevant for professionals scaling automated data extraction or telemetry analysis pipelines. Architecture and Capability Enhancements…
Cybersecurity and privacy priorities for 2026: The legal risk map

Mar 18, 2026 11:11 AM

Tags: attack, authentication, awareness, best-practice, breach, communications, country, cyber, cybersecurity, data, defense, finance, fraud, governance, government, incident, incident response, infrastructure, law, mfa, monitoring, privacy, ransomware, regulation, risk, risk-management, service, strategy, supply-chain, threat, usa

Continued federal interest in cybersecurity and privacy, especially in connection with national security concerns: The evident connection between cybersecurity and privacy and national security have led to a number of federal initiatives in recent years. Most recently in March 2026, the White House announced the current administration’s Cyber Strategy for America, renewing a commitment to…
Robotic surgery firm Intuitive reports data breach after targeted phishing attack

Mar 18, 2026 11:11 AM

Tags: attack, breach, corporate, data, data-breach, phishing

Intuitive suffered a phishing attack leading to a data breach exposing customer, employee, and corporate information. Intuitive is an American company that designs, manufactures, and sells robotic systems for minimally invasive surgery. Its most well-known products include the da Vinci Surgical System for general surgery and the Ion endoluminal system for precise procedures inside the…
CISOs rethink their data protection strategies

Mar 18, 2026 9:10 AM

Tags: access, ai, attack, automation, breach, business, cisco, ciso, cloud, compliance, computing, control, cyber, data, defense, framework, governance, healthcare, identity, jobs, LLM, privacy, resilience, risk, service, strategy, technology, tool, zero-trust

Factors driving strategy evaluations CISOs, security experts, and data practitioners cite the expanding use of AI in the enterprise as the main reason they’re rethinking their data protection strategies.”AI is exposing more sensitive information as [workers] are taking that information and typing it into LLMs,” says Errol Weiss, CSO at Health-ISAC.AI tools make it easy…
AWS Bedrock AgentCore Sandbox Bypass Enables Stealthy C2 and Data Exfiltration

Mar 18, 2026 7:10 AM

Tags: access, control, cyber, data, dns, network, threat, vulnerability

A newly disclosed vulnerability in AWS Bedrock AgentCore Code Interpreter allows threat actors to bypass network isolation and establish stealthy command-and-control (C2) channels. AWS originally advertised this mode as providing complete isolation without external access, researchers found that it permits outbound DNS queries for A and AAAA records. This structural allowance enables attackers to exfiltrate…
prompted: Key Insights from the AI Security Practitioners Conference FireTail Blog

Mar 18, 2026 5:10 AM

Tags: ai, api, application-security, attack, automation, conference, cybersecurity, data, defense, detection, exploit, google, infrastructure, injection, LLM, malicious, malware, monitoring, openai, risk, strategy, theft, threat, tool, training, update, vulnerability, zero-day

Mar 17, 2026 – Jeremy Snyder – The State of AI Security: Moving Beyond TheoryThe biggest shift evident at the [un]prompted AI Security Practitioners Conference was the move from purely theoretical discussions about “what could go wrong” to concrete, battle-tested methodologies for “what is going wrong and how we fix it.” It’s clear that AI…
prompted: Key Insights from the AI Security Practitioners Conference FireTail Blog

Mar 18, 2026 5:10 AM

Tags: ai, api, application-security, attack, automation, conference, cybersecurity, data, defense, detection, exploit, google, infrastructure, injection, LLM, malicious, malware, monitoring, openai, risk, strategy, theft, threat, tool, training, update, vulnerability, zero-day

Mar 17, 2026 – Jeremy Snyder – The State of AI Security: Moving Beyond TheoryThe biggest shift evident at the [un]prompted AI Security Practitioners Conference was the move from purely theoretical discussions about “what could go wrong” to concrete, battle-tested methodologies for “what is going wrong and how we fix it.” It’s clear that AI…
FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word

Mar 18, 2026 5:10 AM

Tags: access, ai, apt, attack, awareness, backdoor, cctv, cisa, cloud, control, cve, cyber, cyberattack, data, data-breach, detection, email, endpoint, exploit, flaw, fortinet, google, government, group, healthcare, identity, infrastructure, intelligence, Internet, iran, kev, malicious, malware, microsoft, mitigation, network, office, phishing, remote-code-execution, risk, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security prompts, enabling deployment of malware and establishing persistent access without triggering user warnings. Key takeaways: CVE-2026-21514 is a Microsoft Word n-day that bypasses OLE and Mark-of-the-Web protections, executing payloads silently without triggering user security prompts Tenable’s…
FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word

Mar 18, 2026 5:10 AM

Tags: access, ai, apt, attack, awareness, backdoor, cctv, cisa, cloud, control, cve, cyber, cyberattack, data, data-breach, detection, email, endpoint, exploit, flaw, fortinet, google, government, group, healthcare, identity, infrastructure, intelligence, Internet, iran, kev, malicious, malware, microsoft, mitigation, network, office, phishing, remote-code-execution, risk, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security prompts, enabling deployment of malware and establishing persistent access without triggering user warnings. Key takeaways: CVE-2026-21514 is a Microsoft Word n-day that bypasses OLE and Mark-of-the-Web protections, executing payloads silently without triggering user security prompts Tenable’s…
Operation Epic Fury: Why exposure data changes everything about Iran’s cyber-kinetic campaign

Mar 18, 2026 5:10 AM

Tags: access, ai, api, apt, attack, backdoor, breach, cctv, cisa, cloud, country, cve, cvss, cyber, cybersecurity, data, data-breach, ddos, detection, dns, espionage, exploit, firewall, flaw, fortinet, government, group, healthcare, identity, infrastructure, intelligence, Internet, iot, iran, kev, malware, microsoft, military, network, office, phishing, radius, remote-code-execution, risk, strategy, supply-chain, technology, threat, unauthorized, update, vpn, vulnerability, warfare, windows

Iran’s retaliatory campaign following Operation Epic Fury has collapsed the boundary between physical and digital warfare. Tenable’s exposure data analysis across seven target countries reveals that the largest exploitable attack surface isn’t the headline threat, it’s a Microsoft Word N-day affecting nearly 14 million assets. Key takeaways: Exposure data rebalances the threat picture. A Microsoft…
Operation Epic Fury: Why exposure data changes everything about Iran’s cyber-kinetic campaign

Mar 18, 2026 5:10 AM

Tags: access, ai, api, apt, attack, backdoor, breach, cctv, cisa, cloud, country, cve, cvss, cyber, cybersecurity, data, data-breach, ddos, detection, dns, espionage, exploit, firewall, flaw, fortinet, government, group, healthcare, identity, infrastructure, intelligence, Internet, iot, iran, kev, malware, microsoft, military, network, office, phishing, radius, remote-code-execution, risk, strategy, supply-chain, technology, threat, unauthorized, update, vpn, vulnerability, warfare, windows

Iran’s retaliatory campaign following Operation Epic Fury has collapsed the boundary between physical and digital warfare. Tenable’s exposure data analysis across seven target countries reveals that the largest exploitable attack surface isn’t the headline threat, it’s a Microsoft Word N-day affecting nearly 14 million assets. Key takeaways: Exposure data rebalances the threat picture. A Microsoft…
Anton’s Vibe Coding Experience: A Reflection on Risk Decisions

Mar 18, 2026 12:11 AM

Tags: access, ai, application-security, authentication, business, compliance, corporate, credentials, data, google, linkedin, LLM, risk, tool

Look, I’m not a developer, and the last time I truly “wrote code” was probably a good number of years ago (and it was probably Perl so you may hate me). I am also not an appsec expert (as I often remind people). Below I am describing my experience “vibe coding” an application. Before I go…
Less Lucrative Ransomware Market Makes Attackers Alter Methods

Mar 18, 2026 12:11 AM

Tags: data, ransomware, theft, tool, windows

Ransomware actors are ditching Cobalt Strike in favor of native Windows tools, as payment rates hit record lows and data theft surges. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/less-lucrative-ransomware-market-makes-attackers-alter-methods