Cyber CrimeNewNorthflank breach exposes AI key theft risk
Cloud platform Northflank told customers to rotate all secrets after a breach led to unauthorized use of AI API keys stored on its systems.
> Search
30 results for “breach”
Cyber CrimeNew
Cyber CrimeInside the $6.3bn Binance breach
North Korea-linked hackers reportedly drained Binance in about 20 minutes. Experts explain what went wrong and what it means beyond crypto.
Cyber CrimeFBI Arrests Another ShinyHunters Suspect
The FBI has arrested a second suspected ShinyHunters member in days, as the agency escalates pressure on the gang behind its breach.
Cyber CrimeJapan's Web Data Leaks Surge as APIs Abused
JPCERT/CC reports a sharp rise in personal data leaks at Japanese organizations, tied to mobile API abuse and a Metabase flaw.
Cyber CrimeASOS breach traced to impersonation tactic
ASOS says an employee's stolen credentials, obtained through social engineering, exposed names and contact details held on third-party platforms.
Cyber CrimeAI Agent Tooling Used in Bank Hacks
CrowdStrike attributes a data theft campaign against South Korean financial firms to a Chinese-speaking actor who paired an agentic pentesting tool with multiple LLMs.
Cyber CrimeAdvantest Confirms Stolen Data in Attack
Chip testing firm Advantest says attackers took names, SSNs, and financial data in a February ransomware intrusion.
Cyber CrimeArizona Courts Breach Hits 1.3 Million
A phishing email led to the theft of personal data for 1.3 million people from Arizona's court system, officials say.
Cyber CrimeFBI Ousts Contractor Over Missed Patch
FBI cyber chief says a third-party contractor failed to apply a security patch, enabling the ShinyHunters breach of employee data.
Cyber CrimeNikkei Email Breaches Expose 1,646 People
Nikkei says attackers hit a Google Workspace account in July and a Microsoft 365 account in September, later sending 9,000 phishing emails.
Cyber CrimeSmall Mistakes, Big Breaches This Week
Citrix and FortiMail zero-days, a new Spectre v2 variant, and a 16-year-old suspect top this week's threat roundup.
Cyber CrimeDTU breach exposes 200k user records
Hackers accessed the Technical University of Denmark's identity system using compromised credentials, potentially exposing data of up to 200,000 people.
Cyber CrimeFrontline Education breach hits school staff
Edtech vendor Frontline Education says attackers exploited a third-party software flaw to access employee data including Social Security numbers.
Cyber CrimeDIVD breach linked to agentic AI attack
Dutch bug-hunting nonprofit says AI agents exploited Zammad zero-days, stealing researcher emails in seconds.
Cyber CrimePentagon HR Breach Hits 3 Million
Hackers accessed DMDC personnel records for nearly nine months, exposing Social Security numbers and military data of over 3 million people.
Cyber CrimeThird-Party App Key Opens Door to BigCommerce Data Theft
Attackers used a compromised credential from the Ribon app to pull customer data from hundreds of online stores, exposing a soft spot in e-commerce supply chains.
Cyber CrimeFBI breach claim tied to PeopleSoft 0day
ShinyHunters says it used an unpatched Oracle PeopleSoft flaw to hit FBI systems, steal terabytes of data, and demand a report retraction.
Cyber CrimeShinyHunters Hack FBI Jobs Site, Stolen Data Claimed
ShinyHunters claims it breached an Oracle PeopleSoft zero-day on the FBI jobs site, stealing 2-3 TB of employee data and demanding a retraction, not ransom.
Cyber CrimeGoogle Fined €403M Over Location Data
Ireland's data regulator fined Google €403 million for GDPR breaches tied to how three features handled location data from 2018 to 2020.
Cyber CrimeJade Sleet's macOS backdoors hit IT vendor
SentinelOne tied North Korea's Jade Sleet to an India-based IT services breach that deployed two Rust macOS backdoors on a DevOps engineer's MacBook.
Cyber CrimeRevolut Phishing Wave Puts KYC Data at Risk
Malwarebytes reports smishing attacks mimicking Revolut's identity checks after a breach of the bank's Lithuanian entity.
AI & MLGemini's Silent Break-Ins Raise AI Autonomy Questions
According to The Wall Street Journal, Google's Gemini accessed three companies' protected systems during third-party testing, marking its first autonomous breaches.
Cyber CrimeWaterPlum's Fake Interviews Hit 30,000 Devices
A joint advisory says North Korean recruiters posed as hiring managers, using bogus coding tests to breach 30,000 devices and 7,000 crypto wallets.
Cyber CrimeBrevo Breach Turns CDN Edge Into Attack Path
A hardcoded Cloudflare key let attackers rewrite Brevo's sites and customer scripts for hours, pushing ClickFix malware at scale.
Cyber CrimeGyazo Breach Exposes 23.6 Million Records
Helpfeel reports a September 11 cyberattack that compromised 23.62 million user records and 490 million image metadata records tied to its Gyazo service.
AI & MLSpain Reports First Agentic AI Breach
Spain's data protection agency says an AI agent chained together multiple attack phases to breach a system and modify personal data.
AI & MLSpain logs first AI-agent breach
Spain's data protection agency says an autonomous AI agent chained scans, an exploit, and data tampering in a company breach.
Cyber CrimePremier Medical Group Breach Hits 280,000
A New York healthcare provider says attackers accessed patient files on June 14, exposing medical and personal data for 282,075 people.
Cyber CrimeCenterPoint Confirms Breach as Hacker Leaks Data
CenterPoint Energy says an unauthorized third party obtained customer data after a hacker claimed to have stolen millions of records.
SecurityOAuth abuse emerges as Workspace breach path
A webinar will examine two attacks that used malicious OAuth apps and social engineering to breach Google Workspace environments.