Security

Massive data leak: 200 billion files exposed in cloud buckets

From documents and credentials to source code and internal backups – billions of files are leaking due to misconfigured cloud storage buckets.
Read more about Massive data leak: 200 billion files exposed in cloud buckets

DDoS attacks target Eurovision Song Contest as hackers seek attention

Swiss authorities warn that cybercriminals launched several distributed denial of service (DDoS) attacks against various websites in the country in connection with the Eurovision Song Contest. The attacks were expected and did not disrupt Eurovision’s operations.
Read more about DDoS attacks target Eurovision Song Contest as hackers seek attention

Adidas and Dior confirm breaches involving customer data

German sportswear brand Adidas and French luxury fashion brand Dior confirmed hacker attacks affecting customer data.
Read more about Adidas and Dior confirm breaches involving customer data

What hackers do with their stolen money? Turns out they like brick-and-mortar businesses

Everyday businesses, from dating sites, cafes, restaurants, to taxi services, represent the potential investments for cybercriminals. They often direct stolen money as investments to brick-and-mortar and online companies.
Read more about What hackers do with their stolen money? Turns out they like brick-and-mortar businesses

Data of 70,000 customers of Belgian virtual telecom operators leaked

Due to a data breach at Effortel, personal information of 70,000 customers of three Belgian mobile virtual network operators (MVNOs) has been exfiltrated.
Read more about Data of 70,000 customers of Belgian virtual telecom operators leaked

US lawmakers want location tracking installed in AI chips to prevent nation-state theft

US lawmakers on Thursday introduced the Chip Security Act – a new bill that would require manufacturers to outfit high-end AI computer chips with location tracking to prevent the advanced technology from getting in the hands of rogue governments like China and Russia.
Read more about US lawmakers want location tracking installed in AI chips to prevent nation-state theft

Insiders leak Coinbase user data: massive breach can cost company $400 million in losses

Coinbase, a publicly traded company that operates the largest US-based cryptocurrency exchange with over 100 million users, disclosed a major cybersecurity incident that exposed sensitive user data. The company estimates the remediation will cost it from $180 million to $400 million.
Read more about Insiders leak Coinbase user data: massive breach can cost company $400 million in losses

Read at your own risk: an iOS book app spilled your secrets

Your next favorite read could cost you your privacy. An iOS book app just exposed 42,000 users’ personal data to hackers.
Read more about Read at your own risk: an iOS book app spilled your secrets

AI transforms cybercrime: researchers warn about the rise of AI agent hackers

Security experts fear that artificial intelligence (AI) agents will soon perform sophisticated and difficult-to-detect cyberattacks at scale. The release of ChatGPT in 2022 transformed the cybercrime landscape with automated phishing, deepfakes, and malware development.
Read more about AI transforms cybercrime: researchers warn about the rise of AI agent hackers

Steam denies data breach claims, scoffs at quality of supposedly leaked data

The video game distribution service’s owners, Valve, went as far as to say it doesn’t see the need for users to change their passwords.
Read more about Steam denies data breach claims, scoffs at quality of supposedly leaked data

Steel manufacturer Nucor halts production after cybersecurity incident

Nucor, the biggest steel manufacturer in North America, has shut down some of its operations due to a “cybersecurity incident.”
Read more about Steel manufacturer Nucor halts production after cybersecurity incident

5.7M files with resumes exposed after hiring platform forgot the password

Millions of resumes from a hiring platform were left online, offering scammers job seekers' private data.
Read more about 5.7M files with resumes exposed after hiring platform forgot the password

Android 16 brings massive security improvements to fight scams, fraud, and spyware

On Android 16, a single click will enable the strongest security and privacy, and most of your day-to-day account activity will not feel different, Google promises. One of the new, long-awaited additions is USB port locking to charging only, preventing thieves or authorities from accessing the data.
Read more about Android 16 brings massive security improvements to fight scams, fraud, and spyware

EU launches own vulnerability database in wake of CVE funding issues

Europe launches its own vulnerability database on Tuesday – one that will work in tandem with existing industry databases, including Mitre’s widely-used CVE database, which had its own funding crisis last month.
Read more about EU launches own vulnerability database in wake of CVE funding issues

North Korean cyber spies hack Ukraine to measure Russia’s war needs

North Korean state-sponsored hackers launched attacks against government entities and other organisations in Ukraine. It looks like the rogue state wants to determine if Russia will request more troops or armaments in an ongoing war.
Read more about North Korean cyber spies hack Ukraine to measure Russia’s war needs

American college spills half a million files with personal data

Bank Street College of Education, a New York-based private school, exposed hundreds of thousands of files with personal data, including home addresses and phone numbers.
Read more about American college spills half a million files with personal data

Co-op was hit by hackers aligned with Kremlin’s agenda, researchers believe

British supermarket chain Co-op is still recovering from a major cyberattack and experiencing significant disruption. Hackers who claimed responsibility for the breach have links to the Russian Federation, according to Halcyon researchers.
Read more about Co-op was hit by hackers aligned with Kremlin’s agenda, researchers believe

VMware Tools vulnerability enables hackers to tamper with virtual machines

Broadcom alerts that attackers with limited access to a virtual machine can exploit a vulnerability affecting VMware Tools and trigger insecure file operations. The open-source implementation, open-vm-tools, is also affected.
Read more about VMware Tools vulnerability enables hackers to tamper with virtual machines