Archive
(2,175 Total Articles)Page 2 of 13.
ASOS appears to have suffered a breach that started with social engineering rather than a software flaw. For defenders, the main issue is account and help-desk exposure: identity controls, staff verification, and access monitoring matter as much as perimeter security.
Cisco Talos is describing an AI-assisted phishing campaign that uses event-themed lures to drive a real-time Google man-in-the-middle flow. For defenders, the point is not the novelty of the lure itself but the added urgency around identity protection, phishing-resistant authentication, and detection of active session hijacking.
BasedApp says it suffered a breach that exposed KYC records and wallet addresses. For defenders, this is an identity and data-exposure problem that raises account takeover risk, customer verification risk, and regulatory exposure for any service holding financial identity data.
Revolut is responding to a September data breach by covering the cost of replacement customer IDs. The story matters because it shows a direct operational and financial consequence of a breach for a financial-services firm and its affected users.
Discord users appear to have had data exposed through a breach involving the Double Counter security bot. The practical issue for defenders is third-party exposure inside a widely used chat platform, which raises account-hygiene and vendor-risk concerns for communities that rely on bots with broad access.
CERT-UA is warning about a campaign that uses fake Cloudflare verification pages to push LunexStealer. The defender impact is clear: it is an active phishing-to-malware delivery path that can lead to credential theft and endpoint compromise, so detection of lookalike infrastructure and user-facing web checks matters.
A cyberattack against South Korean churches appears to have exposed personal data for more than 1 million congregants. The main defender impact is exposure and identity risk for a large religious network, with likely follow-on concerns about account abuse, phishing, and incident response across affected organizations.
Fortinet VPNs are being abused in an active campaign that can shut users out and create a path to ransomware. The practical issue for defenders is exposure on perimeter access gear and the need to treat FortiGate patching, access review, and monitoring as urgent rather than routine.
A major fashion retailer appears to have suffered a security incident that led to rogue messages being sent to customers. The immediate defender concern is whether customer contact systems or accounts were compromised, and whether personal data or purchasing channels were exposed.
A public post is alleging that data tied to more than 100 million Rakuten members is being sold, while Rakuten says it has not confirmed a breach. For defenders, the immediate issue is whether this points to exposed customer records, credential leakage, or a false claim that still requires verification and monitoring.
Denmark’s population database is reported to have suffered a major breach. That points to exposure of government-held identity data and raises immediate questions about account access, downstream fraud risk, and whether agencies need to tighten controls around national records systems.
This appears to be a critical remote-code-execution vulnerability in SConnect middleware used in SWIFT banking and government authentication environments. Defenders should treat it as a high-priority exposure because it can affect identity and access infrastructure that sits in front of financial and public-sector systems.
A critical command-injection flaw in Fortra BoKS Core would let an attacker turn a privileged access management product into an execution path on protected systems. For defenders, the immediate questions are exposure, patch status, and whether the product is reachable in environments that depend on it for account and privilege control.
A phishing campaign is being described as having hidden its malicious activity in ways that made it harder to spot. For defenders, the issue is email security and identity protection, because the operational question is how such lures bypassed normal detection and what controls need tightening.
The piece says attackers are actively abusing compromised Azure service principals in an agentic campaign tied to Storm-3168, which makes identity and cloud access controls the immediate defensive priority. Defenders should treat service principal hygiene, privilege review, and detection for unusual Azure control-plane activity as urgent rather than routine hardening.
Fortra says it has patched critical flaws in BoKS, which matters because exposed access-control software can become an entry point into privileged systems. Defenders using the product should verify patch status and look for any signs the weaknesses were reached before remediation.
The piece appears to warn that AI agents can keep access to business data and continue acting on a user’s behalf after setup. For defenders, that raises questions about access control, privilege cleanup, and whether AI assistants are being granted more authority than they should have.
CrowdStrike's 13.9% jump on September 14 prices an agentic-AI exposure the archive has documented since February, from Clinejection to PixelLeak.
CrowdStrike's 13.9% jump on September 14 prices an agentic-AI exposure the archive has documented since February, from Clinejection to PixelLeak.
Researchers say they found a new CPU-side attack that can expose a Linux root password hash from memory. The defender impact is clear: systems that rely on Linux host protections still need hardware-aware hardening and patching, because sensitive credential material can be recoverable even without a conventional software breach.
Publicly exposed GitHub credentials that are still active create a straightforward account-takeover risk for developers and any organization tied to those accounts. The security issue is not the exposure alone, but the fact that the credentials remain usable, which increases the chance of unauthorized access and downstream supply-chain or code-repository compromise.
2CLoader is being used as a delivery tool for Vidar and Remcos stealers, which makes this an endpoint threat story with direct implications for detection and blocking controls. Defenders should treat it as another example of malware that tries to stay hidden long enough to drop credential theft tooling, raising the priority on email, download, and endpoint telemetry.
NHS staff suspension for snooping points to insider misuse of access to patient or administrative records rather than an external breach. For defenders, the issue is access control, audit logging, and prompt discipline when staff misuse is detected.
A staff data breach at the Bank of Korea has triggered scrutiny of its cybersecurity controls. The immediate concern for defenders is how employee data exposure can expand phishing, impersonation, and internal-access risk, while also increasing pressure on a major financial institution to explain its controls and response.
OpenAI agents attempting repeated automated access against a UN website raises an AI-security and identity-access issue, even if the headline is thin on technical detail. The defender takeaway is that AI-driven automation can create abuse patterns that look like brute force or scraping and can trigger rate limits, blocking, and account protection controls.