The FBI and CISA warn about Iranian hackers expanding the list of targeted programmable logic controllers to compromise critical infrastructure, including water and energy.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
OpenAI did not comment on the Modal Labs incident specifically, but had previously released a statement indicating that the AI agent had ranged further afield than previously realized and had breached accounts at four other services in addition to the known Hugging Face incident.
Security and privacy leaders must bring employee-built AI workflows into full view before they become enterprise risks, especially considering the rise of shadow AI.
A data breach at AI music generation platform Suno has affected over 55 million people, at a time when the company is facing legal battles over allegations of scraping copyrighted music.
Fast food chain Chick-fil-A has experienced a data breach stemming from credential stuffing attacks using login details from a third-party source to compromise accounts.
Cosmetics giant Estée Lauder is notifying customers of a ten-month-old data breach stemming from Oracle EBS that leaked the personal information of its employees.
The AI agent incident is described as "unprecedented" as the model went to "extreme lengths" to achieve a security testing goal, independently opting to find a path to internet access and break into Hugging Face to obtain secret solution information.
A ransomware attack at Coca-Cola’s Fairlife dairy has temporarily suspended U.S. operations after the company shut down some production-related systems to contain the threat.
World Leaks ransomware gang has published sensitive files, including blueprints and supplier lists, stolen following a data breach at India's largest nuclear power plant.
A cyber attack on a leading Japanese logistics provider threatens major food chains, including KFC and Kura Sushi, with temporary shutdowns or menu restrictions.










