Google Threat Intelligence Group has tracked threat actor UNC6395 stealing OAuth tokens via Salesloft Drift integrations in a massive Salesforce data theft campaign.
A cyber attack on Nevada has disrupted state services, including phone lines, websites, and online systems, forcing several offices to close with no expected date of resolution.
A recent campaign of cyber attacks made new and novel use of the Claude AI chatbot in scanning VPN endpoints and automating multiple portions of the attack cycle, representing another step forward in the deployment of LLMs for malicious purposes.
A whistleblower report submitted to Congress and the Office of Special Counsel claims that DOGE employees uploaded a very sensitive Social Security Administration (SSA) database to a vulnerable cloud server while auditing the agency, one that contains Social Security numbers for 300 million Americans as well as associated identity information.
While the Otter privacy policy makes clear that its AI notetaker service may indeed train on the voices of users while they are in meetings, the privacy lawsuit notes that guests without Otter accounts that can be invited to these meetings have not been similarly notified or opted in.
Farmers Insurance Hit by Third-Party Data Breach Exposing Personal Information of 1.1 Million People
A third-party data breach at Farmers Insurance has exposed the sensitive personal information of over 1.1 million people after hackers breached a vendor-managed database.
Recent letters sent out by FTC Chairman Andrew N. Ferguson were directed to tech companies and warned against watering down privacy protections or censoring their products due to pressure by foreign governments.
The UK government has dropped its controversial plan to mandate an encryption backdoor into Apple's cloud storage systems, according to a statement by US Director of National Intelligence Tulsi Gabbard.
Russian hackers linked to the country’s Federal Security Service (FSB) Center 16 have exploited vulnerable Cisco devices for over a year to target critical infrastructure organizations for cyber espionage.
A ransomware attack has forced drug research firm Inotiv to shut down critical systems, resulting in operational disruptions. The Qilin cyber gang has taken responsibility for the Inotiv ransomware attack and listed the drug research firm on its data leak site.
