Threats and Breaches

Stay current with latest developments in the hacking world. Explore topics, ranging from threats and breaches including data breaches to password hacks to malware. Readers can find posts updated hourly covering incidents around the world authored by some of leading experts and contributors in Cybersecurity industry.

MCP, vulnerabilities, F5, vulvisibility, vulnerabilities, CAST AI, KSPM, Google Kubernetes vulnerabilities

Anthropic’s Mythos Can Serve Up N-Day Exploits in Minutes or Hours

| | AI Risks, AI Security, Anthropic Mythos, foundation AI models, Microsoft Windows, mozilla firefox, N-Day Vulnerabilities, Vulnerability Exploits, zero-day vulnerabilities
Anthropic's controversial Claude Mythos Preview found that the frontier AI model can not only quickly detect and develop exploits for zero-days, but also rapidly spin up PoCs and exploits for N-day vulnerabilities ...
Security Boulevard

Lansing Community College Data Breach Impacts 174,000 People

| | Cyber threats and incidents, Data breach
What happened Lansing Community College is notifying more than 174,000 people that their personal information was compromised in a data breach that occurred more than one year ago. The incident was identified ...
CISO Whisperer

SoFi Confirms Third-Party Data Breach at Hong Kong Subsidiary

| | Cyber threats and incidents, Data breach
What happened SoFi Hong Kong confirmed a data breach after hackers gained unauthorized access to a third-party vendor database containing customer information from SoFi Securities (Hong Kong) Limited. SoFi discovered the incident ...
CISO Whisperer
ShinyHunters Secret to Success: Breaking the Trust Barrier

ShinyHunters Secret to Success: Breaking the Trust Barrier

| | access, attacks, Cybersecurity, least privilege, Ransomware, ShinyHunters, Trust
ShinyHunters keeps proving it’s a step or two ahead of defenders—and at the heart of the matter is the exploitation of trust ...
Security Boulevard
Google Patches 429 Chrome Vulnerabilities in Major Browser Update

Google Patches 429 Chrome Vulnerabilities in Major Browser Update

| | AI, Chrome, google, Vulnerabilities
Google has patched 429 vulnerabilities in its Chrome browser, an unusually large update for a stable Chrome release. Chrome 149 was released with fixes for security flaws affecting the browser’s rendering, graphics, ...
Security Boulevard

Meta AI Support Data Breach Affects Over 20,000 Instagram Accounts

| | Cyber threats and incidents, Data breach
What happened Meta revealed that more than 20,000 Instagram users had their accounts hijacked after attackers abused a vulnerability in the company’s AI-assisted account recovery support tool. The tool, called High Touch ...
CISO Whisperer
AEP browser endpoint multi-vector EDR

Rethinking Endpoint Security for the Modern VDI Environment 

| | Cybersecurity, Endpoint security, identity, vdi
VDI platforms remain an important part of that strategy because they centralize control, reduce endpoint exposure, and support secure access across distributed environments ...
Security Boulevard

Mercor’s 4TB Data Heist: When a Poisoned AI Library Exposed OpenAI and Meta’s Training Pipeline

| | AI Security, Cybersecurity, Data breach, Machine Identity, SBN News, supply chain attack
A poisoned LiteLLM package led to 4TB stolen from Mercor, the AI training startup serving Meta, OpenAI, and Anthropic. Class action lawsuits filed ...
Deepak Gupta's notebook
Microsoft’s Zero-Day Disclosure Backlash: Did Legal Threats Go Too Far?

Microsoft Threatens Legal Action Over Exploit Disclosure

| | BitLocker, bug bounty, Cybersecurity, cybersecurity law, Digital Privacy, Episodes, full disclosure, GitHub, Microsoft security, MSRC, Podcast, Privacy, Proof-Of-Concept Exploit, responsible disclosure, Security Community, security researchers, surveillance, Vendor Accountability, Vulnerability Disclosure, Weekly Edition, zero-day vulnerabilities
Microsoft’s response to a researcher publicly disclosing proof-of-concept exploit code has reignited an old debate in security: where does responsible disclosure end and reckless disclosure begin? Tom and Scott discuss the Nightmare ...
Shared Security Podcast
Ex-IBM Exec Accuses Big Blue and AT&T of Covering Up Foreign Data Breaches

Ex-IBM Exec Accuses Big Blue and AT&T of Covering Up Foreign Data Breaches

| | ATT, Cloud Security, Data breach, Data Breach Disclosure, federal security regulations, IBM Cybersecurity, Whistleblower
A former IBM cybersecurity executive in a whistleblower lawsuit alleges that the IT vendor and its cloud partner, AT&T, failed to disclose to government officials that their network was breached multiple times ...
Security Boulevard
Load more