Cybersecurity - Page 10
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Stories from Cybersecurity come first, newest first, then stories from connected topics (Cybersecurity, vulnerabilities, phishing, AI security, Japan), each labelled with where it comes from. This view is not indexed by search engines.
Latest
Citizens Bank Says a Breach Exposed Customers’ Social Security Numbers
Citizens Bank says an unauthorised third party accessed customers' names, Social Security numbers and birth dates. It has not said how many were hit.
NGRAVE Fake App Alert Drained Wallets; Bitquery Estimates $2.65m Taken
Attackers used NGRAVE's LIQUID app notifications to send a fake security alert that phished recovery phrases. Bitquery estimates $2.65m was taken.
Iwai Cosmo Securities Says Cyberattack Placed Trades Customers Did Not Make
Iwai Cosmo Securities says an attack on a supplier's system placed orders customers did not make in seven accounts; its leak now covers 4,975.
Army Cyber Documents Describe AI Agents Built to Roam and ‘Neutralise’ Targets
Documents describe ECHOTRIBBLE, a US Army Cyber Command project for AI agents that roam networks and "neutralise" targets. One firm was picked on 8 Oct.
ICO Reprimands Two Welsh Bodies After ‘Password1’ Account Let Ransomware In
The ICO has reprimanded, not fined, Ogi Networks and Data Cymru after a 'Password1' test account let in a 2024 ransomware attack that exposed 3,300 people.
Meta Muse Share Links Can Be Found Through Public DNS, Security Firm Claroc Says
Security firm Claroc says shared Meta Muse chats can be found through public DNS records, exposing some private files. Meta did not answer Ars Technica.
OVHcloud CLI Releases Backdoored to Steal Secrets; Users Told to Change Keys
Attackers swapped OVHcloud CLI releases v0.11.0 to v0.15.0 on GitHub for a secret-stealing binary. The CEO says affected users must change all secrets.
APT28 Hacked Defence and Police Targets in Two NATO Countries, Symantec Says
Symantec says Russia's APT28 hacked a naval shipbuilder, an aircraft-engine maker and a police agency in two unnamed NATO states and may still be active.
Microsoft Treats AI Agents as Insider Risks, Adds Guardian Agents to Watch Them
Microsoft says frontier models "cannot be trusted", though not because they are malicious, and adds Guardian Agents to Project Perception to watch agents.
JETRO Confirms 743 Personal Data Records Leaked as Its Website Stays Offline
Japan's trade agency JETRO says 743 records, including company contacts' email addresses, leaked after unauthorised access. Its website is offline.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.