hype
2
Substance
6
Brief · Security
Northflank breach led to abuse of customers' AI API keys
Cloud hosting platform Northflank warns customers to rotate all credentials and secrets after a breach led to unauthorized use of their AI API keys.
Topics
#data-breach
20 items · Page 1 of 2
hype
5
Substance
6
Brief · Security
FBI links North Korea to $6.3 billion Binance crypto heist
The FBI says North Korea-linked actors stole $6.3 billion from Binance on October 29. Binance says it has replaced 90 percent of the stolen funds.
hype
3
Substance
6
Brief · Security
Anthropic's Claude Code extension was backdoored on Cursor for about 11 hours
A malicious build of Anthropic's Claude Code VS Code extension was served through Cursor's marketplace for roughly 11 to 12 hours. Reports say it could plant SSH backdoors.
hype
2
Substance
5
Brief · Security
Chainalysis discloses breach by attackers using agentic techniques
Blockchain analytics firm Chainalysis disclosed a data breach. Attackers used what it calls offensive agentic techniques to reach internal systems and tools.
hype
6
Substance
6
Brief · Security
Binance reports $6.3 billion crypto theft, traced to a compromised DevOps laptop
Binance says about $6.3 billion in crypto was stolen and links the theft to a DevOps engineer's compromised laptop. Reports differ on the figure and on who is responsible.
hype
2
Substance
7
Brief · Security
Railway tells users to rotate secrets after suspicious activity
Railway, a cloud platform, warned developers to rotate secrets after detecting suspicious activity on systems that store customer environment variables.
hype
3
Substance
6
Brief · Security
Capcom confirms breach of 11.7 million CAPCOM ID accounts
Capcom confirmed hackers breached its CAPCOM ID membership service, exposing more than 11.7 million customer email addresses and related information.
hype
4
Substance
6
Brief · AI
AI agents breach more than 100 websites, Norforge reports
An AI security firm says one hacker used a mostly autonomous army of AI agents to break into more than 100 websites. Reuters reports the victims included John Deere, SharkNinja and Cummins.
hype
3
Substance
7
Brief · Security
Hackers breach Microsoft 365 tenants through ConnectWise Cloud Backup
ConnectWise shut customer access to its Cloud Backup service after attackers reached application identities and compromised Microsoft 365 tenants.
hype
3
Substance
6
Brief · Security
Burger King Japan breach exposes 11.18 million customer records
Burger King Japan disclosed a breach after attackers accessed a server holding 11.18 million customer records.
hype
2
Substance
4
Brief · AI
Eiliko robot toy sends user conversations to Chinese servers
Security researchers say the Eiliko companion robot stores what users say on servers in China, where the data could be hacked.
hype
2
Substance
5
Brief · AI
Character.AI bankruptcy puts user data up for sale, state AGs object
New York's attorney general and 39 other bipartisan AGs filed notices in Character.AI's bankruptcy. They seek protections on consumer data sold in the proceeding.