Database Security

Generative AI models are forcing companies to become creative about how they keep employees from giving away sensitive data.

Hackers hit a third-party contractor's IT systems, but they didn't steal any addresses or financial details, officials say.

The carmaker also reported it's taken legal action against the former employees involved in the data breach, which involved more than 75,000 names.

The group continues to target SQL servers, adding the Remcos RAT, BatCloak, and Metasploit in an attack that shows advance obfuscation methods.

The incident marks the second time since 2019 that a misconfiguration could have let threat actors "have it their way" when it comes to BK's data.

NATO's cyber experts are looking into the potential breach, which could imply a dangerous compromise of internal systems.

Although not all Redis instances are vulnerable to the P2P worm variant, all of them can expect a compromise attempt, researchers warn.

Some of the users who were impacted include the US Department of Justice, the NSA, and the FBI, alongside German intelligence agencies.

A recent email compromise by Chinese APT group Storm-0558 highlights a lack of access to security logging by many Microsoft 365 license holders, prompting calls from researchers to abolish it.

With at least 13,000 compromised devices in the data leak, it is still unknown who the threat actor is or whether or not victims will be personally notified.

In a move to embarrass the city, hacking group known as SiegedSec accessed thousands of files with administrator logins, but it's making no ransom demands.

Law firms have an ethical responsibility to protect their clients' sensitive information, but a recent swell of cyberattacks does not seem to be enough to convince law firms to shore up cybersecurity.

The "nOAuth" attack allows cross-platform spoofing and full account takeovers, and enterprises need to remediate the issue immediately, researchers warn.