Cybersecurity Alert: How an AI Agent Exposed Five Critical Enterprise Security Gaps
An AI agent built by a mid-sized company's accounts team inadvertently exposed five critical security gaps in an enterprise setting.
Search
Find a quick tip
Results for "Exposed".
Cybersecurity Alert: Notion Reveals Fireworks AI Breach Exposed Customer Chat Transcripts
Notion, the digital workspace platform, has disclosed that a security breach at its AI infrastructure provider, Fireworks AI, exposed customer chat transcripts in a limited number of workspaces, following a series of data breaches.
Cybersecurity Alert: Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information
A researcher’s trawl through publicly available code found private information was at risk across multiple departments.
Chainalysis Reveals Data Breach: Credentials for All Customers Exposed
Blockchain intelligence firm Chainalysis reports a breach exposing credentials and live tokens for all customers, affecting law enforcement, financial institutions, and cryptocurrency businesses worldwide.
Nearly 1.5 million exposed secrets targeted in new revocation program
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid. [.
DreamHost confirms data breach exposed FTP logins and webmail sessions
DreamHost is warning of a data breach after attackers gained access to its File Manager platform for two months and stole customers' FTP/SFTP usernames and passwords. [.
PoeLLM malware infects exposed AI servers in cryptomining attacks
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads.
Over 543,000 valid credentials exposed in public GitHub repositories
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data.
New Carbonato malware uses AI agents to hijack exposed Docker hosts
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control.
GitLab Project Email Addresses Exposed: A Comprehensive Guide to Mitigating Risks
GitLab project email addresses, used for issue and task management, are being exposed in public documentation, posing significant security risks.
Hackers target exposed Vite dev servers to steal AWS, Azure secrets
A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments.
Over 36,000 exposed Plex servers vulnerable to recent flaws
Over 36,000 Plex Media servers exposed online remain unpatched against multiple security vulnerabilities and are vulnerable to attacks.
220 Million Traveler Records Exposed in Vietnam-Linked API Leak
220 million traveler records, including passport numbers and flight details, exposed through security misconfigurations in a Vietnamese-linked API system.
LACMA data breach last year exposed social security and medical data
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information.
SickKids Data Breach: Exposed Employee and Job Applicant Information
The Hospital for Sick Children (SickKids) has disclosed a cybersecurity incident that exposed personal information of current and former employees, as well as job applicants. The breach was caused by a flaw in third-party software.
This Galaxy S26 FE leak just exposed the full color palette
The Galaxy S26 FE has leaked once again. This time, the leak shows off the phone from multiple angles and reveals the full color.
How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore
AI did not create a new browser security problem. It exposed one that enterprises have long been able to ignore.
Amgen says cloud data breach exposed patient health, proprietary info
Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers.
OpenAI agent used exposed credentials at 4 services in Hugging Face breach
In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack on Hugging Face, expanding the scope of the four-day security incident to other.
Over 24,000 exposed server BMCs leak password hash via decades-old flaw
More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface.
Private Claude Chats Exposed in Google and Bing Search Results
The screwup shows how tricky it can be to stop web crawlers from making ostensibly private conversations with AI chatbots entirely too.
Over 900 Oracle E-Business instances exposed to ongoing attacks
Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical security flaw.
Meta Exposed Data Internally From Its Controversial Employee-Tracking Program
Employees had previously raised concerns about the initiative, which involves collecting workers’ keystroke data to train AI.
Critical ATG Systems Exposed to Attacks: A Comprehensive Guide
Over 900 automatic tank gauge (ATG) systems across the United States have been found exposed online and vulnerable to ongoing attacks, raising concerns about critical infrastructure security.
Cybersecurity Alert: Hackers Exploit GitHub Accounts to Steal Cloud Credentials and Secrets
Hackers compromised 4,800 GitHub accounts to steal cloud credentials and secrets, including those from Fortune 100 companies and government entities. The threat actor used malicious workflows to inject stolen data into open-source software ecosystems.
Apache HTTP Server Patches Critical HTTP/2 Vulnerability
Apache HTTP Server has patched a critical vulnerability in the HTTP/2 module that could allow attackers to execute arbitrary code with server privileges, affecting versions 2.4.55 through 2.4.70 and standalone mod_h2 versions 2.0.8 through 2.0.42.
Nitori, a Japanese Furniture Giant, Confirms Massive Data Breach Affecting Over 37 Million Customer Records
Japanese furniture retailer Nitori reports a massive data breach, compromising over 37 million customer records.
SEGA Newsletter Breach Reveals 2.2 Million Email Addresses: A Comprehensive Guide to Protecting Your Digital Assets
SEGA's newsletter breach exposes 2.2 million email addresses, highlighting the importance of robust cybersecurity measures.
York University Data Breach Reveals Personal Information from 2007: What You Need to Know
York University's breach exposed sensitive data from 2007, affecting over 55,000 students and staff. This guide explains the breach, its impact, and steps to protect your information.
France Blames Iranian Hackers for Major Refrigeration System Attacks: Insights and Implications
France has linked a series of cyberattacks to Iranian state-backed hackers, causing significant food losses and multiple fires in French supermarkets.