⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The breach affected anyone who received a loan through the company or inquired about a loan product through a third party.
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials.
Adam Shostack, president of Shostack and Associates and an affiliate professor at the University of Washington, discussed with the Dark Reading News Desk why he was blown away by OpenAI's revelations regarding the Hugging Face attack. The breach raises big questions about AI security controls and the vulnerabilities inherent in AI development platforms.
World-class threat modeler Adam Shostack shared he was "blown away" by OpenAI's revelations about the Hugging Face attack, and explains why his new threat model for LLMs is both "lightweight yet still usable."
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers stole customer personal and order information from third-party logistics provider CEVA Logistics.
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was present in .github/workflows/jira_issue.yml , which ran when a public issue was opened and exposed JIRA_BASE_URL, JIRA_USER_EMAIL, and JIRA_API_TOKEN to the same workflow step.