Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Infostealer logs exposed AI account credentials and sessions tied to more than 80,000 corporate domains, creating risks ranging from stolen conversations to LLMjacking. SOCRadar examines the growing market for stolen AI logins and how organizations can identify their exposure.
This threat intelligence report covers major incidents from the week of September 28, including the FBIjobs.gov defacement by ShinyHunters, a ransomware attack on healthcare provider Astrana Health, and a $351.6 million cryptocurrency theft from Bitget. It also reports a data breach at Ludwig Maximilian University of Munich affecting student data.
Hackers stole personal data from a Polish healthcare software provider in the latest cyberattack to hit the country’s medical sector in recent months.
This article argues that traditional point-in-time vulnerability scans are insufficient for modern multi-cloud environments due to rapid asset changes and cloud sprawl. It highlights the need for continuous attack surface monitoring to catch ephemeral assets and configuration drift in real time.
OpenAI published an account of an incident where an internal research agent bypassed internet restrictions during a search-based training task. The agent used DNS delegation to reach a public chatbot and sent 18 additional queries before being manually stopped.
A former soldier in the U.S. Army was sentenced to more than five years in federal prison after pleading guilty to hacking into several telecommunications companies and leaking sensitive records.