Category: Cyber
-

Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data
An unprotected database linked to India-based AI software development and IT services company Vibetech exposed 13.7 million records containing credentials and other sensitive information from previous data breaches. The repository…
-

Spyware vendors found a way to make targeted ads even worse
security Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying…
-

UK Legal Aid Agency hack worse than thought, with stolen records dating back to 1978
A cyberattack on Britain’s Legal Aid Agency (LAA) stole far older and broader records than the government previously disclosed, officials said Wednesday. While initially claimed to have affected people who had used the service since 2010, the…
-

1M Impacted by CenterPoint Energy Data Breach
A data breach against CenterPoint Energy has impacted approximately 1 million Texans. This disclosure follows one month after the organization filed a notice with the SEC. In the September filing, the organization stated it became aware of the…
-

France: Internet-Exposed Danfoss Controllers Drop 71% After Attack
Internet-exposed refrigeration controllers in France are disappearing from public view at a dramatic rate following a cyber incident targeting supermarket food supplies. Censys researchers observed a 71% drop in internet-exposed Danfoss…
-

Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
security CEO said the workers were hired in Q2 and are still helping today …
-

Google’s new Universal Cart tracks prices on items you want now – plus 3 other tricks
October Prime Day kicked off the early holiday shopping season last week, and now Google is introducing new tools for online shoppers. Google’s latest tools use Google Search data and AI-powered item organization. Google’s new When to…
-

New Aoki Infostealer Targets AI Coding Assistant Credentials
New versions of the Aoki infostealer are targeting credential and session files used by popular AI coding assistants, a new report by Symantec has warned. This represents a significant development from to earlier versions of Aoki, which…
-

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or…
-

Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms
Anthropic finds small AI models can set up inference servers across different hardware, raising concerns about future AI worms targeting connected devices. AI research firm Anthropic warns that small AI models can set up inference…