ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak

EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data.

·

Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Dark Web, Data Breach, Data Breaches, Ernst & Young, Extortion, EY, Security, ShinyHunters

¶¶¶¶¶

Confidential Computing on CPU and GPU Systems: How AI Data Centers Protect Data in Use

Modern AI runs on shared, high-performance infrastructure that processes enormous volumes of sensitive data and valuable model weights.…

·

AI, AI Data Centers, Artificial Intelligence, Business, cybersecurity, Data Centers, Data Security, Encryption, Security, Technology

¶¶¶¶¶

Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infections

Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations

·

BlindDoor, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Fake Support, GoGRPC, Malware, Microsoft, Microsoft Teams, Phishing Scam, PyGRPC, Quick Assist, RevSocket, RSOX, SCAM, Security, Zscaler

¶¶¶¶¶

Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation

Certighost allowed a low-privilege domain user obtain a valid Domain Controller certificate through AD CS. Microsoft patched the issue in the July security updates.

·

Aniq Fakhrul, Certighost, Chase, Cyber Attack, cybersecurity, Domain Controller, H0j3n, Microsoft, Security, vulnerability

¶¶¶¶¶

Daylight Security Launches Detection Program Visibility

Daylight Security adds Detection Program Visibility to unify detections, map coverage to MITRE ATT&CK, and help MDR customers spot gaps and improve results.

·

cybersecurity, Daylight Security, Security

¶¶¶¶¶

Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts

Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and authorization tokens.

·

APT28, Cyber Attack, cybersecurity, Fancy Bear, Forest Blizzard, Hotels, Microsoft, Microsoft 365, Phishing, Phishing Scam, ReliaQuest, SCAM, Security, WIFI

¶¶¶¶¶

Insight Partners and Glilot Capital Co-Lead $20M Investment in Way Security

Way Security raises $20M from Insight Partners and Glilot Capital to automate costly IAM operations with AI and help enterprises get more from existing tools.

·

cybersecurity, Glilot Capital, Insight Partners, Security, Way Security

¶¶¶¶¶

Google Indexed Claude AI Shared Chats Before Results Were Removed

Google Search indexed public Claude AI chat links, letting people find shared conversations through the site query before those listings disappeared soon after.

·

AI, Anthropic, Artificial Intelligence, Claude AI, cybersecurity, Google, Privacy, Security

¶¶¶¶¶

Russian Hackers Used a Zimbra Zero-Day to Steal Emails Without Link Clicks

Russian hackers from the TA488 group exploited a Zimbra webmail flaw triggered when emails were opened or previewed, stealing credentials and up to 90 days of messages from victims.

·

Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, FBI, Laundry Bear, Malware, NSA, Proofpoint, Russia, Security, TA488, Ukraine, Void Blizzard, vulnerability, Zimbra, ZimbraWeb, ZimReaper

¶¶¶¶¶

New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims

Dolphin X malware targets more than 300 apps and includes an AI Profiler that scores infected Windows PCs to help criminals identify high-value victims quickly.

·

Botnet, Cyber Crime, cybersecurity, DDOS, Dolphin X, Infostealer, Malware, RAT, Security, spyware, Windows

¶¶¶¶¶

1010.cx

1010.cx

Category: cybersecurity