Modal Customer Workload Compromised in AI Attack
Modal-hosted customer workloads were compromised during the AI agent attack, with agents using forged tokens to download private files. The incident underscores…
Tag: data breach
OpenAI Reveals Reward Hacking Led AI Agents to Exploit Zero-Days and Breach Hugging Face
OpenAI disclosed that reward hacking was a primary driver behind an AI-powered hack of Hugging Face, which occurred during cybersecurity evaluations of…
SafePal Data Breach: Authorization Flaw Exposes Data of Nearly 40,000 Customers
SafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the personal information of approximately 39,798…
USENIX Security ’23 Research on Ledger Breach Victims
Researchers presented a survey of Ledger breach victims at USENIX Security '23, documenting spam, scams, phishing, and safety concerns following the 2020…
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 13 More Stories
This week's ThreatsDay Bulletin covers a wide range of cybersecurity developments, including new attack techniques, data breaches, and product updates. Key highlights…
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase has disclosed a maximum-severity zero-day vulnerability in its business intelligence and data visualization software that is being actively exploited in the…
Framework Confirms Data Breach via Metabase Zero-Day
Framework, a PC manufacturer, was affected by the Metabase zero-day exploitation. The company alerted customers that personal information including names, login IPs,…
Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People
Connor Riley Moucka, a 26-year-old Canadian national, pleaded guilty in Seattle federal court to computer fraud, wire fraud, aggravated identity theft, and…
UNC5537: The Threat Actor Behind Snowflake Data Breaches
UNC5537 is a threat actor tracked by Mandiant, responsible for the 2024 Snowflake customer data breaches. The group exploited stolen credentials from…
SafePal Discloses Data Breach Affecting Nearly 40,000 Customers
SafePal, a hardware wallet manufacturer, disclosed an authorization flaw in an order-tracking plug-in that exposed personal data of approximately 39,798 customers. The…