/
attack_type:data_exfiltration × criticity:medium × limpar

Resultados

6 casos · pág. 1/1

hipaajournal.com · medium

Conduent proposes $80M settlement over 2024 SafePay ransomware breach affecting 62.2 million individuals

An $80 million settlement has been proposed to resolve the consolidated class action In Re Conduent Business Services Data Breach Litigation, pending in the U.S. District Court for the District of New Jersey. The suit stems from the 2024 breach at Conduent Business Services, LLC, in which an unauthorized party had network access from Octo…

f5.com · medium

F5 Labs November 2025 AI Security Insights: Fallacy Failure jailbreak added to CASI, agentic browser and Claude code interpreter risks

F5 Labs published its November 2025 AI Security Insights, drawn from the Comprehensive AI Security Index (CASI) and Agentic Resistance Scoring (ARS). Anthropic models took the whole top tier of the CASI leaderboard (Claude Haiku 4.5 at 95.89, Claude Sonnet 4.5 at 95.86, Claude Sonnet 4 at 95.33), while the GPT-5 family slipped, with GPT-5…

haveibeenpwned.com · medium

ShinyHunters 'pay or leak' extortion of Medela leaks 424k contact records, added to Have I Been Pwned

In September 2026, Swiss medical device company Medela was targeted in a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published and covers about 424k unique email addresses, mostly belonging to healthcare professionals, Medela staff and sales leads. Have I Been Pwned added the dataset …

haveibeenpwned.com · medium

ShinyHunters 'pay or leak' extortion of CyrusOne leaks 373k contact records, added to Have I Been Pwned

In August 2026, data centre operator CyrusOne was targeted in a ShinyHunters "pay or leak" extortion attempt. The group later published data allegedly stolen from the company, covering about 373k unique email addresses across records for users, sales leads and CyrusOne employees. The data is mostly corporate contact information, and also …

haveibeenpwned.com · medium

ShinyHunters extortion of Crunchbase leaks 560k contact records, added to Have I Been Pwned

In January 2026, the company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly stolen from the company was later published, covering about 560k unique email addresses, mostly belonging to leads and business contacts. Crunchbase subsequently confirmed that a threat actor had exf…

unit42.paloaltonetworks.com · medium

BUGSTER actor uses jailbroken Hermes Agent and DeepSeek V4 for credential theft, VoIP fraud planning and Wi-Fi cracking, hitting Indian universities

Unit 42 analyzed the operational environment of a previously unreported, financially motivated, English-speaking actor using the handle BUGSTER. The actor ran the Hermes Agent framework with DeepSeek V4 as its reasoning engine and the Cursor IDE as a secondary tool, with safety controls disabled in both. With AI-generated scripts and reco…