/
loss_type:data × latest_source_host:securityweek.com × limpar

Resultados

7 casos · pág. 1/1

securityweek.com · medium

Ex-OpenAI engineer charged with planting audio bug in executive conference room; prosecutors cite Saudi flight plans and royal family contact

Federal prosecutors say former OpenAI engineer Abdulrahman Alfozan, a 35-year-old Saudi national, was "mere days" from fleeing to Saudi Arabia before his arrest. A San Francisco federal judge (Alex Tse) denied his request for home confinement. Prosecutors allege he secretly installed an audio recording device in an executive conference ro…

securityweek.com · medium

Nikkei discloses theft of 1.83 million records from cloud development service via previously compromised credentials

Japanese media group Nikkei (publisher of The Nikkei and the Financial Times) disclosed a data breach affecting about 1.83 million records held in a cloud service used for system development. On the morning of October 7, attackers used previously compromised credentials to access the service. About 1.68 million records held only non-ident…

securityweek.com · high

Paradigm Healthcare Services breach exposes data of 970,000 Medi-Cal members; TKD and Ridgeway Pharmacy also report breaches

Paradigm Healthcare Services, a San Francisco-based billing processor for Medi-Cal (California's Medicaid program) under a data use agreement with the California DHCS, told the US HHS that a breach affected more than 970,000 people. The company detected unauthorized access to its local network on October 13, 2025. It determined only on Au…

securityweek.com · high

Threat actors abuse open source AI platform Cairn to automate attacks on e-commerce sites, reportedly breaching over 100 organizations

Threat actors are abusing the open source AI platform Cairn, an agent-coordination engine usable as an autonomous penetration testing tool, to automate attacks on hundreds of websites worldwide. AI security firm Norforge found the activity after threat actors left their Cairn panels exposed, following a Gambit Security report on attackers…

securityweek.com · high

UNC7017 Compromises AOMEI Backupper Update Channel in Short-Burst Supply Chain Attacks Delivering CrossRoad and ShinyRoad

Between April and July 2026, the threat actor UNC7017 tampered with the AOMEI Backupper update infrastructure several times to deliver the CrossRoad downloader and the ShinyRoad modular backdoor. Each tampering window lasted only five to ten minutes before reverting to authentic files. This made the campaign hard to detect and suggests it…