Resilient It

Terabytes of credentials leaked in massive supply-chain attack -

Terabytes of credentials leaked in massive supply-chain attack The data was scraped and exfiltrated from 2,500 users of a compromised AI package.

Corporate Data Stolen in Levi Strauss Cyberattack -

Corporate Data Stolen in Levi Strauss Cyberattack Using social engineering, a threat actor accessed the computers of three employees and exfiltrated data from them.

Valve notifies Steam hardware customers of a data breach -

Valve notifies Steam hardware customers of a data breach Video game publisher and digital distribution giant Valve is notifying Steam hardware customers in Europe that hackers stole their data after hacking its shipping partner, CEVA Logistics.

OpenAI's models shared hacking tips on a secret messaging board before Hugging Face breach -

OpenAI’s models shared hacking tips on a secret messaging board before Hugging Face breach Researchers from OpenAI said the company is “dramatically scaling up” its security efforts after discovering that two of its models orchestrated a hack without human prompting last month.

Weaponized Email AI Assistants Could Help Attackers Hijack Accounts -

Weaponized Email AI Assistants Could Help Attackers Hijack Accounts Researchers demonstrate how attackers could abuse built-in email chatbots to evade detection, impersonate trusted employees, compromise executive accounts, and facilitate financial fraud.

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts -

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts Unit 42 details three Chrome passkey attack paths that could let Windows malware bypass verification or recover synced private keys after compromise.

CareCloud Breach Exposes Medical and Financial Data of 345,000 - Security Affairs -

CareCloud Breach Exposes Medical and Financial Data of 345,000 - Security Affairs CareCloud disclosed a breach affecting 345,000 people after hackers stole medical and financial data from its AWS-hosted systems.

OpenAI-Hugging Face attack doesn't mean agents are evil – unless you tell them to be -

OpenAI-Hugging Face attack doesn't mean agents are evil – unless you tell them to be Attack models gonna attack

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable -

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable SourTrade malvertising uses Bun and browser workers to assemble per-session Windows executables, limiting simple hash detection across 12 countries.

Nvidia and Tech Giants Launch AI Security Alliance -

Nvidia and Tech Giants Launch AI Security Alliance The Nvidia-led coalition aims to give defenders more open tools for testing, auditing and protecting AI models and agents.