Stolen OAuth tokens expose Palo Alto customer data Summary Palo Alto Networks (PAN) has notified customers that criminals used OAuth credentials stolen from Salesloft’s Drift platform to access and exfiltrate…
Zscaler latest victim of Salesloft Drift attacks, customer data exposed Summary Zscaler has confirmed that some of its Salesforce data was accessed after OAuth tokens were stolen from Salesloft’s Drift…
Microsoft rewarded for security failures with another US government contract Summary The General Services Administration (GSA) has signed a OneGov agreement with Microsoft that centralises purchases for federal IT and…
How big will this Drift get? Cloudflare cops to Salesloft Drift breach Summary Cloudflare has confirmed its Salesforce instance was accessed after the Salesloft Drift compromise, exposing customer support data…
Hackers Threaten To Submit Artists’ Data To AI Models If Art Site Doesn’t Pay Up Summary Ransomware group LunaLock claimed to have breached Artists&Clients, a site connecting independent artists with…
Frostbyte10 Bugs Put Thousands of Refrigerators At Major Grocery Chains At Risk Summary Armis discovered ten vulnerabilities—collectively dubbed Frostbyte10—in Copeland E2 and E3 refrigeration controllers used widely by supermarket chains…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-powered offensive research pipeline built by two Israeli security researchers — dubbed Auto Exploit — used prompts to a large language…
Hackers Threaten To Submit Artists’ Data To AI Models If Art Site Doesn’t Pay Up Summary Ransomware group LunaLock claimed to have breached Artists&Clients, a site connecting independent artists with…
Frostbyte10 Bugs Put Thousands of Refrigerators At Major Grocery Chains At Risk Summary Security firm Armis disclosed ten vulnerabilities collectively called “Frostbyte10” in Copeland E2 and E3 controllers, devices widely…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline dubbed “Auto Exploit,” built by two Israeli security researchers, uses LLM prompts plus CVE advisories and open-source…
