Data Security

The breach was claimed by the ShinyHunters extortion group, which threatened to leak the data by April 30 if a ransom was not paid.

More than 80 browser extensions with over 6.5 million users have been legally selling procured information for profit, reports Cybernews.

Checkmarx has disclosed that its source code, API keys, MongoDB and MySQL credentials, and other sensitive information exposed by the Lapsus$ hacking operation were obtained from a GitHub repository that was breached as part of a supply chain attack by the TeamPCP threat group last month, according to The Register.

Researchers revealed several “amateur” mistakes made in Windows, Linux and ESXi variants.

According to Security Affairs, Italy is preparing to extradite Xu Zewei, a Chinese national arrested in 2025, to the United States to face charges of cyber-espionage.

An AI coding agent, Cursor running Anthropic's Claude Opus 4.6, deleted PocketOS's production database and all volume-level backups in a single API call to infrastructure provider Railway.

Agentic AI can't succeed without trust, and trust begins with mapping how data is accessed, used, and protected.

The attack exploited a GitHub Actions script injection flaw, allowing the attacker to inject shell code that exposed a GitHub token.