Data Security

Infiltration of internal HPE email boxes within the Office 365 environment through a compromised account in May 2023 enabled Midnight Blizzard hackers to access mailbox data from its workers in the cybersecurity, business, and go-to-market teams, according to HPE.

Such an extensive OpenAI account credential theft may have been achieved by exploiting vulnerabilities or securing admin credentials to infiltrate the auth0.openai.com subdomain, according to Malwarebytes researchers, who noted that confirmation of the leak's legitimacy would suggest emirking's access to ChatGPT conversations and queries.

Aside from delivering unencrypted device and mobile app registration information to Volcano Engine servers owned by TikTok parent firm ByteDance, DeepSeek's iOS app has also been leveraging an insecure symmetric encryption algorithm, a hardcoded encryption key, and old initialization vectors, an audit from NowSecure showed.

Eight of the 19 states with consumer privacy data laws that were evaluated by the two organizations were deemed ineffective.

The hacker reportedly used a single compromised employee password to log into a “Maintenance Access” function, forgoing the use of malware or sophisticated attack methods.

Researchers at MITRE estimated that no quantum computer capable of decrypting RSA-2048 encryption, currently in use for protecting classified information, will exist until at least 2055 to 2060 unless unexpected breakthroughs occur.

DeepSeek could be exploited by the Chinese government to facilitate surveillance and misinformation operations, according to the bipartisan bill, which also moves to prohibit any AI apps developed by DeepSeek's parent firm High-Flyer while offering exemptions for research and national security purposes.

Most of the increase was fueled by a breach involving more than three billion email addresses from older breaches, which were primarily from Russia, the U.S., and China, according to Surfshark.