Data Security

MITRE has regarded cross-site scripting flaws as the most common and severe software vulnerabilities this year, followed by out-of-bounds write, SQL injection, cross-site request forgery, and path traversal issues.

China’s campaign against U.S. telecoms has been ongoing for years.

SF Ballet Company was initially targeted by Meow, also known as MeowCorp or MeowCorp2022, which admitted to having exfiltrated more than 40 GB of data, including employees' personal details, payroll and work-related information, legal and insurance documents, financial files, contracts and commercial agreements, and medical records.

Infiltration of Finastra's internally hosted file transfer platform, which was only discovered earlier this month, was likely conducted through stolen credentials and has resulted in the exfiltration of customer information.

Threat actors who compromised Great Plains' systems between Sep. 5 and 8 were able to copy, encrypt, and exfiltrate files including individuals' names, Social Security numbers, demographic details, driver's license numbers, health insurance information, and diagnosis and medication details, according to the medical center, which did not name its attackers.

Infiltration of the California-based firm's system resulted in the exfiltration of individuals' names, Social Security numbers, gender, home addresses, employment status, employee numbers, hire and role-start dates, supervisors and departments, and termination dates.

Thirty-two of the listed victims have been included in the Akira ransomware site's "leaks" section for the first time, reported Cyberint researcher Adi Bleih, who noted that the unprecedented data exposure was more likely part of an effort to tout its expanding operations following a relative dearth of postings from August to October.

The rise of public data sources—ranging from social media and blogs to leaked databases and dark web forums—offers new opportunities for real-time threat detection and risk management.