Data Security

Novel backdoor leveraged in Turla attacks Attacks with the novel TinyTurla-NG backdoor have been deployed by Russian state-backed threat operation Turla, also known as Secret Blizzard, Pensive Ursa, Iron Hunter, and Venomous Bear, against several non-governmental organizations across Poland between December and late January, according to The Hacker News.

File upload features added recently to generative AI platforms represent a new and bigger data pipe for sensitive information to wander outside corporate networks.

Major Minnesota-based regional internet service provider U.S. Internet had internal emails and emails from thousands of individuals served by its Securence division spanning over a decade exposed due to an unsecured server, according to Krebs on Security.

Nearly 385M records exposed by misconfigured Zenlayer cloud database Global on-demand edge cloud services provider Zenlayer had almost 385 million records, or 57.46 GB of data, exposed as a result of a misconfigured cloud database that did not have any password protection, Hackread reports.

All users of the Glow fertility tracking app totaling nearly 25 million individuals had their personal data exposed as a result of a vulnerability in the app's online forum, according to TechCrunch.

Improved defenses against insider data breaches have been aimed by California-based data security startup Cyberhaven with its new Linea AI artificial intelligence service that integrates human-like insight in organizational data analyses, reports SiliconAngle.

The U.S. Department of Defense has begun informing current and former employees, partners, and job applicants regarding the potential exposure of their personally identifiable information stemming from a service provider's inadvertent leak of several emails between Feb. 3 and Feb. 20, 2023, reports DefenseScoop.