Data Security

Widely used Android AI photo identification apps have exposed sensitive user data, which has already been obtained by threat actors, according to Cybernews.

TechCrunch reports that Harvard University and the University of Pennsylvania had data purportedly stolen from their respective systems in separate breaches last year leaked by the ShinyHunters hacking operation, which laid claim to both attacks.

The breach involved a single Coinbase contractor accessing customer data, including names, email addresses, phone numbers, and KYC information.

Cybernews reports that more than 8.7 billion Chinese records have been spilled by an unprotected Elasticsearch cluster in what is among the largest exposures in the open-source distributed search and analytics engine.

Orion's platform employs AI to understand data usage patterns within an organization, rather than relying on predefined rules.

Security researchers discovered four extensions on the Open VSX marketplace that were compromised and used to deliver a macOS infostealer.

The Everest gang claimed to have stolen 1.4 terabytes of internal documents and client information.