Data Security

ServiceNow has addressed a critical vulnerability within its AI Platform that could have allowed threat actors to impersonate users and execute arbitrary actions.

Security researcher Eaton Zveare uncovered five critical flaws in Bluspark's Bluvoyix shipping and supply chain platform, including the use of plaintext passwords and an unauthenticated API.

Google has begun offering Gemini users the ability to connect their Gmail, photos, search history, and YouTube data for more personalized AI responses.

The Reprompt attack, detailed by Varonis Threat Labs, targets Microsoft Copilot Personal.

The vulnerability, identified as CVE-2026-20805, affects the Windows Desktop Window Manager and allows attackers to leak small pieces of memory information.

An unauthorized third party gained access to student names, school names, year levels, and school-issued email addresses.

Cybersecurity Dive reports data breaches in the healthcare sector increased by twofold between 2024 and 2025, even as the number of compromised patient records significantly declined.