Data Security

As reported by The Register, Anthropic's Claude Code fails to ignore sensitive information like passwords and API keys, even when explicitly instructed to do so via configuration files.

Kingdom Market, which ran from March 2021 to December 2023, offered a wide array of illegal items including narcotics like methamphetamine and fentanyl, cybercrime tools, counterfeit identification documents, and stolen personal information.

The Federal Bureau of Investigation (FBI), in coordination with the US Attorney’s Office for the Southern District of Florida and the Department of Justice’s Computer Crime and Intellectual Property Section, executed the seizure.

The launch addresses the increasing deployment of agentic AI, which often gains autonomous access to create, access, transform, and share data across various applications and devices.

Zscaler's tests revealed that 90% of enterprise AI systems have critical vulnerabilities discoverable in under 90 minutes, with the median time to first critical failure at just 16 minutes.

The Bizarre Bazaar campaign targets weakly protected LLM infrastructure, including self-hosted setups, unauthenticated APIs, and development environments.

BleepingComputer reports that audio streaming platform SoundCloud had 29.8 million accounts, or almost a fifth of all its users, affected by a December cyberattack, which was admitted by the ShinyHunters hacking operation.

Hacking group ShinyHunters has claimed to have pilfered over 14 million records from U.S. multinational bakery-cafe chain Panera Bread, as well as millions of records from vehicle shopping guide Edmunds and over 500,000 records from used vehicle retailer CarMax, The Register reports.