Pins matching user:CyberDesk

Google's threat researchers said a crew posing as IT support on the phone was talking employees into approving a fake Data Loader app, then bulk-stealing their companies' Salesforce data for extortion.

A federal judge in Las Vegas gave final approval to MGM Resorts' $45 million settlement with customers whose personal data was stolen in the 2019 breach and the September 2023 cyberattack that shut down Strip casinos, with up to $15,000 each for documented losses.

Using OAuth tokens stolen from Salesloft's Drift chatbot, the UNC6395 crew exported data from hundreds of companies' Salesforce instances, hunting support cases for AWS keys, passwords and Snowflake tokens.

The FBI published indicators for two crews stealing companies' Salesforce data, one by phoning staff posing as IT support, the other with stolen Salesloft Drift tokens.

A group using the Cl0p extortion brand began mass-emailing executives, saying it had stolen data from their companies' Oracle E-Business Suite systems and demanding payment.

The gang posted samples from 39 companies' stolen Salesforce data and told Salesforce to pay by 10 October or see about a billion records leaked.

Oracle's out-of-band Security Alert fixed a 9.8-rated, no-login remote code execution flaw in E-Business Suite that Cl0p had exploited to steal data.

CISA put CVE-2025-61882 on its Known Exploited Vulnerabilities list, giving federal civilian agencies until 27 October 2025 to fix Oracle E-Business Suite.

With the gang's leak deadline three days away, Salesforce emailed customers that it would not engage, negotiate with or pay any extortion demand.

When the ransom deadline passed, Scattered Lapsus$ Hunters published stolen Salesforce data of six companies, including 5 million Qantas customer records and 7.3 million Vietnam Airlines email addresses.

Salesforce revoked every token held by Gainsight-published apps and pulled them from the AppExchange after spotting API calls from unrecognised IPs into customers' Salesforce data.

The WorldLeaks extortion gang listed Nike on its leak site on 22 January 2026 and then dumped about 1.4TB of what it said were 188,347 internal Nike design and manufacturing files; Nike said only that it was investigating a potential cybersecurity incident.

Nike began sending breach notices on 25 February 2026 about an intrusion, found on 21 January, into a portal hosted by a third-party service provider that exposed customers' contact, order and payment card information; Nike says no full card details or account credentials were taken.

Qualcomm and Google disclosed a memory-corruption bug in an open-source Qualcomm graphics component, affecting more than 230 chipsets, that 'may be under limited, targeted exploitation'.

Salesforce said a known threat group was mass-scanning public Experience Cloud sites with a modified Mandiant tool and pulling CRM data through overly permissive guest user profiles.

Oracle's Security Alert for CVE-2026-35273, a 9.8-rated no-login remote code execution flaw in PeopleSoft PeopleTools, came as ShinyHunters stole data from over 100 organizations, mostly universities.

Black Hat USA drew more than 23,000 attendees to the Mandalay Bay Convention Center from 1 to 6 August 2026, with over 100 briefings, over 100 trainings and 400-plus exhibitors in its Business Hall.

DEF CON 34 filled the Las Vegas Convention Center's West Hall from 6 to 9 August 2026, handing its attendees an electronic badge built around Andrew "bunnie" Huang's inspectable, open-source Baochip.

Amazon adds cybersecurity veteran Kevin Mandia, who founded Mandiant and sold it to Google for $5.4 billion, to its board of directors and its Audit and Security committees.

Microsoft's largest security update ever patches 966 vulnerabilities, including two Windows privilege-escalation zero-days already exploited in attacks and 105 rated Critical.

The Louisiana identity-verification firm IDScan.net confirmed that hackers took driver's licence data from its cloud - full names, licence numbers and identity numbers from other government documents - for more than 150 million people in the United States and Canada. The data, including licence photos, was posted to a dark web site.

The EU's Cyber Resilience Act reaches its first live phase: manufacturers of any product with digital elements sold in the EU must report actively exploited vulnerabilities and severe incidents to ENISA and their national CSIRT - an early warning within 24 hours, a full notification within 72, and a final report within 14 days.

On 13 October 2026 Microsoft ends support for Office LTSC 2021 and Office 2021, and the third and final Extended Security Updates year for Windows Server 2012 and 2012 R2 expires. After that date neither gets security fixes or technical support from Microsoft.

Oracle's quarterly bundle of security fixes across its on-premises products is due on the third Tuesday of October.

DEF CON 35 is set for 5-8 August 2027 in the Las Vegas Convention Center's West Hall, where DEF CON 34 was held in 2026.

Microsoft's consumer Extended Security Updates programme for Windows 10 22H2 delivers its last security patches. A home Windows 10 PC keeps working after this date but gets no more security fixes, and 12 October 2027 is also the last day anyone can enrol.

Every obligation the Cyber Resilience Act carries comes into force: products with digital elements may only be placed on the EU market if they meet the Act's essential cybersecurity requirements, carry a conformity assessment and are supported with security updates for their declared support period.