data leak news
5 stories
Crooks Buy Expired Domains for Malware Delivery, Other Threats Detailed
Cybercriminals are increasingly acquiring expired internet domains to host malware and execute other malicious activities, according to recent security reports. This tactic leverages previously legitimate domain names, which can lend an air of trustworthiness to their operations.
Chess.com Data Leak Exposes 7.3 Million Users Via Scraping
A 15.5 GB file containing records for over 7.3 million Chess.com users has appeared on data leak forums, offered freely without any ransom demands. Technical analysis confirms the data is authentic and recent, but evidence suggests it was obtained through large-scale scraping rather than a direct breach of Chess.com's servers.
'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows
A newly identified vulnerability, named GitLost, has been discovered that allows for the exfiltration of private data from GitHub's Agentic Workflows. The flaw enables an unauthenticated attacker to exploit a public GitHub Issue to silently steal information from private repositories.
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
Researchers at Noma Security have uncovered a vulnerability in GitHub's Agentic Workflows that could allow malicious actors to exfiltrate private repository data. The exploit leverages a public GitHub Issue to trick the workflow system into disclosing sensitive information from private repositories.
Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants
A critical security vulnerability in the enterprise generative AI platform Writer has been patched, addressing a flaw that could have allowed agent previews to leak session tokens and potentially lead to cross-tenant compromise. The issue, identified as a session isolation flaw, posed a significant risk to organizations utilizing the platform for their AI-driven operations.