data leak
5 stories
Crooks Buy Expired Domains for Malware Delivery, Other Threats Detailed
Cybercriminals are exploiting expired domain names to distribute malware, a tactic highlighted in a recent security newsletter. The newsletter also covers a range of other threats including zero-day exploits in macOS and GeoServer, a data leak affecting Chess.com users, and attacks targeting Adobe Commerce and SharePoint.
Chess.com Data Leak Exposes 7.3 Million Users Via Scraping
A dataset containing information from over 7.3 million Chess.com user profiles has been leaked online. Evidence suggests the data was obtained through large-scale scraping rather than a direct server breach. The leaked information includes usernames, real names, email addresses, countries, chess ratings, and subscription tiers, but notably excludes passwords and payment details.
'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows
A vulnerability dubbed GitLost leaks private data from GitHub Agentic Workflows. An unauthenticated attacker can craft a public GitHub Issue to silently exfiltrate data from private repositories.
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
Noma Security demonstrated that a public GitHub Issue can trick GitHub Agentic Workflows into leaking private repository data. A seemingly innocuous issue on a public repo can be crafted to exfiltrate private contents.
Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants
A now-patched critical session isolation flaw was found in the enterprise generative-AI platform Writer. It could have let agent previews leak session tokens, enabling cross-tenant compromise.