#data-exfiltration
#data-exfiltration
[ follow ]
#prompt-injection #cybersecurity #ransomware #malware #browser-security #extortion #social-engineering
fromTheregister
1 week agoSneaky Mermaid attack in Microsoft 365 Copilot steals data
As a proof of concept, Logue asked M365 Copilot to summarize a specially crafted financial report document with an indirect prompt injection payload hidden in the seeming innocuous "summarize this document" prompt. The payload uses M365 Copilot's search_enterprise_emails tool to fetch the user's recent emails, and instructs the AI assistant to generate a bulleted list of the fetched contents, hex encode the output, and split up the string of hex-encoded output into multiple lines containing up to 30 characters per line.
Information security
Information security
fromIT Pro
2 weeks agoThis new Android attack could let hackers swipe 2FA codes and snoop on private messages - 'Pixnapping' affects Samsung and Google smartphones, but experts warn more could be at risk
Pixnapping enables malicious Android apps to steal displayed pixels from other apps using a GPU side channel, revealing 2FA codes and sensitive data without permissions.
fromThe Hacker News
2 weeks agonpm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels
Webhooks on Discord are a way to post messages to channels in the platform without requiring a bot user or authentication, making them an attractive mechanism for attackers to exfiltrate data to a channel under their control. "Importantly, webhook URLs are effectively write-only," Socket researcher Olivia Brown said in an analysis. "They do not expose channel history, and defenders cannot read back prior posts just by knowing the URL."
Information security
fromThe Hacker News
3 weeks agoNew Research: AI Is Already the #1 Data Exfiltration Channel in the Enterprise
For years, security leaders have treated artificial intelligence as an "emerging" technology, something to keep an eye on but not yet mission-critical. A new Enterprise AI and SaaS Data Security Report by AI & Browser Security company LayerX proves just how outdated that mindset has become. Far from a future concern, AI is already the single largest uncontrolled channel for corporate data exfiltration-bigger than shadow SaaS or unmanaged file sharing.
Information security
Information security
fromDataBreaches.Net
3 weeks agoUpdate on the emerging CL0P extortion campaign targeting Oracle E-Business Suite - DataBreaches.Net
CL0P exploited CVE-2025-61882 to exfiltrate large volumes of Oracle E-Business Suite data; apply Oracle patches and investigate for historical compromise.
Privacy professionals
fromZDNET
4 weeks agoCybercrooks breach Red Hat's private GitLab repos - what we know about affected customers
Red Hat's private GitLab repositories were breached, exposing consulting data and customer engagement reports that may enable attackers to access downstream customer infrastructure.
Information security
fromThe Hacker News
1 month agoResearchers Disclose Google Gemini AI Flaws Allowing Prompt Injection and Cloud Exploits
Three now-patched vulnerabilities in Google's Gemini AI could have allowed prompt and search-injection attacks and user data exfiltration across cloud services and browsing tools.
Information security
fromThe Hacker News
1 month agoRussian APT28 Deploys "NotDoor" Outlook Backdoor Against Companies in NATO Countries
APT28 deployed an Outlook VBA backdoor called NotDoor that monitors emails for a trigger to exfiltrate data, upload files, execute commands, and persist via DLL side-loading.
Information security
fromIT Pro
1 month agoCybersecurity experts issue urgent warning amid surge in Stealerium malware attacks
Stealerium infostealer has surged, exfiltrating credentials, crypto wallets, Wi‑Fi and VPN data via multiple channels and leveraging social‑engineering lures for global campaigns.
Information security
fromThe Hacker News
2 months agoStorm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks
Storm-0501 performs cloud-native data exfiltration, destroys backups, and extorts victims without traditional malware, targeting hybrid cloud and multi-tenant environments to escalate privileges and evade detection.
Information security
fromThe Hacker News
2 months agoShadowSilk Hits 36 Government Targets in Central Asia and APAC Using Telegram Bots
ShadowSilk conducts spear-phishing campaigns to exfiltrate data from government organizations across Central Asia and APAC, leveraging YoroTrooper-related tooling and bilingual operators.
fromIT Pro
3 months agoDevelopers face a torrent of malware threats as malicious open source packages surge 188%
"Attackers are no longer simply experimenting with open source. The numbers are telling us that threat actors have identified data as the most profitable target, and developers as the easiest way in."
Privacy technologies
[ Load more ]