Incidents tagged Data Exposure

Chinese AI Penetration Tool Traces Found on Hacking Server in South Korea's Shinhan Bank Breach finance.biggo.com

Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach research, including Verizon's annual Data Breach Investigations Report. This article explains what identity visibility means in IAM, why cloud and multicloud environments complicate it, which capabilities matter in

The AI Security Problem Is Bigger Than the Hugging Face Breach HackerNoon

Autonomous AI agent hit Spanish firm with vulnerability scans before accessing files and data TechRadar

Spain reports first data breach involving autonomous AI agent Help Net Security

One AI and two trained eyes delved into the heavily padded leaks

A data theft campaign has targeted Fortune 500 companies, specifically exploiting Azure cloud environments for sensitive information exfiltration. This incident underscores critical vulnerabilities in cloud infrastructure and the ongoing risk associated with insecure cloud deployments.

A supply chain attack compromised LiteLLM via a poisoned Trivy dependency, leading to the deployment of malicious LiteLLM versions (1.82.7/1.82.8) that exfiltrated 153GB of corporate credentials. This dataset, comprising AWS keys, API tokens, and other secrets from CI runner environments, impacts nearly 2,500 organizations, underscoring critical software supply chain vulnerabilities.

Data breach costs surged to a record average of $4.99 million, notably escalating with AI-driven attacks that exploit vulnerabilities faster and leverage advanced techniques like deepfakes and AI-generated malware. Critical security gaps in AI deployments, including widespread lack of access controls for AI models and pervasive shadow AI, are contributing to increased incidents, data compromise, and operational disruptions.

Attackers are actively exploiting critical vulnerabilities, including Adobe ColdFusion (CVE-2026-48282) and Langflow (CVE-2026-55255) for credential harvesting. Microsoft released fixes for a Windows Defender local privilege escalation flaw (CVE-2026-50656), and ClamAV patched seven scanner bugs, underscoring ongoing patch management challenges.

OpenAI says no user data breached after security issue with open-source library Reuters

U.S. CISA adds a flaw in BerriAI LiteLLM to its Known Exploited Vulnerabilities catalog Security Affairs

Evidence indicates that Claude Code is affected by a security issue. Reported affected versions include 2.1.88. Exploitation evidence is classified as confirmed in the wild.

An internal Meta AI agent provided erroneous instructions to an engineer, leading to the accidental exposure of sensitive user and company data to other employees for two hours. This incident highlights a vulnerability in agentic AI systems where a lack of contextual awareness can prompt actions with unintended data exposure consequences.

Malicious Chromium-based browser extensions are impersonating legitimate AI tools to harvest sensitive LLM chat histories and browsing data, impacting over 900,000 installs and 20,000 enterprise tenants. These extensions exfiltrate proprietary code, internal workflows, and confidential data to threat actor-controlled infrastructure, leading to widespread information leakage.

A reported vulnerability in Microsoft 365 Copilot could lead to the exposure of sensitive email content through its AI summarization feature. This flaw poses a risk of unauthorized data disclosure, potentially compromising user privacy within the Microsoft 365 ecosystem.

Microsoft 365 Copilot Chat was found to bypass Data Loss Prevention (DLP) policies, summarizing emails with "confidential" sensitivity labels and exposing protected content. This vulnerability, tracked as CW1226324, stemmed from a code issue allowing Copilot to access emails in Draft and Sent folders despite configured restrictions, leading to unintended information disclosure within the chat interface.

An AI chat application reportedly exposed 300 million messages belonging to 25 million users, as indicated by the article title. However, detailed technical information regarding the nature of the data exposure, the underlying vulnerability, or specific exploitation methods could not be retrieved due to a forbidden access error during scraping.

The OpenClaw AI bot farm is plagued by critical security flaws, including a one-click remote code execution vulnerability and two command injection vulnerabilities. These issues are exacerbated by a repository of 341 malicious extensions, an exposed database, and prevalent prompt injection attacks, leading to a wave of malware, data exposure, and significant financial costs for users.

A misconfigured Supabase database, with an exposed API key in client-side JavaScript and disabled Row Level Security (RLS), granted unauthenticated full read and write access to the Moltbook platform's production data. This vulnerability resulted in the exfiltration of 1.5 million API authentication tokens, over 64,000 email addresses, private messages containing third-party API credentials, and enabled unauthorized content modification.