Salesforce is investigating unusual activity in Gainsight applications that may have exposed customer data. The hacking group ShinyHunters claims responsibility and threatens to escalate if Salesforce doesn’t cooperate. Both companies stress the issue stems from external app connections, not Salesfo
A coordinated campaign using AI-generated videos of fake New Yorkers is attacking mayor-elect Zohran Mamdani. The “Citizens Against Mamdani” accounts appear across multiple platforms, using hyper-realistic deepfakes to create artificial opposition. Experts warn this represents a dangerous evolution
DoorDash has confirmed a data breach where hackers accessed customer personal information including home addresses. The company says the incident occurred through an employee social engineering scam but hasn’t revealed when it happened.
A staggering 97% of companies worldwide have experienced negative impacts from supply chain security breaches according to BlueVoyant’s latest report. This represents a significant increase from 2024 figures, highlighting growing vulnerabilities in third-party relationships despite increased awarene
Cloudflare’s global outage yesterday wasn’t a cyber-attack but a self-inflicted software update error. The company initially believed it was experiencing a hyperscale DDoS attack before discovering the true cause. A permissions change caused configuration files to double in size, crashing systems wo
Major internet outages from Cloudflare, Microsoft Azure, and AWS have become increasingly disruptive in 2025. The problem isn’t more failures – it’s that everyone depends on the same few providers. When one goes down, everything goes down.
Cybercriminals are using large language models to create AI-powered attacks that target AI infrastructure. Researchers found over 230,000 vulnerable Ray servers being exploited to mine cryptocurrency and launch DDoS attacks. The operation shows AI systems can be hijacked to attack other AI systems i
AT&T has agreed to a $177 million settlement covering two major data breaches that exposed sensitive customer information. Current and former customers may be eligible for payments ranging from tiered cash awards to thousands in documented losses. The deadline to file claims is December 18, 2025.
Eurofiber’s French business suffered a cyberattack where criminals exploited a vulnerability in its ticket management platform and stole stored data. The company reported the extortion-related incident to French cybersecurity agencies but hasn’t confirmed whether ransom was paid. Customer-facing ser
Virtual authenticators are the software-based approach most password managers use for passkey authentication. Unlike platform authenticators tied to specific devices, they offer cross-platform compatibility and advanced features. This matters because 98% of users still fall for password phishing des
