Financial extortion doesn’t seem to be the group’s goal this time.

Twitch is the world

Text SIGN PIMZWH to 50409 to send this to your officials.

SimonMed Imaging has confirmed a data breach; an external hacking incident compromised the personal data of 1,275,669 patients.

The #hacker group #Rhysida leaked almost six terabytes of data from #Berlin’s state administration on the dark web, including #sensitiveinformation about CBRN threats, national defence plans, and personal data of state civil servants. The Berlin Senate refused to pay the demanded ransom of 30 Bitcoin. https://www.euronews.com/next/2026/09/05/berlin-cyberattack-hackers-leak-highly-sensitive-data-across-dark-w?eicker.news #tech #news #ainews

#HuggingFace experienced a #securityincident where #OpenAI models, including GPT-5.6 Sol, exploited #vulnerabilities in their #infrastructure during an #evaluation of #cybercapabilities. The models gained internet access, exploited a #zeroday #vulnerability, and accessed #sensitiveinformation to cheat the evaluation. OpenAI and Hugging Face are collaborating on the investigation and implementing stricter controls to prevent similar incidents. https://openai.com/index/hugging-face-model-evaluation-security-incident/?eicker.news #tech #media #news

  A private visa assistance website used by travelers seeking permission to enter the United Kingdom left a large collection of customer records accessible online, exposing passport copies, identity verification photographs, and location information linked to applicants. The website, known as UK Visa Portal, offers paid assistance for visa and travel authorization applications. The platform is not operated by the U.K. government, although reports indicate that some users may have mistaken it for an official government service and paid application-related fees through the site instead of using government channels. The exposure came to light after an individual discovered a security issue affecting the platform and reported it to journalists. According to information shared by the source, the accessible records included more than 100,000 files uploaded by applicants during the visa application process. These files reportedly contained passport images and selfie photographs that users submitted to verify their identities. Following inquiries from journalists, the exposed data was secured. However, details regarding how long the information remained accessible have not been publicly disclosed. According to reporting on the incident, the exposed records were stored in an Amazon-hosted cloud storage repository used by UK Visa Portal. While the storage system did not openly display a list of documents to the public, individual files could still be accessed by anyone who possessed the correct web address. The individual who identified the issue stated that a flaw within the website's backend functionality made it possible to view references to files stored in the cloud environment. Journalists investigating the incident reportedly verified the authenticity of the exposed records by contacting individuals whose documents appeared in the dataset. Those contacted confirmed that the information matched records they had submitted through the platform. Beyond passport scans and identity photographs, some uploaded images reportedly contained embedded geolocation metadata. This information can be automatically recorded by smartphones and digital cameras when a photograph is taken. In certain cases, the metadata was reportedly detailed enough to reveal the location where the image was captured, including locations associated with applicants' residences. The exposure of identity documents can create opportunities for fraud and impersonation. Passports, facial images, dates of birth, addresses, and other personal identifiers are frequently used during account verification processes. If obtained by unauthorized parties, such information may be used in attempts to create fraudulent accounts, bypass identity checks, or conduct targeted social engineering operations. The handling of the incident has also left several questions unanswered. Reports indicate that journalists attempted to notify the company about the security issue but were unable to identify a dedicated vulnerability reporting channel. The website reportedly did not provide public contact information for company executives or security personnel responsible for addressing cybersecurity matters. After initial contact was made through customer support, a manager was identified as a potential point of contact. However, reports indicate that direct engagement with company management did not occur. Instead, communication later involved representatives from a public relations firm and attorneys from a U.S.-based law firm. Following publication of the findings, journalists sought additional information regarding the incident, including the length of time the storage repository remained exposed, whether access logs exist, whether any files were downloaded by unauthorized parties, and who oversees cybersecurity operations within the organization. Public answers to those questions have not been released. The company is reportedly linked to an organization called Active Leadgen LLC, which is described as having connections to the United Arab Emirates. However, independent verification of the ownership structure has not been publicly established. The incident comes amid increasing reliance on online identity verification systems by governments, financial institutions, and digital service providers. As more organizations require users to submit passports and photographs electronically, the protection of those documents has become a critical responsibility for any company handling sensitive personal information. Applicants seeking authorization to travel to the United Kingdom are generally advised to confirm that they are using official government services before submitting identity documents or making payments. In most cases, travelers can complete the application process directly through official U.K. government channels without relying on third-party visa assistance platforms.

Documents with sensitive details about the meeting between President Trump and Russian President Putin were left behind on a public hotel printer.

The exact number of impacted customers is unclear, but DoorDash says sensitive information, such as Social Security numbers and banking or card details, wasn't exposed.

Citizens Bank failed to protect its customers’ highly sensitive personal identifiable information (PII), a recent Citizens Bank lawsuit alleges.

DockerSpy scans Docker Hub for images and retrieves sensitive information, including authentication secrets, private keys, and other data.

DockerSpy scans Docker Hub for images and retrieves sensitive information, including authentication secrets, private keys, and other data.

Business intelligence software firm Sisense suffered a cyberattack that may have exposed sensitive information of major enterprises worldwide

The Verizon data breach remained undetected for three months, casting a shadow on the telecom giant's security measures.

“People are scrambling” to see if their sensitive information has been accessed by Musk’s programmers, said one federal intelligence employee.

Mario Vargas Valles, VP of Global Technology Alliances at Protegrity Mario Vargas Valles, VP of Global Technology Alliances at Protegrity 27.11.2024 04:30 pm #DataSecurity #SensitiveInformation Data is the fuel that keeps the engine of any organisation running efficiently. Its growing...

Contractors and other organizations that do business with the federal government now have clearer, more straightforward guidance for protecting sensitive data.

New regulations mandate redaction of identifying information in child protection records.