Data exfiltration Stories

Global Stories

Data exfiltration stories

OpenAI agent hacks Hugging Face in cyberattack report

Security experts warn defences are lagging after an AI system allegedly escaped testing and stole credentials in a live breach.

By Sofiah Nichole Salivio • 4 min read • Last week

Malware

Check Point CTO on AI's double-edged sword

AI is shrinking the gap between vulnerability disclosure and real-world exploitation to hours, forcing security teams to adapt fast.

By Donovan Jackson • 5 min read • Last week

Malware

CrowdStrike warns of malware targeting AI coding tools

Developers using AI assistants could face stolen credentials and poisoned repositories as the worm hides inside normal coding workflows.

By Sean Mitchell • 4 min read • Last week

Network Security

Lampion malware campaign targets users in Portugal

Acronis said 94.6% of detections were in Portugal as the banking trojan used phishing lures and layered evasion to infect victims.

By Mark Tarre • 4 min read • Last week

Ransomware

Asia-Pacific cyber threats rise on AI & geopolitics

AI-driven phishing and state-linked espionage are pushing Asia-Pacific incident numbers higher, with data breaches still the biggest threat.

By Mark Tarre • 5 min read • Last week

Data Protection

ASC-IT launches Darkmoon for private AI pentesting

The platform lets security teams run AI pentests without exposing customer infrastructure data to external models.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Malware

The Gentlemen tops ransomware rankings in Q2 review

Ransomware activity stayed elevated in Q2, with 2,252 named victims and The Gentlemen overtaking Qilin to top the rankings.

By Mark Tarre • 5 min read • This month

Data Protection

Google Cloud unveils AI security blueprint for GKE

The framework targets CISOs and platform teams as they move AI systems into production, amid rising risks from prompts, models and outputs.

By Sean Mitchell • 4 min read • This month

Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • This month

Malware

AI deserves our appreciation, but only if we're honest about what we're appreciating

AI is speeding up attacks as well as defence, with high-risk prompts and unsupervised agents exposing firms to new security gaps.

By Robert Falzon • 4 min read • This month

AI Security

OpenAI unveils GPT-Red to harden GPT-5.6 against attacks

The new safety model slashes prompt-injection risks in GPT-5.6, as OpenAI says it found flaws faster than human testers and then fed fixes back into production.

By Mark Tarre • 4 min read • This month

Cloud Security

Mandiant warns on exposed Cloud Run serverless apps

Exposed serverless apps can let attackers steal tokens, read secrets and take over cloud projects if weak code is left unpatched.

By Mark Tarre • 4 min read • This month

Data Protection

Executives urge stronger AI foundations across sectors

Across healthcare, cyber security and data management, leaders warned that AI will stall without stronger infrastructure, workflows and trusted data.

By Joseph Gabriel Lagonsin • 5 min read • This month

Malware

Akamai warns commerce is top target for AI bot attacks

Nearly half of commerce traffic across Akamai's network came from AI bots by late 2025, raising fraud and DDoS risks for retailers.

By Sean Mitchell • 4 min read • This month

Multi-factor authentication

Phishing toolkits target Microsoft 365 MFA in surge

Account takeovers are becoming harder to stop as attackers use real-time code theft and fake login pages to bypass Microsoft 365 MFA.

By Mark Tarre • 5 min read • This month

Data Protection

Fortinet adds AI oversight & data controls to FortiEndpoint

Security teams gain tighter endpoint oversight of shadow AI and sensitive data, as Fortinet folds new controls into FortiEndpoint from the third quarter.

By Mark Tarre • 4 min read • This month

Software-as-a-Service

Google Cloud expands Claude support on Agent Platform

The update gives enterprises managed access to Anthropic's models with built-in failover, data residency and compliance controls for production AI use.

By Sean Mitchell • 4 min read • This month

Stories from Other Regions

Data exfiltration stories

Data Protection

Which New Zealand companies are most likely to be targeted by Ransomware hackers?

Mid-market firms in financial, insurance and consulting services face the highest ransomware risk, with attacks now striking faster and costing far more.

By Anthony Cooke • 4 min read • Today