They Did Not Steal Passwords. They Stole the Map of Who to Attack Next.
Alleged Entra directory theft exposed organisational maps rather than passwords. Treat bulk directory reads as a high-impact identity event.
News
The Private Keys Were Safe. The Address of the Person Holding Them Was Not.
SafePal says private keys and funds were not exposed, but order records linked wallet ownership to names, contact details and home addresses.
They Never Became Customers. Their Identity Data Was Still in the Breach.
A Heights Finance cloud-platform breach reached borrowers, applicants and people who only enquired. Data retention turned a past interaction into a present risk.
Patching SharePoint Did Not Revoke the Keys Attackers Had Already Stolen.
A critical SharePoint deserialization flaw is under active exploitation. Applying the security update closes the entry point, but stolen machine keys can preserve attacker access unless recovery goes further.
An EU Data Order Can Now Cross Borders Directly. The Provider May Have Eight Hours.
The EU e-Evidence Regulation makes cross-border data orders an eight-hour operational challenge for service providers, not merely a legal process.
France Thought It Had a Staff-Data Breach. The Same Incident May Have Reached Millions of Students.
France’s Education Ministry is testing whether a breach first described as staff-only reached student records across a fragmented national data estate.
The Attack Was Stopped at the Edge. The University Still Had to Delay the Semester.
UT San Antonio says an intrusion attempt was stopped before core systems, yet precautionary shutdowns disrupted services and delayed fall classes.
Clearing Cookies Did Not Break the Link. The Browser Called the App Through Localhost.
Meta Pixel and Yandex Metrica used Android localhost connections to link browser activity with native-app identities, bypassing familiar privacy controls.
US Charges Say Iran’s Academic Espionage Contractors Also Sold the Data They Stole.
US prosecutors allege Mabna Institute hackers served Iranian state clients while selling stolen research and university access through commercial sites.
The Firewall Did Not Need to Be Breached. Reloading It Was Enough.
Cisco says attackers are exploiting a denial-of-service flaw in ASA and Secure Firewall Threat Defense. The lesson is not only to patch the VPN edge, but to design for the moment the security device itself becomes unavailable.