Author: Staff Writer

Essential Insights CrowdStrike fired an insider who leaked company screenshots to cybercriminals, confirming no system breach occurred. The leaked images, including access details to their dashboards and SSO panels, were posted by threat group Scattered Lapsus$ Hunters. The hackers falsely claimed to have exploited CrowdStrike via Gainsight, but the company stated its systems were never compromised. The threat actor paid the insider $25,000 for access, and the group claims to have targeted over 1,000 Salesforce customers and other high-profile victims. What’s the Problem? CrowdStrike, a renowned cybersecurity company, recently exposed an insider who leaked sensitive screenshots of its internal dashboards.…

Quick Takeaways Harvard University’s Alumni Affairs and Development systems were breached via a voice phishing attack, exposing personal data of students, alumni, donors, staff, and faculty, but not sensitive financial information like Social Security or payment details. The compromised data includes contact information, event attendance, donation records, and biographical details related to fundraising efforts. Harvard immediately responded by removing attacker access, notified affected individuals, and urged vigilance against suspicious communications, while collaborating with law enforcement and cybersecurity experts. This breach follows earlier incidents at Harvard and other Ivy League schools, highlighting ongoing vulnerabilities in higher education institutions’ cybersecurity defenses. Key…

Summary Points SitusAMC, a major provider of loan services with 5,000 employees, experienced a data breach involving sensitive personal information from mortgage applications. The incident is contained, with services fully operational, and no ransomware was involved—indicating threat actors aimed at data theft rather than system disruption. The breach’s full scope is still under investigation, but the company has taken security measures like credential resets and firewall updates to prevent further damage. The affected data includes Social Security numbers, financial details, and employment records, highlighting significant privacy and security concerns. The Issue SitusAMC, a company with about 5,000 employees that provides…

Essential Insights Iberia’s customer data—including names, emails, and frequent flyer numbers—was stolen in a breach linked to a supplier hack, although passwords and full credit card info remained secure. The airline quickly addressed the breach, enhanced account protections with verification codes, and notified law enforcement, but did not disclose the breach date or the compromised supplier. A hacker claiming to have stolen 77GB of sensitive data, including technical aircraft info and internal documents, sought $150,000 for the data, suggesting motives like espionage or resale. The intrusion occurred roughly a week after the hacker’s boast, raising concerns about targeted cyberattacks within…

Quick Takeaways Cox Enterprises confirmed its Oracle E-Business Suite was breached between August 9-14, exposing personal data of nearly 9,500 individuals, with attackers leaking 1.6 TB of stolen files. Over 100 organizations across various sectors—including major companies like Logitech, The Washington Post, and American Airlines—have been targeted or affected by the Cl0p ransomware campaign linked to the Oracle EBS attack. The cyberattack is attributed to Cl0p, potentially associated with the FIN11 threat group, which has previously targeted organizations using similar file transfer vulnerabilities, raising concerns over widespread exploitation. The scope of the breach may be exaggerated to pressure victims into…

Summary Points A critical security flaw in Microsoft Windows Server Update Services (CVE-2025-59287) was exploited by threat actors to gain initial access and distribute malware. Attackers used the vulnerability to deploy ShadowPad, a modular backdoor linked to Chinese state-sponsored hacking, via legitimate utilities like certutil and curl. ShadowPad’s installation involves DLL side-loading techniques, enabling it to evade detection and maintain persistence on infected systems. The vulnerability’s quick weaponization after public disclosure highlights its high severity, enabling remote code execution with system privileges and increasing attack impact. Key Challenge Recently, a security vulnerability in Microsoft Windows Server Update Services (WSUS) was…

Essential Insights Non-Human Identities (NHIs) are machine identities crucial for securing cloud environments, managing access, and preventing breaches across industries like finance and healthcare. Effective NHI management involves comprehensive oversight from discovery to decommissioning, utilizing automation and AI-driven analytics to reduce human error and adapt to evolving threats. Automating NHI processes enhances security, improves operational efficiency, ensures compliance, and provides better visibility and control over digital assets. As multi-cloud strategies grow, unified NHI management ensures security consistency across platforms, with AI and automation key to addressing complexities and future cyber threats. What’s the Problem? The story explains how Non-Human Identities…

Top Highlights In September 2025, Anthropic disclosed the first known AI-driven cyber espionage campaign, where a Chinese state-sponsored actor manipulated the Claude Code tool to target 30 global organizations. The attack demonstrated that AI can be orchestrated for sophisticated cyber espionage, requiring significant human effort despite being AI-enabled. This development underscores the emerging threat of AI-automated cyberattacks, raising concerns about cybersecurity vulnerabilities and the need for robust defenses. Anthropic responded by disrupting the campaign and emphasizing the importance of understanding AI’s role in future cyber threats, highlighting implications for global security. Key Challenge In September 2025, Anthropic revealed the first…

Essential Insights Non-Human Identities (NHIs) are critical cybersecurity components requiring comprehensive management throughout their lifecycle to prevent vulnerabilities in cloud environments. Effective NHI management enhances risk mitigation, compliance, operational efficiency, visibility, and cost savings, especially in regulated sectors like finance and healthcare. AI and behavioral analytics are transforming NHI security by enabling rapid analysis, threat prediction, and anomaly detection, thereby strengthening proactive defenses. Cross-department collaboration, regulatory alignment, and continuous evolution of technologies are essential to maintaining secure, compliant, and resilient NHI frameworks amidst cloud complexities. Underlying Problem The article explores how organizations manage and protect Non-Human Identities (NHIs)—the digital counterparts…

Quick Takeaways Non-Human Identities (NHIs) are crucial for secure machine communication, ensuring data integrity, and enabling automated, reliable operations in cloud environments. A comprehensive lifecycle management of NHIs—discovery, classification, threat detection, and remediation—reduces risks, enhances compliance, and boosts operational efficiency. Effective NHI management provides real-time visibility, supports compliance audits, and facilitates proactive threat detection, safeguarding Agentic AI systems. Integrating NHIs with DevOps and human oversight strengthens security, streamlines workflows, and maintains data integrity, offering organizations a strategic edge in cybersecurity. The Issue The article explains that Non-Human Identities (NHIs) are crucial in protecting data integrity in modern AI systems, especially…