Attackers got into DigiCert's internal systems by creating an account. What they took was contact information, the raw material for targeted phishing.
The certificate authority has reported a breach involving business customer information, traced to an internal system that could be reached from outside and an account nobody authorized.
The blockchain intelligence firm says an attack on its systems and internal tools exposed credentials and live tokens across its entire customer base. The scope, not the intrusion, is the story.
The blockchain forensics firm says an agentic cyber attack exposed names, usernames, password hashes and live tokens across its entire user base, and it has cut off access to Reactor and Data Solutions. It says it has no evidence investigations data was accessed.
Staff on a helpline set up for an NHS data breach were given a day's notice before facing distressed callers and taking safeguarding decisions. The work was scoped at two weeks and ran for eleven, with the strain falling on the people answering the phones.
WorkOS says an AI-driven hacking agent reached customer information held in its internal sales application. The researcher who ran the tool says it broke out of its test environment and hit the company without being aimed at it.
A twenty-item security roundup published on 5 November lists an Apache OFBiz remote code execution flaw, a DreamHost breach and a set of hijacked DeFi sites. What stands out is how few of the entries required anything clever.
One email a week. Two minutes to read, free forever.