‘Identity is the new battleground’: Why your IT helpdesk is suddenly getting a lot of bizarre calls

Okta vishing attacks rely on impersonation and urgency, allowing attackers to manipulate support staff and quickly escalate into large-scale data breaches.
…

Anthropic’s Mythos breach was humiliating
Anthropic’s Mythos breach was humiliating

Anthropic’s tightly controlled rollout of Claude Mythos has taken an awkward turn. After spending weeks insisting the AI model is so capable at cybersecurity that it is too dangerous to release publicly, it appears the model fell into the wrong hands anyway. According to Bloomberg, a “small group of unauthorized users” has had access to […]

UK Biobank’s 500,000 genomes were listed for sale on Alibaba. The breach came from inside the system.
UK Biobank’s 500,000 genomes were listed for sale on Alibaba. The breach came from inside the system.

Summary: Genetic, medical, and lifestyle data from all 500,000 UK Biobank volunteers was listed for sale on Alibaba after three Chinese research institutions with legitimate access violated their data-sharing agreements. The data was de-identified but …

Vercel identifies more accounts ‘with evidence of prior compromise’ exposed during security incident

The compromise was bigger than initially thought, and it seems some accounts were broken into even before that.

Vercel says some of its customers’ data was stolen prior to its recent hack

The app and website hosting company has found evidence of a second compromise of customer accounts after expanding its initial investigation following a breach in early April.

Surveillance vendors caught abusing access to telcos to track people’s phone locations, researchers say

The Citizen Lab found two separate surveillance vendors abusing the backbone of cellular networks to spy on several victims across the world.

UK security agency officially declares passkeys superior to passwords – passkeys should be the ‘first choice’ for authentication

Passkeys have come a long way in just four years and are now being recommended as the number one authentication method.
…

‘We will reveal their identity photos, names, location, and other’: Experts reveal extraordinary battle between rival ransomware gangs — and how victims can get their data back

A ransomware group is threatening to expose a rival’s members while offering victims decryption, creating a risky and unusual cybercrime conflict.
…