Data Breach

Data Breach, data breach alert, data leak, data leakage, security incident, breach investigation, breach response, credential leak, personal data exposure, data theft, leaked database, exposed records, account compromise, password leak, corporate data breach, remote code execution, cyber espionage

Page 3

Cybersecurity

2.86 Billion Credentials Flood Criminal Markets — How Infostealers and Initial-Access Brokers Are Reshaping Risk

Stolen login data has become a commodity so abundant that it’s now cheap to buy in bulk — and alarmingly effective when attackers use it to pivot into corporate environments. In 2025, researchers reported roughly 2.86 billion compromised credentials traded across underground markets. That scale changes the calculus of identity: a correct username and password no longer prove much when attackers can acquire massive volumes of records, cookies, and browser…

Saugata DattaAug 12, 20264 min read248

AWS

Amazon Faces Months of Repairs After Drone Strikes Cripple Middle East Data Centers

Amazon Web Services says recovery from drone strikes that hit its data centers in the United Arab Emirates and Bahrain will be measured in months, leaving customers in the region facing prolonged disruption and prompting a broader rethink of investments in Middle East infrastructure. The attacks, part of a wider bout of regional hostilities, knocked core compute racks offline, triggered flooding when fire suppression systems activated, and damaged cooling systems—problems…

Saugata DattaMay 2, 20263 min read307

Artificial Intelligence

Meta inks deal for solar power at night, beamed from space

The race to keep massive AI workloads powered around the clock has led Meta to sign a capacity reservation agreement with Overview Energy, a startup developing spacecraft that collect solar energy in space and convert it to near-infrared light beamed at large terrestrial solar farms. The deal — for up to 1 gigawatt of capacity — is a notable early commercial commitment for a technology that, if it scales, could…

Saugata DattaApr 27, 20263 min read299

Azure

Microsoft Outlook.com Hits Service Degradation: What Happened and How to Prepare

On April 27, 2026, Microsoft acknowledged a service degradation affecting Outlook.com after users across multiple regions reported problems accessing their inboxes. The company’s Microsoft 365 Status account on X confirmed intermittent issues, and Microsoft’s service health dashboard classified the incident as a “Service Degradation” rather than a full outage. For many organizations and individual users, the disruption meant delayed email delivery, pages that failed to load, or an inability to…

Saugata DattaApr 27, 20264 min read301

Cybersecurity

Hackers Leverage Microsoft Teams to Breach Organizations: Inside UNC6692’s SNOW Campaign

In late 2025 and into early 2026, a sophisticated intrusion campaign used the everyday familiarity of Microsoft Teams to turn routine collaboration into a direct route for enterprise compromise. By posing as IT helpdesk staff and exploiting users’ trust in external Teams invitations, the threat group tracked as UNC6692 moved from a simple chat message to full domain-level access—without exploiting a software vulnerability. The result was a carefully staged, cloud-hosted…

Saugata DattaApr 24, 20265 min read376

Data Breach

Bitwarden CLI Compromised in Supply Chain Attack via GitHub Actions

Socket and other researchers have confirmed that the Bitwarden CLI package published to npm — @bitwarden/cli version 2026.4.0 — was compromised in a supply chain attack that abused a GitHub Action in Bitwarden’s CI/CD pipeline. The malicious release injected a file named bw1.js into the package, exposing tokens, cloud credentials, SSH keys and other sensitive artifacts. While Bitwarden’s Chrome extension, MCP server and other official distribution channels are reported unaffected,…

Saugata DattaApr 24, 20264 min read431

Data Breach

Mustang Panda Turns Its Gaze on Indian Banks: Espionage Dressed as Help Desk Support

China’s Mustang Panda APT — also tracked as TA416, Bronze President, or Stately Taurus — is best known for adaptable tradecraft and a steady focus on geopolitical intelligence collection. In its most recent campaign, researchers tied to Acronis observed the group shifting some of that attention toward India’s financial sector. The attacks are notable less for technical sophistication than for persistence: relatively unsophisticated lures and a tried-and-true DLL sideloading technique…

Saugata DattaApr 21, 20264 min read333

AI Agents and Frameworks

Comment and Control: How GitHub Comments Became a New Prompt-Injection Threat

A new class of prompt-injection attacks—dubbed "Comment and Control"—turns GitHub pull requests, issues, and comments into attack surfaces that can hijack AI coding agents and siphon secrets directly from CI/CD environments. Unlike classic prompt injection that waits for a user to feed a document to an agent, this pattern is proactive: opening a PR or posting an issue can automatically trigger an AI agent (via GitHub Actions) and cause it…

Saugata DattaApr 21, 20265 min read474

Artificial Intelligence

Anthropic’s MCP Design Flaw: How a Protocol-Level Vulnerability Enables Remote Code Execution at Scale

A critical architectural flaw in Anthropic’s Model Context Protocol (MCP) ecosystem has exposed a vast number of downstream systems to remote code execution (RCE) risks. Researchers at OX Security found the issue embedded across official MCP SDKs for Python, TypeScript, Java, and Rust — meaning developers building on MCP inherit the vulnerability by design rather than through a simple coding bug. The implications are severe: arbitrary command execution, data exfiltration,…

Saugata DattaApr 21, 20264 min read476

Compliance and Privacy

Lovable AI App Builder Reportedly Exposes Thousands of Projects’ Source Code and Customer Data

A critical Broken Object Level Authorization (BOLA) vulnerability in Lovable, an AI-powered app builder, has reportedly left thousands of legacy projects accessible to unauthorized users. According to security researchers, an API endpoint returned full project data — including source code, database credentials, AI chat histories, and customer information — for projects created before November 2025. While Lovable appears to have patched newly created projects, the persistent exposure of older projects…

Saugata DattaApr 20, 20264 min read421

Data Breach

Rockstar’s GTA Data Leak: ShinyHunters Expose 78.6M Records via Anodot–Snowflake Pivot

Rockstar Games confirmed in April 2026 that a third-party compromise led to a substantial exposure of analytics records tied to GTA Online and Red Dead Online. Although player accounts and payment systems were reportedly unaffected, the incident highlights how attackers are increasingly leveraging trusted SaaS integrations and stolen service tokens to pivot into high-value environments. This post unpacks the timeline, the nature of the data, why the attack worked, and…

Saugata DattaApr 14, 20264 min read346

Automation

Price Elasticity: The One Data Point That Could Clarify AI’s Impact on Jobs

Silicon Valley’s conversations about AI often sound like inevitabilities: sweeping automation, mass displacement, and workplaces remade by powerful models. Those scenarios have driven anxiety among workers and intense debate among researchers. But one practical problem underlies much of the confusion: we lack the right economic data to predict how AI-driven productivity gains will actually affect employment. Without that missing piece, policymakers and economists are largely guessing. Why exposure metrics are…

Saugata DattaApr 6, 20264 min read391

Free Tools: IP, DNS, SSL