TCE Weekly Roundup: Iran Bounty, Airline Leak, ChatGPT Flaw
This weekly roundup covers a bounty offer targeting an alleged Iranian cyber official, a massive data-exposure incident affecting airline travelers, a breach of an education…
Category: TheCyberExpress
Springfield Cyberattack: Union Demands Answers Before Return
Springfield Public Schools remains in recovery mode following a cyberattack that shut down district operations and forced schools to close for the second half of…
Agentic AI Harnesses: ASD Releases New Security Guidance
The Australian Signals Directorate (ASD) has released new guidance on Agentic AI Harnesses, highlighting the security, governance and operational risks organisations need to consider as…
EU’s 24-Hr Vulnerability Reporting Rules Take Effect Friday, A Year Before The Rest Of The Cyber Resilience Act
Manufacturers selling connected products in the European Union face a new legal duty starting Sept. 11. Report actively exploited vulnerabilities to authorities within 24 hours…
ChatGPT Sandbox Flaw Let A Planted Prompt Ship Victim’s Gmail Data To Another Account
Check Point Research disclosed Tuesday that a weakness in ChatGPT’s code-execution sandbox let data from one user’s connected Gmail account be moved into a separate,…
Exposed Database Left 220Mn Airline Passenger, Crew Records Open To The Internet
A misconfigured Elasticsearch cluster exposed roughly 220.8 million airline passenger and crew records, including passport numbers and full itineraries, before it was secured in June,…
Post-Quantum Cryptography: G7 And CISA Urge Urgent Shift
Some of the world’s leading democracies are pushing governments and companies to start preparing for post-quantum cryptography before quantum computers become powerful enough to break…
Attackers Exploit Unpatched Magento Zero-Day To Backdoor Online Stores
Attackers are exploiting an unpatched remote code execution flaw in Adobe Commerce and Magento Open Source to install persistent backdoors on e-commerce sites, Dutch security…
Liquid Network Security Incident: Hackers Offer BTC Return
The Liquid Network security incident has taken an unusual turn after the unidentified actors behind the theft of nearly 4,000 BTC offered to return “most”…
$10 Million Reward For Amir Yaryab Offered By US
The U.S. State Department has posted a $10 million reward for Amir Yaryab, a senior Iranian official accused of leading the Islamic Revolutionary Guard Corps…
CBI Raids 89 Places Across 20 States In Digital Arrest Cases
India’s Central Bureau of Investigation searched 89 locations across 20 states in three digital arrest fraud cases and arrested three people accused of moving the…
Kentucky Appellate Court Data Compromised In C-Track Breach
The Kentucky Administrative Office of the Courts (AOC) has confirmed that Kentucky Appellate Court data was compromised in a cybersecurity breach traced to a third-party…