Tag: security
Microsoft patches critical security bug in Copilot Studio that could have leaked private data
Microsoft Copilot Studio had a security issues which could have allowed threat actors to exfiltrate sensitive data from vulnerable endpoints, experts have warned. Cybersecurity researcher Evan Grant from Tenable, who found and reported on the vulnerability, which is described as an information disclosure flaw stemming from a server-side request forgery…
Read More
Slack AI could be tricked into leaking login details and more
Security researchers claim to have uncovered a way to trick Slack’s AI assistant into sharing sensitive information and other secrets with unauthorized users Slack, which is used by more than 35 million people worldwide, introduced its own Artificial Intelligence (AI) tool in September 2023, allowing users to summarize multiple unread…
Read More
GitHub Enterprise Server has a critical security flaw, so patch now
GitHub Enterprise Server, the self-hosted version of the GitHub platform, was found carrying a vulnerability that allowed malicious actors to elevate their privileges to admin. The vulnerability, tracked as CVE-2024-6800, and has a severity rating of 9.5/10 (critical), is described as an XML signature wrapping issue. It happens when the…
Read More
Google set to face class-action lawsuit over data collection in Chrome
Google will have to answer in court allegations of collecting users’ private information inside its Chrome browser without their permission following a new ruling. A US federal appeals court has reversed a previous dismissal of the case Calhoun v. Google LLC on the basis that the lower court should have…
Read More
Not even zoos are safe from data breaches — Oregon Zoo warns visitors their details may have been stolen
More than a hundred thousand people who purchased tickets to the Oregon Zoo online may have had their credit card and other payment information stolen. The zoo has confirmed the news and begun notifying affected individuals of the breach. “On June 26, 2024, we became aware of suspicious activity within…
Read More
Top architectural firm reveals it was hit by major ransomware attack
American architectural powerhouse CannonDesign has begun notifying customers of a ransomware and data breach incident that happened a year and a half ago. In a notice published on the company’s website, CannonDesign detailed when the attack happened, what type of data was stolen, and what it was doing to protect…
Read More