SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Data exfiltration Stories - Page 2

Global Stories

Data exfiltration stories

AI agents expose major API security gap, Salt warns
Manufacturing

AI agents expose major API security gap, Salt warns

Most firms are not ready for AI-driven API attacks, with Salt saying 92% have yet to reach advanced security maturity.

By Mark Tarre • 4 min read • Last month
From DSPM to data protection: Closing the last mile on sensitive data in the era of AI
Storage

From DSPM to data protection: Closing the last mile on sensitive data in the era of AI

Visibility alone will not stop sensitive data leaking into AI tools, so security teams must turn DSPM findings into live controls and data lineage.

By Franklin Nguyen • 6 min read • Last month
Small alert, big defense: Inside a SOC's early-morning response
Virtual Private Networks

Small alert, big defense: Inside a SOC's early-morning response

A Monday-morning Microsoft 365 login from Germany was flagged, letting a partner reset a compromised account before attackers could act.

By Sarah Wilkinson • 4 min read • Last month
Nutanix & NetApp launch virtualisation migration tie-up
Storage

Nutanix & NetApp launch virtualisation migration tie-up

It could cut migration cycles from days to minutes for firms modernising virtual estates, while keeping data in place for some VM moves.

By Shannon Williams • 4 min read • Last month
Claude Code flaw leaves deny rules vulnerable in long workflows
Cloud Security

Claude Code flaw leaves deny rules vulnerable in long workflows

Security researchers say long automated jobs can make Claude Code’s deny rules fall back to user prompts, weakening protections in CI/CD pipelines.

By Kaleah Salmon • 8 min read • Last month
Microsoft warns of Storm-1175's rapid Medusa attacks
Ransomware

Microsoft warns of Storm-1175's rapid Medusa attacks

Victims in healthcare, education and finance have faced Medusa ransomware within 24 hours of flaws emerging, Microsoft says.

By Joseph Gabriel Lagonsin • 3 min read • Last month
Permiso launches sandbox for AI agent skill security
Firewalls

Permiso launches sandbox for AI agent skill security

Malicious downloads can now be caught at runtime, as the new tool records hidden network calls and file writes before deployment.

By Sofiah Nichole Salivio • 4 min read • Last month
ChatGPT flaw let hackers steal data via DNS queries
Firewalls

ChatGPT flaw let hackers steal data via DNS queries

Sensitive chats and uploaded files could have been quietly leaked from ChatGPT via DNS tunnelling before OpenAI fixed the flaw.

By Kaleah Salmon • 4 min read • Last month
F5 & Forcepoint come together to secure enterprise AI
Data Protection

F5 & Forcepoint come together to secure enterprise AI

Security teams face a wider gap as enterprise AI moves into production, with data governance and runtime controls often managed separately.

By Catherine Knowles • 4 min read • Last month
Zscaler flags Xloader malware's tougher obfuscation
Malware

Zscaler flags Xloader malware's tougher obfuscation

ThreatLabz says the latest Xloader strain uses layered encryption and decoy servers to frustrate analysts while stealing browser credentials.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Foxit adds PDF Action Inspector to spot hidden risks
Data Protection

Foxit adds PDF Action Inspector to spot hidden risks

Businesses using PDFs for sensitive files now have a new way to uncover hidden code that could expose data or alter documents unnoticed.

By Joseph Gabriel Lagonsin • 3 min read • Last month
DeepLoad malware steals credentials via ClickFix campaign
Malware

DeepLoad malware steals credentials via ClickFix campaign

Businesses face credential theft and reinfection risks as DeepLoad hides inside trusted Windows processes and evades routine clean-up.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Firms warned on ransomware amid backup & AI sprawl
Software-as-a-Service

Firms warned on ransomware amid backup & AI sprawl

Hidden software and poorly protected backups are leaving businesses more exposed to automated ransomware attacks, security experts warned.

By Joseph Gabriel Lagonsin • 5 min read • Last month
Codenotary launches AgentMon for AI agent oversight
Data Protection

Codenotary launches AgentMon for AI agent oversight

Enterprises deploying agentic AI are getting a new tool to spot data leaks, policy breaches and runaway costs before they spread.

By Catherine Knowles • 3 min read • Wed, 1st Apr 2026
Why AI-powered security needs network telemetry across the hybrid cloud
Firewalls

Why AI-powered security needs network telemetry across the hybrid cloud

Security teams risk missed attacks and slower investigations unless AI can see network traffic in motion across hybrid cloud environments.

By Ryan Mahoney • 4 min read • Tue, 31st Mar 2026
Data governance reshapes backup strategies in AI era
Data Protection

Data governance reshapes backup strategies in AI era

Rising data volumes and AI are forcing Australian firms to cut storage waste, tighten governance and test backups before breaches hit.

By Mark Tarre • 5 min read • Tue, 31st Mar 2026
F5 & Forcepoint join forces on enterprise AI security
Data Protection

F5 & Forcepoint join forces on enterprise AI security

As AI moves into production, enterprises face gaps between data governance and runtime controls that can expose sensitive information and policy breaches.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 27th Mar 2026

Stories from Other Regions

Data exfiltration stories

Microsoft 365 behind 32% of escalated security incidents
Unified Communications

Microsoft 365 behind 32% of escalated security incidents

Cloud office accounts are emerging as a major weakness in Malaysia, with 3,945 confirmed incidents tied to Microsoft 365 in 2025.

By Catherine Knowles • 3 min read • Tue, 31st Mar 2026