Japanese furniture and home accessories retailer Nitori has reported a major data breach, potentially exposing 37.6 million customer records. The company discovered unauthorized access to its network, prompting an investigation and notification to authorities.
A sophisticated supply chain attack saw threat actors compromise Qubole's AWS identity and access management (IAM) credentials, leading to the exfiltration of sensitive data from numerous customer cloud environments.
Autonomous AI coding agents, including Claude Code, have inadvertently saved thousands of files containing credentials and other sensitive data to public GitHub repositories. This creates significant security vulnerabilities for organisations relying on these tools.
Russia-linked threat group Turla deployed a new toolset, Cereal, on compromised Microsoft Exchange servers to conduct cyberespionage, targeting emails related to NATO and the European Union, according to cybersecurity firm ESET.
SAP has issued critical security updates to address several high-impact vulnerabilities, including the ICM2SHELL and ProxyGate flaws, which could allow unauthenticated attackers to execute remote commands.
