Naked Security
3 years, 5 months ago
S3 Ep119: Breaches, patches, leaks and tweaks! [Audio + Text]
Lastest episode - listen now! (Or read the transcript.)
Security news aggregator
Latest coverage for Leak
Data leaks can expose passwords, personal records, and business secrets, enabling identity theft, fraud, extortion, and follow-on cyberattacks.
7
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Leak is the unauthorized disclosure or exposure of information to people or systems not meant to receive it. It may be deliberate or accidental and can involve personal data, credentials, API keys, source code, trade secrets, or internal documents. A leak can result from theft and publication, an employee sending data to the wrong recipient, or an exposed cloud storage bucket, database, log, repository, or backup. The term describes the exposure, not necessarily how attackers obtained it; reporting may refer to both confirmed disclosure and suspected exposure.
Security teams should establish what data was accessible, to whom, and for how long, while distinguishing evidence of access from mere exposure. Exposed passwords, tokens, and keys should be revoked or rotated quickly, and affected systems checked for reuse or further access. Personal or regulated data may trigger privacy and reporting obligations, while leaked proprietary material can require legal and threat-intelligence monitoring. Prevention includes least-privilege access, secret scanning, safe sharing controls, encryption where appropriate, and monitoring for misconfigured public resources.
Showing 7 most recent headlines
Filtered view
Bleeping Computer
3 years, 5 months ago
Hive ransomware disrupted after FBI hacks gang's systems
Today, the Hive ransomware Tor payment and data leak sites were seized as part of an international law enforcement operation involving the US Department of Justice, FBI, Secret Service, Europol, and Germany's BKA and Polizei. [...]
Bleeping Computer
3 years, 5 months ago
Hive ransomware dark web sites seized by law enforcement
Today, the Hive ransomware Tor payment and data leak sites were seized as part of an international law enforcement operation involving the US Department of Justice, FBI, Secret Service, Europol, and Germany's BKA and Polizei. [...]
Bleeping Computer
3 years, 5 months ago
Yandex denies hack, blames source code leak on former employee
A Yandex source code repository allegedly stolen by a former employee of the Russian technology company has been leaked as a Torrent on a popular hacking forum. [...]
The Hacker News
3 years, 5 months ago
Researchers Uncover Connection b/w Moses Staff and Emerging Abraham's Ax Hacktivists Group
New research has linked the operations of a politically motivated hacktivist group known as Moses Staff to another nascent threat actor named Abraham's Ax that emerged in November 2022
Dark Reading
3 years, 5 months ago
Wallarm Aims to Reduce the Harm From Compromised APIs
API Leak Management software discovers exposed API keys and other secrets, blocks their use, and monitors for abuse, the company says.
The Register
3 years, 5 months ago
US authorities release asylum seekers after leaking their data online
Also: US terrorist no-fly list found left on unsecured server, Russian dark web drug markets go to war In brief Nearly 3,000 immigrants seeking asylum in the United States have been released from custody after Immigration and Customs Enforcement (ICE) officials inadvertently published their personal information online.…