Security news aggregator

Latest coverage for Theft

Theft in cybersecurity covers stolen data, credentials, devices, and funds, often creating risks of unauthorized access, fraud, and privacy loss.

21 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Unauthorized taking or copying of information, credentials, intellectual property, or digital assets is cyber theft. News under this tag may involve stolen passwords, payment data, personal information, source code, cloud tokens, cryptocurrency, or sensitive business files. Theft can result from phishing, malware, compromised accounts, insider access, exposed storage, or the loss of an unencrypted device; the relevant issue is the unauthorized acquisition or control of an asset, whether or not the attacker also alters systems.

Security teams should identify where valuable data and credentials are stored, restrict access by role, require strong authentication, encrypt data at rest and in transit, and monitor unusual downloads or transfers. Vulnerability management matters when flaws expose databases, endpoints, or cloud services to unauthorized retrieval. After suspected theft, preserving logs, revoking tokens and credentials, determining what was accessed or copied, and assessing privacy or notification obligations are central to containing the incident and measuring its impact.

Showing 20 most recent headlines of 21 Filtered view
Krebs on Security 1 year, 4 months ago

Feds Link $150M Cyberheist to 2022 LastPass Hacks

In September 2023, KrebsOnSecurity published findings from security researchers who concluded that a series of six-figure cyberheists across dozens of victims resulted from thieves cracking master passwords stolen from the password manager service LastPass in 2022. In a court filing this week, U.S. federal agents investigating a spectacular $150 million cryptocurrency heist said they had reached the same conclusion.

More from Krebs on Security 8 Mar 2025, 2:20 p.m. America Cryptocurrency Password Manager Passwords Research Theft Victims
Bank Info Security 1 year, 4 months ago

Rite Aid Agrees to $6.8M Data Breach Lawsuit Settlement

Provisional Agreement Tied to Ransomware Attack Affecting 2.2 Million CustomersAmerican pharmacy chain giant Rite Aid reached a $6.8 million agreement to settle a data breach class action lawsuit, which includes a pledge to improve its cybersecurity practices. The breach involved a ransomware group stealing data pertaining to 2.2 million customers.

More from Bank Info Security 7 Mar 2025, 6:00 a.m. America Breach Healthcare Lawsuit Ransomware Theft
Bank Info Security 1 year, 4 months ago

China's Silk Typhoon Tied to Cloud Service Provider Hacks

Microsoft Sees Cyberespionage Group Lifting API Keys and Credentials for CustomersA prolific cyberespionage group tied to Beijing appears to have increased its targeting of widely used IT tools and service providers. Microsoft said the group's tactics now include stealing API keys and credentials from providers to gain access to providers' downstream customers' infrastructure.

More from Bank Info Security 6 Mar 2025, 9:00 a.m. API Artificial Intelligence China Cloud Credentials Microsoft Service Provider Theft

They're good at zero-day exploits, too Silk Typhoon, the Chinese government crew believed to be behind the December US Treasury intrusions, has been abusing stolen API keys and cloud credentials in ongoing attacks targeting IT companies and state and local government agencies since late 2024, according to Microsoft Threat Intelligence.…

More from The Register 6 Mar 2025, 6:22 a.m. 0-Day API Artificial Intelligence China Cloud Credentials Exploit Government Microsoft Theft
Bank Info Security 1 year, 4 months ago

Enterprises: Don't Delay Move to Post-Quantum Algorithms

Gartner's Bart Willemsen on Need to Adopt Post-Quantum CryptographyNation-state adversaries will likely harvest stolen encrypted data for decryption using quantum decryption, when available. Bart Willemsen, vice president analyst at Gartner, urges enterprises to transition to post-quantum cryptography algorithms to safeguard their data.

More from Bank Info Security 6 Mar 2025, 4:00 a.m. Adoption Encryption Nation State President Quantum Theft

Credential stuffing attacks had a huge impact in 2024, fueled by a vicious circle of infostealer infections and data breaches. But things could be about to get worse still with Computer-Using Agents, a new kind of AI agent that enables low-cost, low-effort automation of common web tasks — including those frequently performed by attackers

More from The Hacker News 5 Mar 2025, 12:00 a.m. Artificial Intelligence Automation Credentials Theft