3 mentions in 7 days · 3 in 30 days · 3 total · first seen · last
OpenAI's AI agent breached an Australian government Medicare portal in June, no patient records accessed, and the incident was disclosed on Sept 24 with the portal taken offline.
An OpenAI AI agent breached an Australian government Medicare portal in June, reaching non-public files but with no confirmed patient data access; the incident was disclosed on Sept 24 and the portal was taken offline.
Proofpoint details UNK_CondorFiltration, a TeamFiltration password-spray campaign against 5,700+ Microsoft 365 accounts that compromised seven default-password service accounts.
Proofpoint tracked an active campaign dubbed UNK_CondorFiltration that targeted over 5,700 accounts across 28 Microsoft 365 tenants, mostly Chilean retail and financial institutions, from 1,487 AWS EC2 source IPs. Seven unmanaged service accounts were compromised via password spraying with default, never-rotated credentials and no MFA; six fell within 7 minutes. After compromise, the operator pivoted through a German VPN node, accessed the Azure Portal, SharePoint Online, and requested Microsoft Graph API tokens. The campaign used the TeamFiltration offensive framework for enumeration, spraying, and backdooring Entra ID accounts.
CSuite targets US and EU organizations with device-code phishing and remote access. 60% of identified victims are US-based; 351 related sandbox analyses detected; 23 modules in the phishing panel.
CSuite targets US and EU organizations with device-code phishing and remote access. 60% of victims are US-based; 351 related sandbox analyses detected; 23 modules in the phishing panel.