SecurityBrief UK - Technology news for CISOs & cybersecurity decision-makers
United Kingdom

Data exfiltration Stories

Global Stories

Data exfiltration stories

NCC Group maps security gaps across AI coding agents
Application Security

NCC Group maps security gaps across AI coding agents

Weak default safeguards and uneven sandboxing could leave developers exposed to command execution before workspace trust is granted.

By Sean Mitchell • 4 min read • 3 days ago
Helix data extortion group linked to BlackFile, ShinyHunters
Software-as-a-Service

Helix data extortion group linked to BlackFile, ShinyHunters

Businesses face a fresh wave of identity theft-driven extortion as Helix is linked to BlackFile and ShinyHunters through shared infrastructure.

By Sean Mitchell • 5 min read • 3 days ago
ESET warns of AI abuse & quishing surge in attacks
Malware

ESET warns of AI abuse & quishing surge in attacks

Malicious AI skills are helping criminals steal data and run malware, while QR-code phishing climbed 146% in the latest ESET report.

By Joseph Gabriel Lagonsin • 4 min read • 4 days ago
Anthropic widens Fable 5 safeguards & rates jailbreaks
Malware

Anthropic widens Fable 5 safeguards & rates jailbreaks

New safeguards will let Fable 5 block more harmful cyber prompts, as Anthropic also seeks a common scale for jailbreak risk.

By Sean Mitchell • 4 min read • Last week
Data Theorem launches AI security platform for apps
Cloud Security

Data Theorem launches AI security platform for apps

Security teams are being pushed to react faster as AI-assisted attacks widen the gap between exploit discovery, patching and live defence.

By Mark Tarre • 4 min read • Last week
Attackers abuse trust as ClickFix spreads to macOS
Ransomware

Attackers abuse trust as ClickFix spreads to macOS

The tactic now reaches Mac users, as attackers turn to trusted tools and social engineering to evade defences and steal credentials.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Barracuda warns of Microsoft phishing & malware rise
Malware

Barracuda warns of Microsoft phishing & malware rise

Attackers are increasingly using genuine Microsoft pages and browser tricks to steal session tokens, passwords and spread malware, Barracuda says.

By Mark Tarre • 4 min read • Last week
Adblock for YouTube extension flagged for security risk
Cybersecurity

Adblock for YouTube extension flagged for security risk

More than 11 million users could have been exposed if a server-side change had turned the Chrome add-on into a vehicle for code execution.

By Sofiah Nichole Salivio • 4 min read • Last week
Google adds agent controls to VPC Service Controls
Firewalls

Google adds agent controls to VPC Service Controls

The update gives cloud teams finer-grained ways to stop autonomous AI agents moving data outside approved perimeters on Google Cloud.

By Sean Mitchell • 4 min read • Last week
Quantum computers aren't here yet. But the data threat is
Data Protection

Quantum computers aren't here yet. But the data threat is

Hackers are already hoarding encrypted data, as businesses race to adopt quantum-safe protection before Q-Day arrives.

By Donovan Jackson • 5 min read • Last month
F5 launches AI security platform, buys SurePath AI
Private Cloud

F5 launches AI security platform, buys SurePath AI

Security teams are being offered new tools to track shadow AI and block prompt injection as enterprises rush to deploy agents and models.

By Sean Mitchell • 4 min read • Last month
New Go ransomware Prinz Eugen hits newest files first
Malware

New Go ransomware Prinz Eugen hits newest files first

Victims risk losing the newest and most active data first as a Go-based encryptor targets recently modified files before older ones.

By Joseph Gabriel Lagonsin • 5 min read • Last month
Klue breach lets attackers steal Salesforce CRM data
Customer Relationship Management

Klue breach lets attackers steal Salesforce CRM data

Trusted third-party access has let attackers quietly pull large volumes of Salesforce records from enterprise systems via a Klue integration.

By Sean Mitchell • 4 min read • Last month
Qualys study calls for unified attack surface management
Software-as-a-Service

Qualys study calls for unified attack surface management

Security teams want daily scanning and clearer risk rankings as cloud sprawl and third-party reliance widen attack surfaces, a survey found.

By Mark Tarre • 3 min read • Last month
North Korea IT fraud cell flooded US firms with 167,000 bids
Virtual Private Networks

North Korea IT fraud cell flooded US firms with 167,000 bids

Remote hiring teams face a wider security risk after researchers found North Korean operatives won 76 offers from 166,893 US job applications.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Varist launches DICOM engine to spot hidden malware
Data Protection

Varist launches DICOM engine to spot hidden malware

Healthcare providers face a new malware route as Varist's engine scans DICOM, HL7 and FHIR files for hidden threats in imaging systems.

By Sofiah Nichole Salivio • 3 min read • Last month

Stories from Other Regions

Data exfiltration stories

Straiker raises USD $64 million to secure AI agents
Software-as-a-Service

Straiker raises USD $64 million to secure AI agents

Enterprise customers face growing risks as autonomous software gains access to internal systems, prompting fresh demand for agent security tools.

By Sean Mitchell • 4 min read • Last week
Internal AI systems emerge as top breach risk: report
Ransomware

Internal AI systems emerge as top breach risk: report

Security teams are struggling to spot intrusions until after data is stolen, with 85% of leaders reporting AI-linked incidents or near misses.

By Sean Mitchell • 4 min read • Last month