Koi Security reports that Urban VPN’s browser extension silently captures AI chat prompts and replies - even when the VPN is disabled.
The findings raise serious enterprise data leakage and browser attack surface concerns.
Details:
https://www.technadu.com/urban-vpn-ai-chat-data-collection-raises-security-concerns/615901/
Probability of no data leakage by the service
This was generated by LLM, but only because it's faster; I've reviewed it carefully and confirm it.
#DataLeakage #Microsoft #Google #TargetedAd #SurveillanceCapitalism #ethicalbusiness #SelfHosting #NextCloud #stackfield #owncloud
There was a #GravyAnalytics data leakage in January 2025. According to an article in WIRED, this data broker was primarily selling user location data (i.e., our locations).
I scanned my Samsung Galaxy's Android installation, which I used before switching to GrapheneOS, and below is a list of apps that were most likely selling my location.
A link to the FOSS app is below
Researchers uncovered a new wiretap-style attack targeting Intel SGX — exposing data once thought secure. Even trusted enclaves can leak secrets. 🔍💻 #HardwareSecurity #DataLeakage
https://thehackernews.com/2025/10/new-wiretap-attack-extracts-intel-sgx.html
@cloudflare
1.) During the cloudflare customer data breach, were clients from the European Union, including the Republic of Poland, also affected?
2.) Have all customers impacted by the issue already been informed?
#cloudflare #NET #security #soc #databreach #database #customersdata #leak #dataleakage
PayPal Passwort ändern!
Grund ist ein potenzieller Leak bei PayPal, wonach angeblich 16 Mio Zugangsdaten von Paypal-Nutzern inklusive Passwörtern erbeutet wurden
Quelle: FAZ.NET
🇬🇧 Change your PayPal password
The reason is a potential leak at PayPal, according to which 16 million login details of PayPal users, including passwords, were allegedly stolen.
#marcusrepp #sketchbook #cartoon #comicartist #comicart #fudenosukesofttip #illustrationart #watercolour #paypal #dataleakage
PayPal Passwort ändern!
Grund ist ein potenzieller Leak bei PayPal, wonach angeblich 16 Mio Zugangsdaten von Paypal-Nutzern inklusive Passwörtern erbeutet wurden
Quelle: FAZ.NET
🇬🇧 Change your PayPal password
The reason is a potential leak at PayPal, according to which 16 million login details of PayPal users, including passwords, were allegedly stolen.
#marcusrepp #sketchbook #cartoon #comicartist #comicart #fudenosukesofttip #illustrationart #watercolour #paypal #dataleakage
'123456' #password exposed 64 million #McDonald’s job applicants via their chatbox McHire 🤯
#privacy #Dataleakage
https://www.bleepingcomputer.com/news/security/123456-password-exposed-chats-for-64-million-mcdonalds-job-applicants/
AI Arms Race Fuels Surge in Cybercrime and Data Leaks
https://www.webpronews.com/ai-arms-race-fuels-surge-in-cybercrime-and-data-leaks/
#cybersecurity #AI #dataleakage #ChatGPT #GenAI #threats #ShadowAI #3rdPartyTools
#AI in #LifeSciences is confronted with challenges such as #DataLeakage, where training data unintentionally influences test results. Researchers stress that understanding data complexity and fostering interdisciplinary work are essential for reliable applications: https://go.tum.de/787419
📷A.Eckert
Kedze rad pouzivam wget, upozornujem na poslednu aktualizaciu 1.25.0, ktora je patch na CVE-2024-10524
Why, #Signal? Why must you undermine my trust in you by repeatedly insisting on asking for access to my contacts? Why is it not sufficient for me to say no and MEAN no? Take a hint! NO CONTACTS. EVAR!!
Video - Hacking Azure: From OSINT to Full Compromise!
Scenario:
A seemingly innocuous post by a new manager at Mega Big Tech, showcasing their new workstation, inadvertently leaked sensitive Azure credentials. This oversight allowed attackers to gain unauthorized access, escalating privileges through a compromised Azure Logic App Automation, leading to potential data breaches.
Learning points:
Don’t Push the Button! Exploring Data Leakage Risks in Machine Learning and Transfer Learning.
📎 https://arxiv.org/pdf/2401.13796
#dataleakage #machineLearning #datasplit #deeplearning #transferlearning
#USA #Cybersecurity #ATT #DataLeakage: "Phone giant AT&T has reset millions of customer account passcodes after a huge cache of data containing AT&T customer records was dumped online earlier this month, TechCrunch has exclusively learned.
The U.S. telco giant initiated the passcode mass-reset after TechCrunch informed AT&T on Monday that the leaked data contained encrypted passcodes that could be used to access AT&T customer accounts.
A security researcher who analyzed the leaked data told TechCrunch that the encrypted account passcodes are easy to decipher. TechCrunch alerted AT&T to the security researcher’s findings.
In a statement provided Saturday, AT&T said: “AT&T has launched a robust investigation supported by internal and external cybersecurity experts. Based on our preliminary analysis, the data set appears to be from 2019 or earlier, impacting approximately 7.6 million current AT&T account holders and approximately 65.4 million former account holders.”
“AT&T does not have evidence of unauthorized access to its systems resulting in exfiltration of the data set,” the statement said." https://techcrunch.com/2024/03/30/att-reset-account-passcodes-customer-data/
One of the biggest challenges in #IRL #datascience and #machinelearning versus what you learn in school is labeling errors: When you create your own dataset from sources you may not be measuring the outcomes and connecting them to prediction data correctly! If you have labeling errors you are either unable to predict anything or worse - good model performance metrics, but terrible real world performance. Possibly #dataleakage, but possibly other forms of incoherence. 🤯
“Snakes in airplane mode” – what if your phone says it’s offline but isn’t? - WYSIWYG is short for "what you see is what you get". Except when it isn't... https://nakedsecurity.sophos.com/2023/08/21/snakes-in-airplane-mode-what-if-your-phone-says-its-offline-but-isnt/ #airplanemode #dataleakage #dataloss #malware #wysiwyg #iphone
#ML #Science #Reproducibility #DataLeakage: "To minimize errors in ML-based science, and to make it more apparent when errors do creep in, we propose REFORMS (Reporting standards for Machine Learning Based Science) in a preprint released today. It is a checklist of 32 items that can be helpful for researchers conducting ML-based science, referees reviewing it, and journals where it is submitted and published.
The checklist was developed by a consensus of 19 researchers across computer science, data science, social sciences, mathematics, and biomedical research. The disciplinary diversity of the authors was essential to ensure that the standards are useful across many fields. A majority of the authors were speakers or organizers at a workshop we organized last year titled "The Reproducibility Crisis in ML-Based Science." (Videos of the talks and discussions are available on the workshop page.)
The checklist and the paper introducing it are available on our project website. The paper also provides a review of past failures, as well as best practices for avoiding such failures."
https://www.aisnakeoil.com/p/introducing-the-reforms-checklist
