IT Brief UK - Technology news for CIOs & IT decision-makers
United Kingdom

Data exfiltration Stories

UK Stories

Data exfiltration stories

Chainguard launches scanner to block npm malware greyware
Malware

Chainguard launches scanner to block npm malware greyware

The tool has already blocked more than 52,000 risky npm packages as supply chain attacks continue to hit software teams.

By Sean Mitchell • 4 min read • Last week
Cequence backs behaviour-based zero trust for AI agents
Data Protection

Cequence backs behaviour-based zero trust for AI agents

Runtime behaviour, not login checks, is now seen as the key control as businesses put AI agents into live systems and data.

By Sean Mitchell • 4 min read • Last week

Global Stories

Data exfiltration stories

New Go ransomware Prinz Eugen hits newest files first
Malware

New Go ransomware Prinz Eugen hits newest files first

Victims risk losing the newest and most active data first as a Go-based encryptor targets recently modified files before older ones.

By Joseph Gabriel Lagonsin • 5 min read • 3 days ago
Klue breach lets attackers steal Salesforce CRM data
Customer Relationship Management

Klue breach lets attackers steal Salesforce CRM data

Trusted third-party access has let attackers quietly pull large volumes of Salesforce records from enterprise systems via a Klue integration.

By Sean Mitchell • 4 min read • 3 days ago
Qualys study calls for unified attack surface management
Software-as-a-Service

Qualys study calls for unified attack surface management

Security teams want daily scanning and clearer risk rankings as cloud sprawl and third-party reliance widen attack surfaces, a survey found.

By Mark Tarre • 3 min read • Last week
North Korea IT fraud cell flooded US firms with 167,000 bids
Virtual Private Networks

North Korea IT fraud cell flooded US firms with 167,000 bids

Remote hiring teams face a wider security risk after researchers found North Korean operatives won 76 offers from 166,893 US job applications.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Varist launches DICOM engine to spot hidden malware
Data Protection

Varist launches DICOM engine to spot hidden malware

Healthcare providers face a new malware route as Varist's engine scans DICOM, HL7 and FHIR files for hidden threats in imaging systems.

By Sofiah Nichole Salivio • 3 min read • Last week
Teramind warns of AI governance gap at enterprises
Data Protection

Teramind warns of AI governance gap at enterprises

Most enterprise AI use is slipping beyond oversight, with 86% of organisations lacking visibility into data moving to and from tools.

By Sean Mitchell • 4 min read • Last week
BlackFog expands ADX Vision shadow AI security to macOS
Data Protection

BlackFog expands ADX Vision shadow AI security to macOS

Mac users at many firms can now be covered by the same AI data-loss rules as Windows, closing a governance gap for sensitive work.

By Mark Tarre • 3 min read • Last week
CrowdStrike expands QuiltWorks with AWS on AI security
Data Protection

CrowdStrike expands QuiltWorks with AWS on AI security

AWS customers will gain broader visibility into AI and cloud risks as CrowdStrike adds new monitoring, trials and private connectivity.

By Sean Mitchell • 4 min read • Last week
Attacks use remote access tools to evade detection
Malware

Attacks use remote access tools to evade detection

Trusted software is giving cybercriminals persistent access to PCs, making attacks harder to spot and raising the risk of data theft.

By Sean Mitchell • 4 min read • Last week
CrowdStrike extends Falcon AI Detection across key gateways
Software-as-a-Service

CrowdStrike extends Falcon AI Detection across key gateways

The integrations aim to close security gaps as more firms run AI in production across gateways, APIs and models.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Codenotary flags 210,000 risky AI agent actions daily
Data Protection

Codenotary flags 210,000 risky AI agent actions daily

About 7% of monitored interactions raised security, compliance or operational concerns as enterprises deploy more autonomous AI into daily workflows.

By Sofiah Nichole Salivio • 4 min read • Last week
Field Effect launches AI detection & response tool
Data Protection

Field Effect launches AI detection & response tool

Businesses face growing shadow AI risks as Field Effect folds monitoring and controls into its managed detection and response platform.

By Joseph Gabriel Lagonsin • 4 min read • This month
Zscaler expands Project AI-Guardian with tech partners
Data Protection

Zscaler expands Project AI-Guardian with tech partners

The wider partnership push aims to help enterprises control AI risk across cloud, identity and data systems as deployments move into production.

By Mark Tarre • 5 min read • This month

Stories from Other Regions

Data exfiltration stories

INC ransomware surges as Australia stays in sights
Disaster Recovery

INC ransomware surges as Australia stays in sights

Australian businesses face renewed ransomware pressure as INC expands quickly after LockBit and BlackCat were disrupted, researchers say.

By Mark Tarre • 3 min read • Last week
How to meet APRA's demands for improved AI security
Privileged Access Management

How to meet APRA's demands for improved AI security

Financial firms face tighter oversight as the regulator warns current controls are not enough for fast-changing AI systems and machine identities.

By Vijay Chaudhari • 5 min read • Last week