Skip to content

AI in Cybersecurity

DraftKings Credential Stuffing Account Breach

Date of Incident: 2024-10-02 Overview: The DraftKings Credential Stuffing Account Breach, reported on October 7, 2025, involved attackers accessing customer accounts through credential stuffing techniques on October 2, 2024. This attack utilized automated login attempts with stolen credentials from other breaches, affecting personal details such as names, addresses, and transaction history. Although government IDs and… Read More »DraftKings Credential Stuffing Account Breach

Allianz Life July 2025 Data Breach

Date of Incident: July 16, 2025 Overview: In July 2025, Allianz Life experienced a data breach affecting nearly 1.5 million individuals, involving unauthorized access via a spear-phishing campaign that targeted employee credentials. The breach exposed sensitive data, including names, addresses, dates of birth, and social security numbers. Attackers used compromised credentials to escalate privileges and… Read More »Allianz Life July 2025 Data Breach

ShinyHunters Salesforce Data Leak

Date of Incident: 2025-10-01 Overview: The ShinyHunters Salesforce Data Leak, reported on October 3, 2025, involves unauthorized access to Salesforce cloud instances due to exploited API vulnerabilities and possibly misconfigured permissions. Approximately 1 billion records from 39 companies were potentially impacted, with personal information stolen and samples leaked alongside ransom demands. The breach demonstrated automated… Read More »ShinyHunters Salesforce Data Leak

Red Hat Data Breach

Date of Incident: April 2024 Overview: The Red Hat data breach, reported in October 2025, occurred in April 2024 and involved unauthorized access to around 570GB of compressed data from 28,000 internal development repositories. The breach affected the software sector, compromising sensitive Customer Engagement Reports (CERs) that contained critical information about networks and infrastructure of… Read More »Red Hat Data Breach

Weekly Report: New Hacking Techniques and Critical CVEs 23 Sep – 29 Sep, 2025

The week of September 22-30, 2025 witnessed a critical escalation in cyber threats, highlighted by the active exploitation of two Cisco ASA firewall zero-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362) by sophisticated state-sponsored actors. The U.S. Cybersecurity and Infrastructure Security Agency issued Emergency Directive ED 25-03, ordering federal agencies to immediately identify and mitigate potential compromises of… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 23 Sep – 29 Sep, 2025