This page collects WhisperX intelligence signals tagged #data exfiltration. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.
Un nuovo strumento di sicurezza open-source, il Prompt Vulnerability Scanner, sta evidenziando vulnerabilità critiche nei sistemi di intelligenza artificiale generativa. Lo strumento estende le capacità di un rilevatore di injection di base introducendo simulazioni attive di attacchi, inclusi payload adversariali, inje...
A critical security vulnerability, known as a 'sensitivity mixing' attack, threatens AI agents built on the CrewAI framework. This flaw allows an agent with broad tool access to read confidential data and then exfiltrate it by writing to a lower-sensitivity channel, creating a direct path for data leaks. The attack pat...
A critical XML External Entity (XXE) injection vulnerability has been identified in an XML Configuration Validation module, posing a severe risk of unauthorized data exfiltration. The flaw, with a CVSS score of 9.1, stems from an insecurely configured XML parser that processes user-supplied configuration files. This in...
A critical security misconfiguration in Nester's backend API exposes authenticated user data and financial operations to potential cross-site theft. The API's CORS (Cross-Origin Resource Sharing) policy is set to a wildcard (`Access-Control-Allow-Origin: *`), instructing browsers to allow any website on the internet to...
West Pharmaceutical Services, a critical pharmaceutical supply chain company, is actively responding to a ransomware incident that has disrupted operations and involved confirmed data exfiltration. The attack on the medical device and pharmaceutical packaging manufacturer represents a significant breach at a company in...
A sophisticated supply chain campaign has infiltrated the RubyGems package ecosystem, with researchers identifying over 500 malicious packages operating as a data exfiltration channel. The operation, tracked under the designation GemStuffer, represents a calculated attempt to compromise Ruby developers and extract sens...
West Pharmaceutical Services, a major player in the pharmaceutical manufacturing sector, fell victim to a sophisticated cybersecurity breach on May 4, 2026. Attackers successfully infiltrated the company's systems, encrypted critical data, and exfiltrated sensitive information before the intrusion was identified. The s...