Der Fall von C.A. Cloud Attribution zeigt deutlich, wie professionell und international organisierte Tech-Support-Betrugsnetzwerke heute operieren. Cybercrime ist längst kein Einzelfall von Hackern mehr, sondern umfasst komplexe Geschäftsmodelle mit globalen Callcentern, Telemarketing-Systemen und digitaler Infrastruktur. 👇

#cybercrime #datenbetrug #malware #telefonbetrug #scamnetzwerk #onlinebetrug #digitalesicherheit #callcenterbetrug #socialengineering #identitätsdiebstahl #thirdpartyrisk #cybersecuritytips #itsicherheit

https://teufelswerk.net/cybercrime-im-fokus-wie-callcenter-und-call-tracking-systeme-fuer-tech-support-betrug-missbraucht-wurden/

NYC Health Breach Exposes 1.8M Patients' Sensitive Data

A massive data breach at NYC Health + Hospitals has exposed the sensitive information of 1.8 million patients, highlighting the alarming vulnerability of personal data in the healthcare system. This incident serves as a stark reminder of the devastating consequences of a breach, especially when it comes to biometric data that can never be truly…

https://osintsights.com/nyc-health-breach-exposes-18m-patients-sensitive-data?utm_source=mastodon&utm_medium=social

#Healthcare #NycHealth #DataBreach #BiometricData #ThirdpartyRisk

Nachdem es gestern etwas Probleme mit dem #dns und der #denic gab, ist es heute an der Zeit mal die Risikobewertung zu aktualisieren…

#thirdpartyrisk #compliance

⚡ Don’t Miss This Insightful Session at BSides Luxembourg 2026!

“𝗧𝗛𝗜𝗥𝗗 𝗣𝗔𝗥𝗧𝗬 𝗥𝗜𝗦𝗞 𝗠𝗔𝗡𝗔𝗚𝗘𝗠𝗘𝗡𝗧” – 𝗝𝗬𝗢𝗧𝗜 𝗨𝗣𝗔𝗗𝗛𝗬𝗔𝗬 & 𝗣𝗔𝗥𝗩𝗘𝗘𝗡 𝗥𝗔𝗝𝗣𝗨𝗥𝗢𝗛𝗜𝗧

Third-party vendors and suppliers are essential to modern business operations — but they also introduce significant cybersecurity and compliance risks. This session explores practical approaches to identifying, assessing, and managing third-party risk while balancing operational needs and regulatory requirements.

Attendees will gain insights into risk management frameworks, compliance considerations, and strategies for aligning cybersecurity governance with business objectives. The talk is especially relevant for professionals working in governance, risk, compliance, and enterprise security management.

Learn how to balance regulatory requirements with business needs, implement effective risk assessment strategies, and build a structured approach to third-party risk management. This session delivers actionable insights for both technical teams and leadership aiming to strengthen security while enabling business growth.

Jyoti Upadhyay is a Cybersecurity and Risk Management professional with more than 15 years of experience specializing in third-party risk management, regulatory compliance, and data security.

Parveen Rajpurohit is an Information Security professional with over 8 years of experience in financial services, focusing on third-party risk management, security audits, and compliance frameworks including ISO 27001 and NIST.

📅 Conference Dates: 6–8 May 2026 | 09:00–18:00
📍 14, Porte de France, Esch-sur-Alzette, Luxembourg
🎟️ Tickets: https://2026.bsides.lu/tickets/
📅 Schedule: https://hackertracker.app/schedule?conf=BSIDESLUX2026

#BSidesLuxembourg2026 #ThirdPartyRisk #CyberSecurity #RiskManagement #Compliance #GRC #InfoSec

Vimeo Breach Exposes 119,000 Email Addresses

A data breach at Vimeo has compromised the email addresses of over 119,000 users, with hackers also accessing some metadata and technical data from a third-party analytics vendor. Fortunately, no video content, login credentials, or payment card information was stolen.

https://osintsights.com/vimeo-breach-exposes-119000-email-addresses?utm_source=mastodon&utm_medium=social

#DataBreach #Vimeo #ThirdpartyRisk #SupplyChain #EmergingThreats

Vercel Breach Exposes Customer Data Theft via AI Tool Compromise

A single compromised AI tool has led to a massive breach at Vercel, exposing customer data and raising serious questions about trust and security. An attacker exploited a third-party AI tool used by an employee to steal sensitive credentials and OAuth tokens, gaining access to multiple services and customer data.

https://osintsights.com/vercel-breach-exposes-customer-data-theft-via-ai-tool-compromise?utm_source=mastodon&utm_medium=social

#AiToolCompromise #VercelBreach #CustomerDataTheft #ThirdpartyRisk #CloudPlatformSecurity

Vercel Breach Traced to Compromised AI Tool

A recent Vercel breach highlights a growing concern: what happens when AI tools, meant to boost efficiency, become the weakest link in our security chain? The breach was traced back to a third-party AI tool used by an employee, blurring the lines between human error and machine vulnerability.

https://osintsights.com/vercel-breach-traced-to-compromised-ai-tool?utm_source=mastodon&utm_medium=social

#ThirdpartyRisk #AiSecurity #BreachNotification #SupplyChain #EmergingThreats

Vercel Breach Exposes Customer Credentials After AI Tool Hack

When a trusted AI tool turns against you, the consequences can be severe - as Vercel recently discovered, with hackers gaining access to sensitive customer credentials through a compromised employee account. The breach highlights the fragile chains of trust that can be broken when security defenses fail.

https://osintsights.com/vercel-breach-exposes-customer-credentials-after-ai-tool-hack?utm_source=mastodon&utm_medium=social

#Vercel #AiToolHack #ThirdpartyRisk #SupplyChain #EmergingThreats

Healthcare disruption without direct breach.

Belgian hospitals impacted via third-party provider compromise
• Patient portals offline
• Data access disrupted
• Vendor risk exposed
Third-party attack surface is expanding fast.

Source: https://www.escudodigital.com/en/cybersecurity/cyberattack-disrupts-online-services-belgian-hospitals.html

How are you mitigating vendor-based threats? 👇
Follow @technadu

#InfoSec #CyberSecurity #ThirdPartyRisk

Taboola Exploits Banking Sessions to Route Users to Temu Tracking Endpoint

Imagine a single line of code secretly redirecting people logged into their bank accounts to a commercial tracking site - that's what happened when a bank unknowingly approved a Taboola pixel that sent users to a Temu tracking endpoint. This sneaky exploit slipped past security controls, leaving both the bank and…

https://osintsights.com/taboola-exploits-banking-sessions-to-route-users-to-temu-tracking-endpoint?utm_source=mastodon&utm_medium=social

#ThirdpartyRisk #SupplyChain #SessionHijacking #TrackingExploit #BankingSecurity