Breaches
- Caixa Vida e Previdência reports exposure of 7.6 million customers — The pension arm of Brazil's Caixa group confirmed a data breach impacting 7.6 million customer records.
- Apify Confirms Customer Data Was Accessed in Cyberattack — The cloud platform reported unauthorized access to customer accounts and personal information following a system intrusion.
- TSMC confirms employee data leak through a cloud service provider — Data on 46,000 current and former employees was posted online via a third-party cloud provider.
AI Attacks
- Amazon Threat Intelligence observes threat actors running cybercrime campaigns with ARTEX AI agents — Threat actors are utilizing the ARTEX framework to automate the theft of API keys and AI model credentials.
- Microsoft reports threat actors using agentic AI to find and abuse exposed secrets — Attackers are leveraging agentic tooling to scan GitHub repositories for credentials and exfiltrate data from cloud vaults.
Dark Web
- CrowdStrike reports ARTEX-linked actor targeting South Korean finance — A financially motivated actor used ARTEX to breach loan inquiry services and employee mobile systems.