News tagged “data-breach” · tldlog

Meta pauses Muse sharing after AI chats surface through public DNS records

Tue, 20 Oct 2026 19:25:33 GMT

Meta has paused a Muse feature that lets users share AI chat links after security firm Claroc found more than 6,800 such links through public DNS records. Some exposed conversations contained business financial and personal details.

Source: theverge.com

Meta's Muse AI share pages can be found through public DNS records

Tue, 20 Oct 2026 07:27:23 GMT

talkback.sh reports that Meta’s Muse AI shares can be found through public DNS, because each share address includes the conversation title. A search surfaced more than 6,800 share hostnames, some holding private business material.

Source: talkback.sh

Researchers trace BigBear 2.0 phishing kit targeting Microsoft 365 users in 40+ countries

Mon, 19 Oct 2026 20:26:13 GMT

CloudSEK uncovered a global Microsoft 365 phishing-as-a-service operation it calls “BigBear 2.0”, which targeted hundreds of organizations. A DNS threat analysis by WhoisXML API mapped the domains and IP addresses linked to the campaign.

Source: circleid.com

Microsoft and Health-ISAC seize domains tied to crypto-paid phishing suppliers

Fri, 16 Oct 2026 17:07:45 GMT

Microsoft and cybersecurity group Health-ISAC won a US court order to seize and redirect domains used by YAM Store, CoGUI and Iron Man, services that sold stolen accounts and phishing tools. Microsoft says the network was linked to more than one billion phishing messages.

Source: cryptoslate.com

Danish firm Pays used password '123456' in massive data breach

Mon, 12 Oct 2026 10:22:32 GMT

A hacker breached the small Danish company Pays using the password '123456', stealing over 8.7 million Danish social security numbers (CPR numbers) and other personal data, including records of 5.5 million living and 3.3 million deceased Danes. The hacker shared the historic data leak with newspaper Politiken, whose experts called the company's security shocking.

Source: Politiken.dk