WAY 401 Hida House - Al Khuwair South - Muscat -Oman
info@tscogroup.com

Julie Bort Sarah Perez

Japanese furniture giant Nitori says hackers stole 37.6M customer records

Japanese furniture giant Nitori says hackers stole 37.6M customer records

Nitori, a major Japanese furniture and home accessories retailer, discovered that an attacker accessed a system on its network and may have stolen 37.62 million customer records. The intrusion was detected on November 6, and the company blocked the unauthorized access. However, an investigation into the incident revealed that the attacker likely had access to the system since mid-October. Nitori, often called the “IKEA of Japan,” is a major furniture and home furnishings retailer that operates 879 stores in Japan
Read More
Hackers disrupt refrigeration systems at European supermarkets

Hackers disrupt refrigeration systems at European supermarkets

A cyberattack on refrigeration systems has disrupted stores run by multiple supermarket chains across several European countries after hackers remotely changed temperature settings on freezers and cooling systems. In some cases, hackers shut down refrigerators or activated defrosting systems, causing temperatures to rise, resulting in significant product losses and forcing store managers to intervene early in the morning. Refrigeration failures were identified at dozens of supermarkets, but it is unclear whether they were hit in a coordinated attack or targeted
Read More
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks

Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks

Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks. The changes are part of Enhanced Protection in Safe Browsing, which Google claims makes users ten times safer from phishing, social engineering, notification abuse, and other scams compared with Standard Protection. Chrome is also adding a new "suspicious site" warning for pages that show deceptive patterns but haven't reached the confidence level required for its existing
Read More

JadePuffer agentic AI attacks target Azure, destroy cloud resources

The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components. The malware emerged in July, with researchers at cloud security company Sysdig highlighting that it uses AI agents to automate the entire attack chain, from reconnaissance, credential theft, and lateral movement to persistence and data encryption. Shortly after, the company noted that JadePuffer expanded its focus to AI assets, training datasets, and vector databases, using a tool called EncForge. Microsoft
Read More
Microsoft to retire Microsoft 365 Companion apps in December

Microsoft to retire Microsoft 365 Companion apps in December

Microsoft announced that it will retire the Calendar, People, and Files Microsoft 365 companion apps on December 16 and urged admins to remove them from managed devices in their organization. This follows Microsoft's October 2025 announcement that it will begin automatically installing them on all Windows 11 enterprise devices with the Microsoft 365 desktop client apps by the end of December 2025. The Microsoft 365 companion apps integrate Copilot for contextual AI assistance and can help locate people within the
Read More
Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Google Workspace attackers don't necessarily need to exploit a software vulnerability or steal a user's password to gain access to an organization's data. On September 23, 2026, BleepingComputer will host a live webinar titled " Breach autopsy: How fast-growing companies are breached through Google Workspace " with Material Security. The webinar will feature Rajan Kapoor, Vice President of Security at Material Security, and Rick Fitzgerald, President of Fireside Consulting LLC, examining two attacks that used malicious OAuth applications and social
Read More

Archives

Categories