🔓 37M Shoppers Exposed & a Hacker AI Hits 2,250 Companies

Today's two biggest security stories hit from opposite directions: a massive retail breach putting tens of millions of people's personal details in criminal hands, and a stark example of how AI tools are making hackers faster and more dangerous than ever.

🛋️ The "IKEA of Japan" Loses 37.6 Million Customer Records

Nitori, Japan's biggest furniture and home goods retailer, says hackers stole data on 37.6 million people, including members, regular shoppers, and business customers. The stolen info includes names, emails, home addresses, phone numbers, dates of birth, and online order history. The good news is that passwords and credit card numbers weren't taken. The bad news is that this is exactly the kind of data scammers use to craft convincing phishing emails, texts, and phone calls that seem to come from a company you actually shop with. If you've ever bought from Nitori, be extra skeptical of any "order problem" or "account update" message in the coming months, and for businesses this is a reminder that customer contact data is valuable even without payment details.

Read more →

🤖 A "Good Guy" AI Hacking Tool Gets Turned Into a Weapon

Artex is a free, open-source tool built to help security teams test their own defenses using a team of AI agents. Criminals have now flipped it around and are using it to guess passwords, break into accounts, and steal data at machine speed. One group, tracked as Storm-0940, fired off more than 151,000 login attempts against eight organizations, then stole access keys for ConnectWise, a popular IT management service, and used them to break into more than 2,250 downstream Microsoft 365 and Azure environments. That's the scary part: hitting one IT provider let the attackers reach thousands of businesses that never got targeted directly. If your company relies on an outside IT provider, now is a good time to ask how they protect their access to your systems, and to make sure multi-factor authentication is turned on everywhere.

Read more →

Stay ahead of threats with GOCO Security at gocosecurity.com.