**Telus Admits to Cyberattack, Potential Data Loss Exceeds 1 Petabyte**
In a recent statement, Canadian outsourcer Telus Digital confirmed it had fallen victim to a cyberattack, resulting in unauthorized access to a limited number of its systems. The company has taken immediate action to address the incident and secure its systems against further intrusion. However, reports suggest that Telus may have lost over 1 petabyte of data, with the crime gang ShinyHunters believed to be responsible for the breach.
The attack is thought to have occurred after ShinyHunters acquired valid Google Cloud Platform credentials as a result of the Salesloft breach. This incident highlights the increasing threat of data breaches, where malicious actors exploit vulnerabilities to gain access to sensitive information.
**Citrix CISO Urges Patch Blitz Amidst Geopolitical Tensions**
In a separate development, Citrix CISO Kumar Palaniappan has urged customers to implement all patches and product updates immediately, citing the evolving geopolitical landscape and the corresponding increase in state-sponsored and opportunistic cyber threats. Palaniappan noted that threat intelligence indicates a marked uptick in targeted attacks against critical infrastructure, supply chains, and enterprise environments linked to ongoing geopolitical conflicts.
The CISO emphasized the importance of prioritizing security and recommended that customers apply all available patches, check implementations against published security baselines, enable MFA and audit logging, and verify deployments are on supported, current versions of Citrix products. This warning comes as the company's security teams operate at an elevated alert level, accelerating vulnerability assessments, threat monitoring, and patch release cycles across its entire product portfolio.
**Starbucks Staff Affected by Data Breach**
In a bitter privacy blow for Starbucks staff, the company disclosed that hundreds of employees had their personal and financial information stolen in a data breach. The attackers gained access to the company's HR portals and made off with names, Social Security numbers, and dates of birth, as well as financial account numbers and routing numbers. Starbucks became aware of the breach on February 6 and launched an investigation with the help of law enforcement and infosec experts.
**Mandiant Founder Launches AI-Powered Red Teaming Company**
After conquering the realms of threat intelligence and incident response, Mandiant founder Kevin Mandia is now venturing into agentic AI security with his new company, Armadin. The company raised $189.9 million in its first funding round, representing the highest-ever seed and series A funding round in the history of cybersecurity.
Armadin aims to tackle what Mandia calls "hyperattacks" – AI-powered cyberattacks that are sophisticated, multi-modal, and move at machine speed. The company's product will deploy AI agents informed by custom models in an agentic attacker swarm, mimicking the tactics displayed by the world's most advanced attackers. Armadin wants customers to run this swarm in their environments, where it will mimic an advanced attack and produce insights into potential attacks that the company will block before attackers find them.
**Canadian Retailer Loblaw Succumbs to Cyberattack**
In a separate incident, Canadian retail giant Loblaw revealed that it had been breached, with attackers accessing customer data. The company described the incident as a "low-level data breach" that involved customers' personal data, including names, phone numbers, and email addresses. Loblaw has informed affected customers, but the company has not disclosed how many customers were affected or which system was breached to access the data.
The incident highlights the ongoing threat of data breaches, where malicious actors exploit vulnerabilities to gain access to sensitive information. As the threat landscape continues to evolve, it is essential for organizations to prioritize security and implement robust measures to protect against cyber threats.
In conclusion, the recent cyberattack on Telus, combined with the increasing threat of state-sponsored and opportunistic cyber threats, emphasizes the importance of prioritizing security and implementing robust measures to protect against cyber threats. As the threat landscape continues to evolve, it is essential for organizations to stay vigilant and adapt their security strategies to address the ever-changing threat landscape.