Uncategorized
Genesys xakerligi ichki tizimlardan mijoz ma'lumotlarini fosh qildi
Genesys Cloud, Genesys Engage va Genesys Engage Cloud platformalari ta'sirlanmagan.
Muallif
Ionut Arghire
| 26-oktabr, 2026 (10:40 ET)
Mijoz tajribasi kompaniyasi Genesys ma'lumotlarga ruxsatsiz kirish bilan bog'liq kiberhujumni o'z ichiga olgan hujumni to'xtatganini aytmoqda.
Kaliforniya shtatining Menlo Park shahrida joylashgan Genesys o'rta va yirik tashkilotlar uchun mijoz tajribasi va qo'ng'iroq markazi texnologiyalarini taqdim etuvchi kompaniya hisoblanadi.
19-oktabr kuni kompaniya xakerlar ichki biznes tizimlariga, jumladan o'quvni boshqarish tizimi (LMS) va mijozlar bilan munosabatlarni boshqarish (CRM) muhitiga kirganini e'lon qildi.
Genesys Cloud, Genesys Engage va Genesys Engage Cloud platformalari buzilmagan va ushbu tizimlarda saqlanadigan mijoz va hamkor ma'lumotlari ta'sirlanmagan, deb aytildi.
Hodisa doirasida hujumchilar "mavjud va potentsial mijozlar bilan munosabatlarni boshqarish uchun ishlatiladigan biznes va hisob ma'lumotlari" kabi ma'lumotlarga kirgan va ehtimol yuklab olgan.
Potentsial buzilgan ma'lumotlar orasida ismlar, telefon raqamlari, biznes elektron pochta manzillari, lavozimlar, kompaniya va hisob ma'lumotlari hamda boshqa mijozlar bilan o'zaro aloqalar ma'lumotlari bor.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
Genesys darhol cheklov choralarini qo'lladi, jumladan LMS platformasini to'xtatdi va 23-oktabr kuni hodisa to'liq to'xtatilganini e'lon qildi.
"Biz Genesys Cloud, Genesys Engage va Genesys Engage Cloud platformalari buzilmaganini va ushbu platformalarga, mijoz va hamkor muhitlariga hamda ushbu platformalarda saqlanadigan yoki qayta ishlanadigan mijoz va hamkor ma'lumotlariga ruxsatsiz kirish bo'lmaganini tasdiqladik", — deb aytdi kompaniya.
Juma kuni Genesys hodisaning ko'lami va ta'siri bo'yicha tekshiruv davom etayotganini, ammo kirilgan ma'lumotlarni ko'rib chiqish va muhim faktlar tasdiqlanishi bilan qo'shimcha tafsilotlar taqdim etilishini va'da qildi.
Kompaniya mijozlarga Genesys nomidan keladigan shubhali xabarlarga e'tibor berishni tavsiya qildi va hech qachon elektron pochta yoki boshqa so'ralmagan kanallar orqali mijozlardan parollar kabi maxfiy ma'lumotlarni so'ramasligini ta'kidladi.
Genesys hujumchini nomlamagan, ammo yaqinda paydo bo'lgan ScarlettGroup nomli guruh o'zining ma'lumotlar tarqatish saytida ushbu hujumni o'z zimmasiga olgan.
Bog'liq: Capcom ma'lumotlar buzilishidan 11 million kishi ta'sirlangan
Bog'liq: Quest Diagnostics ma'lumotlar buzilishida "ayrim bemor yozuvlari" fosh bo'lgan
Bog'liq: Xakerlar Nikkei'dan 1,8 million yozuvni o'g'irlagan
Bog'liq: Paradigm Healthcare ma'lumotlar buzilishidan 970 000 Medi-Cal a'zosi ta'sirlangan
Yozgan: Ionut Arghire
Ionut Arghire SecurityWeek uchun xalqaro muxbir.
Kundalik axborot byulleteni
So'nggi kiberxavfsizlik tahdidlari, tendensiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborotiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Xitoy APT ConnectWise hujumlarida AI pentest vositasi Artex'dan foydalanadi
- Hujumchilar to'rt oy ichida uchinchi Arista VCO nol kun zaifligidan foydalanmoqda
- Capcom ma'lumotlar buzilishidan 11 million kishi ta'sirlangan
- LiteLLM yangi ta'minot zanjiri hujumida buzilgan
- Signal zaifligi yomon niyatli qo'ng'iroq qiluvchilarga qo'ng'iroqlarni to'xtatishni bloklashga imkon beradi
- Splunk, SolarWinds yangi xavfsizlik yangilanishlarini e'lon qildi
- Cisco bir nechta mahsulotlar bo'yicha 34 zaiflikni tuzatdi
- PHP2Shell ekspluatatsiyasi patchlar chiqarilishidan bir necha kun oldin boshlangan
So'nggi yangiliklar
- O'g'irlangan AI mulohazasi Xitoyga arzonroq raqiblar yaratishda yordam berishi mumkin
- PHP2Shell ekspluatatsiyasi tekshiruvlardan ishlaydigan shell'largacha o'tmoqda
- 953 onlayn do'kon uzoq davom etgan zararli dastur kampaniyasida zararlangan
- Golland politsiyasi bank hisoblaridan 400 000 dollardan ortiq mablag'ni o'g'irlagan NFC relay hujumlari bo'yicha ikki kishini hibsga oldi
- Node2Shell: Brotli zaifligi Microsoft, Node.js, Python paketlari bo'yicha patchlashni keltirib chiqardi
- Mythos 5 iyul hujumida haqiqiy dunyo zararini e'tiborsiz qoldirdi
- Sobiq Unit 8200 ofitserlari agentik SecOps startapi Mave uchun 34 million dollar yig'di
- Boshqa yangiliklarda: Tor chiqish relaylari o'g'irlangan, banklar yomon niyatli AI agentlarini aniqladi, o'zini qayta quradigan macOS ransomware
Trend
Mirai botnet operatorlari ASLR chetlab o'tish ekspluatatsiyalari paydo bo'lishi bilan PHP2Shell hujumlariga qo'shildi
SecurityWeek tahlili: 2024-yilning birinchi yarmida 178 ta kiberxavfsizlik M&A bitimi e'lon qilindi
Node2Shell: Brotli zaifligi Microsoft, Node.js, Python paketlari bo'yicha patchlashni keltirib chiqardi
Xitoy APT ConnectWise hujumlarida AI pentest vositasi Artex'dan foydalanadi
Sobiq Unit 8200 ofitserlari agentik SecOps startapi Mave uchun 34 million dollar yig'di
Atlassian Data Center va Server mahsulotlari bo'yicha 75 zaiflikni tuzatdi
Hujumchilar to'rt oy ichida uchinchi Arista VCO nol kun zaifligidan foydalanmoqda
Capcom ma'lumotlar buzilishidan 11 million kishi ta'sirlangan
Kundalik axborot byulleteni
So'nggi tahdidlar, tendensiyalar va texnologiyalar haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek elektron pochta axborotiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Vebinar: Sizning Google Workspace'dagi AI kirish xavfi allaqachon mavjud
19-oktabr, 2026
Google Workspace'ga ulangan AI vositalari millionlab maxfiy elektron pochta va fayllarga kirishi mumkin. Ushbu sessiyada tashkilotingizning xavfini aniqlang va AI kirishini boshqarish uchun ramka o'rganing.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 Summit
10 va 11-noyabr, 2026
CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiradigan masalalarni ko'rib chiqish uchun birlashtiramiz.
Ro'yxatdan o'ting
Harakatdagi odamlar
Cequence Security Russ Schaferni CMO etib tayinladi.
Mona Harrington DHS'da Kiber integratsiya bo'yicha yordamchi direktor etib tayinlandi.
iCOUNTER Mark H. FitzPatrickni CFO etib tayinladi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
AI dasturiy ta'minot xavfsizligining kaliti tezlik emas, balki yetuklik
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda joylashgani sizning xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir ko'rsatadi. (Matias Madou)
Zamonaviy kiberhujumlarga qarshi kurashda kontekst qirol
Kontekstual mudofaa xavfsizlik jamoalariga signallarni bog'lash, keyin nima kelishini oldindan bilish va tahdidlar kuchayishidan oldin ularni to'xtatishga yordam beradi. (Etay Maor)
AI hujum tezligini o'zgartirdi, xavfsizlik asoslarini emas
AI zaifliklarni aniqlash va ekspluatatsiyani tezlashtirgan sari, virtual patchlash hali ham mudofaa chuqurligi va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Kelajak uchun katta rejalar tuzgan to'rtta kiber tahdid
- AI, ta'minot zanjiri ta'siri, kvant hisoblash va geosiyosiy ziddiyat xavfsizlik dasturlarini sinovdan o'tkazmoqda. Buzilishlarga tayyorgarlik kundalik operatsiyalarning bir qismiga aylanishi kerak. (Steve Durbin)
Oxiridan boshlang: Agentik tuzatishni qanday yoqish mumkin
Agentik tuzatish ishonch harakati emas. Biz tanish muammolarni tuzatish haqida gapiryapmiz, notanish xavf haqida hukm chiqarish emas. (Nadir Izrael)
Uncategorized
Genesys Hack Exposes Customer Data From Internal Systems
The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.
By
Ionut Arghire
| October 26, 2026 (10:40 AM ET)
*
Customer experience company Genesys says it has contained a cyberattack that involved unauthorized access to data.
Headquartered in Menlo Park, California, Genesys is a provider of customer experience and call center technology for mid-sized and large organizations.
On October 19, the company announced that hackers had accessed internal business systems, including a learning management system (LMS) and a customer relationship management (CRM) environment.
The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms have not been compromised, and the customer and partner data stored within those systems was not affected, it said.
As part of the incident, the attackers accessed and likely downloaded information such as “business and account information used to manage relationships with existing and prospective customers.”
The potentially compromised data includes names, phone numbers, business email addresses, job titles, company and account information, and other customer interaction information.
Advertisement. Scroll to continue reading.
Genesys immediately deployed containment measures, which included suspending the LMS platform, and on October 23 announced that the incident has been fully contained.
“We have confirmed that the Genesys Cloud, Genesys Engage and Genesys Engage Cloud platforms were not compromised, and there was no unauthorized access to the platforms, customer and partner environments, or customer and partner data stored or processed within these platforms,” the company said.
On Friday, Genesys said its investigation into the scope and impact of the incident remains ongoing, but promised additional details as it reviews the information accessed and as material facts are confirmed.
The company cautioned customers to watch for suspicious communications impersonating Genesys, stressing that it would never ask customers for sensitive information such as passwords via email or other unsolicited channels.
Genesys has not named the attacker, but a recently emerged group called ScarlettGroup has claimed the attack on its leak site.
Related:11 Million Impacted by Capcom Data Breach
Related:Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Related:Hackers Steal 1.8 Million Records From Nikkei
Related:970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
- Attackers Exploit Third Arista VCO Zero-Day in Four Months
- 11 Million Impacted by Capcom Data Breach
- LiteLLM Compromised in Fresh Supply Chain Attack
- Signal Vulnerability Lets Malicious Callers Block Hang-Ups
- Splunk, SolarWinds Release Fresh Security Updates
- Cisco Patches 34 Vulnerabilities Across Multiple Products
- PHP2Shell Exploitation Started Days Before Patches
Latest News
- Stolen AI Reasoning Could Help China Build Cheaper Rivals
- PHP2Shell Exploitation Moves From Probes to Working Shells
- 953 Online Stores Infected in Long-Lasting Malware Campaign
- Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
- Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
- Mythos 5 Ignored Real-World Harm in July Attack
- Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
- In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
Trending
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
SecurityWeek Analysis: 178 Cybersecurity M&A Deals Announced in First Half of 2024
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
Atlassian Patches 75 Flaws in Data Center and Server Products
Attackers Exploit Third Arista VCO Zero-Day in Four Months
11 Million Impacted by Capcom Data Breach
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: The AI Access Risk Already in Your Google Workspace
October 19, 2026
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Cequence Security has appointed Russ Schafer as CMO.
Mona Harrington has been named Assistant Director for Cyber Integration at DHS.
iCOUNTER has appointed Mark H. FitzPatrick as CFO.
More People On The Move
Expert Insights
*
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)
Begin at the End: How to Enable Agentic Remediation
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.(Nadir Izrael)