Tag: data
-
Ryanair faces GDPR turbulence over customer ID checks
Irish data watchdog opens probe after ‘numerous complaints’ First seen on theregister.com Jump to article: www.theregister.com/2024/10/05/irish_dpc_ryanair_probe/
-
Why is asset deduplication a hard problem?
“If you cannot count it, you cannot manage it.” Every CISO and CIO ever Asset deduplication is a crucial challenge in exposure management (and CAASM). In today’s complex IT environments, effective management of vulnerabilities and other findings relies on accurate asset inventories to understand and mitigate potential risks. Assets from different data sources must… Read…
-
Irish DPC Probes Ryanair Over Facial Recognition
Company Has Long Running Fight Against Fare Scrappers. The Irish data regulator launched an investigation into Dublin-based ultra low-cost carrier Ryanair to identify potential privacy violations related to the company’s use of third-party facial recognition technology, stepping into a running fight Ryainair has fought against online ticket sellers. First seen on govinfosecurity.com Jump to article:…
-
About a quarter million Comcast subscribers had their data stolen from debt collector
Cable giant says ransomware involved, FBCS keeps schtum First seen on theregister.com Jump to article: www.theregister.com/2024/10/04/comcast_fcbs_ransomware_theft/
-
Meta Hit Again With Targeted Advertising Limits In Europe
Tags: dataEuropean Court of Justice Says Meta May Not Indefinitely Retain User Data. Targeted advertising may face additional restrictions following a ruling by the top European Union court that social media giant Meta cannot indefinitely retain user data. Nor can it use data for advertising without distinction as to type of data, the European Court of…
-
About a quarter million Comcast subscribers had data stolen from debt collector
Cable giant says ransomware involved, FBCS keeps schtum First seen on theregister.com Jump to article: www.theregister.com/2024/10/04/comcast_fcbs_data_breach/
-
Telegram reportedly shared user data with US law enforcement
First seen on scworld.com Jump to article: www.scworld.com/brief/telegram-reportedly-shared-user-data-with-us-law-enforcement
-
Ex-CEO Adam Geller Returns to Product Leadership at Zscaler
Former Exabeam CEO Aims to Strengthen Data-Driven Strategy for Security Operations. Adam Geller discusses his shift from Exabeam CEO back to product leadership at Zscaler, where he plans to use the company’s vast data insights and security operations to drive growth. Geller emphasizes the importance of CXO-level visibility and robust customer adoption strategies. First seen…
-
Randall Munroe’s XKCD ‘Ingredientsl’
Tags: datavia the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2024/10/randall-munroes-xkcd-ingredientsl/
-
Dutch police blame ‘state actor’ for recent data breach
First seen on therecord.media Jump to article: therecord.media/dutch-police-state-actor-breach
-
United Airlines leaned on real-time data to recover from the CrowdStrike outage
The airline modernized its technology foundations with better customer experiences in mind. Then, a major software outage underscored the importance of live data. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/united-airlines-crowdstrike-recovery/728832/
-
AFP Reports Potential Data Breach to French Authorities
Agence France-Presse (AFP), one of the world’s leading news agencies, has alerted French authorities about a possible data breach affecting its systems. The agency took this step after noticing unusual activity within its network, raising concerns that sensitive data may have been compromised. The AFP announced that it is working with the National Commission on…
-
Veeam bringt neue Tools zur proaktiven Threat-Analyse
Die Veeam Data Platform v12.2 mit Recon Scanner unterstreicht das Engagement von Veeam in den Bereichen Datenresilienz, Verwaltung und Datensicherheit. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/veeam-bringt-neue-tools-zur-proaktiven-threat-analyse/a38507/
-
How to Perform an IT Compliance Audit: A Comprehensive Checklist
Maintaining IT compliance is a crucial priority for organizations, yet the IT compliance audit process can be a daunting task. IT compliance audits often involve time-consuming manual processes, making them error-prone and hindering operational efficiency. Let’s dive into how organizations can use automation tools to streamline key audit tasks, from data collection and analysis… First…
-
Qatar Is Accelerating Oversight on Data Breaches and Cybersecurity Incidents
First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/qatar-is-accelerating-oversight-on-data-breaches-and-cybersecurity-incidents
-
Thousands of DrayTek Routers at Risk From 14 Vulnerabilities
Tags: attack, data, flaw, malicious, remote-code-execution, risk, router, service, theft, vulnerabilitySeveral of the flaws enable remote code execution and denial-of-service attacks while others enable data theft, session hijacking, and other malicious activity. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/thousands-draytek-routers-at-risk-14-new-vulnerabilities
-
MSSP Market News: Court Considers Who is Liable for Data Breaches
First seen on scworld.com Jump to article: www.scworld.com/news/mssp-market-news-court-considers-who-is-liable-for-data-breaches
-
Former Mesa County clerk sentenced to 9 years for 2020 voting system breach
Tina Peters, a former county clerk for Mesa County, Colo., was sentenced to nine years in prison after being convicted earlier this year on seven felony counts for facilitating a data breach involving voting system data in the wake of the 2020 presidential election. The incident is widely viewed as one of the most serious…
-
Third-party misconfiguration exposes Latin American banking clients’ data
First seen on scworld.com Jump to article: www.scworld.com/brief/third-party-misconfiguration-exposes-latin-american-banking-clients-data
-
Southeast Asia subjected to China-linked data exfiltration attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/southeast-asia-subjected-to-china-linked-data-exfiltration-attacks
-
Global Cybersecurity Agencies Release OT Security Guidelines
Principles to Ensure Critical Infrastructure’s Operational Technology Security. Don’t pull data from an operational technology network: OT networks should push data out. Segment critical OT networks. Don’t introduce cybersecurity systems into an OT network unless administrators can guarantee they won’t hinder a restart after a complete loss of electricity. First seen on govinfosecurity.com Jump to…
-
Dutch Police: ‘State actor’ likely behind recent data breach
The national Dutch police (Politie) says that a state actor was likely behind the data breach it detected last week. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dutch-police-state-actor-likely-behind-recent-data-breach/
-
Daniel Stori’s Turnoff.US: ‘Terminal Password Typing’
via the inimitable Daniel Stori at Turnoff.US! Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2024/10/daniel-storis-turnoff-us-terminal-password-typing/
-
The Secret Weakness Execs Are Overlooking: Non-Human Identities
For years, securing a company’s systems was synonymous with securing its “perimeter.” There was what was safe “inside” and the unsafe outside world. We built sturdy firewalls and deployed sophisticated detection systems, confident that keeping the barbarians outside the walls kept our data and systems safe.The problem is that we no longer operate within the…
-
CeranaKeeper Emerges as New Threat to Thai Government Networks
China-aligned CeranaKeeper discovered targeting Thai govt institutions using cloud services for data exfiltration First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ceranakeeper-new-threat-thai/
-
UK ICO Fines Police Service of Northern Ireland 750,000 Pounds
A 2023 Breach Exposed Personal Details of All PSNI Officers and Staff. The U.K. data regulator fined the Northern Ireland’s Police Service 750,000 pounds following a 2023 data breach that exposed personal details of the entire workforce. The U.K. Information Commissioner’s Office determined the breach occurred when police attempted to respond to two open records…
-
Data Breaches for the Month September 2024
This month brought a series of significant data breaches, once again highlighting the importance of cybersecurity. From tech leaders to healthcare organizations, several industries faced major security incidents that exposed… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/data-breaches-for-the-month-september-2024/
-
Virtual Patching: A Proactive Approach to API Security
In the API-driven world of modern enterprises, security vulnerabilities such as Broken Object Level Authorization (BOLA) represent one of the more insidious threats. These weaknesses are often exploited by attackers through bot-driven automation and can lead to data breaches and privacy violations. It’s not always convenient or even possible to immediately remediate the problem through……