Tag: data
-
Home Office issues new ‘back door’ order over Apple encryption
New Home Office Technical Capability Notice (TCN) requires Apple to provide access to encrypted data and messages of British users stored on Apple’s cloud service. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366632159/Home-Office-issues-new-back-door-order-over-Apple-encryption
-
USENIX 2025: PEPR ’25 Network Structure And Privacy: The Re-Identification Risk In Graph Data
Creator, Author and Presenter: Daniele Romanini, Resolve Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/usenix-2025-pepr-25-network-structure-and-privacy-the-re-identification-risk-in-graph-data/
-
Randall Munroe’s XKCD ”Mantle Model<<
Tags: datavia the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/10/randall-munroes-xkcd-mantle-model/
-
USENIX 2025: Building An EndEnd De-Identification Pipeline For Advertising Activity Data At LinkedIn
Creators, Authors and Presenters: Saikrishna Badrinarayanan and Chris Harris, LinkedIn Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/usenix-2025-building-an-end-to-end-de-identification-pipeline-for-advertising-activity-data-at-linkedin/
-
WestJet Confirms Passenger IDs and Passports Stolen in Cyberattack
WestJet confirms a data breach starting June 13, 2025, stole passport/ID and personal data. Credit cards and passwords are safe. The airline offers 24 months of free identity monitoring, including $1M insurance. First seen on hackread.com Jump to article: hackread.com/westjet-cyberattack-passenger-ids-passports-stolen/
-
Data breach at dealership software provider impacts 766k clients
A ransomware attack at Motility Software Solutions, a provider of dealer management software (DMS), has exposed the sensitive data of 766,000 customers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/data-breach-at-dealership-software-provider-impacts-766k-clients/
-
Your favourite phone apps might be leaking your company’s secrets
Most of the apps on your phone is talking to a server somewhere – sending and receiving data through messages sent through APIs, the underlying infrastructure that allows apps to communicate. First seen on fortra.com Jump to article: www.fortra.com/blog/favourite-phone-apps-might-leaking-companys-secrets
-
Adobe Analytics bug leaked customer tracking data to other tenants
Adobe is warning its Analytics customers that an ingestion bug caused data from some organizations to appear in the analytics instances of others for approximately one day. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/adobe-analytics-bug-leaked-customer-tracking-data-to-other-tenants/
-
1.2 million people had information stolen during cyberattack on WestJet
Canadian airline WestJet disclosed to regulators that a data breach earlier this year exposed the information of about 1.2 million people. First seen on therecord.media Jump to article: therecord.media/westjet-data-breach-disclosures
-
1.2 million people had information stolen during cyberattack on WestJet
Canadian airline WestJet disclosed to regulators that a data breach earlier this year exposed the information of about 1.2 million people. First seen on therecord.media Jump to article: therecord.media/westjet-data-breach-disclosures
-
Red Hat OpenShift AI Flaw Opens Door to Full Infrastructure Takeover
Severe OpenShift AI bug lets low-privileged users escalate to cluster admin, risking data theft and infrastructure control. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/red-hat-openshift-flaw/
-
Microsoft Previews Graph Framework to Better Integrate Cybersecurity Tools
Microsoft this week began previewing an instance of a graph that is specifically designed to facilitate integration of disparate cybersecurity tools and platforms. Based on a data lake that is now generally available and an instance of a Model Context Protocol (MCP) server, the Microsoft Sentinel graph promises to make it simpler for cybersecurity teams..…
-
Tonic.ai + Microsoft: Accelerating AI adoption with privacy-compliant synthetic data
Tonic.ai is thrilled to join the Microsoft for Startups Pegasus Program. We’re bringing our privacy-compliant synthetic data solutions to Microsoft Azure customers. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/tonic-ai-microsoft-accelerating-ai-adoption-with-privacy-compliant-synthetic-data/
-
Tonic.ai + Microsoft: Accelerating AI adoption with privacy-compliant synthetic data
Tonic.ai is thrilled to join the Microsoft for Startups Pegasus Program. We’re bringing our privacy-compliant synthetic data solutions to Microsoft Azure customers. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/tonic-ai-microsoft-accelerating-ai-adoption-with-privacy-compliant-synthetic-data/
-
LLM07: System Prompt Leakage FireTail Blog
Sep 30, 2025 – Lina Romero – In 2025, AI is everywhere, and so are AI vulnerabilities. OWASP’s Top Ten Risks for LLMs provides developers and security researchers with a comprehensive resource for breaking down the most common risks to AI models. In previous blogs, we’ve covered the first 6 items on the list, and…
-
Tile’s Privacy Failures Leave Trackers Wide Open to Stalking
Researchers have found that Tile trackers broadcast unencrypted data, leaving users vulnerable to stalking and raising significant privacy concerns. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/tile-tracker-flaws-stalking-risks/
-
How to Choose the Right VAPT Frequency
Regular Vulnerability Assessment and Penetration Testing (VAPT) is important for businesses to identify and mitigate security risks. Choosing the right frequency depends on your organization’s risk profile, data sensitivity, regulatory requirements, and IT environment. Conducting VAPT at the optimal interval, whether quarterly, biannual, or annual, ensures continuous protection against evolving cyber threats. Let’s see how……
-
CPPA fines Tractor Supply Company $1.4 million for privacy violations
Tractor Supply Company allegedly failed to publish a privacy policy, notify job applicants of their privacy rights and shared personal data with third parties without permission. First seen on therecord.media Jump to article: therecord.media/ccpa-tractor-supply-privacy-fine
-
Hack of US Surveillance Provider RemoteCOM Exposes Court Data
A massive data breach at RemoteCOM exposed 14,000 personal files and police contacts from the SCOUT software. Learn what this aggressive spyware records, and the high risks for all involved parties. First seen on hackread.com Jump to article: hackread.com/us-surveillance-remotecom-hack-court-data/
-
Cloud provider publishes ‘tech sovereignty’ plan for UK
In the face of mounting data sovereignty concerns across Europe, UK cloud provider Civo lays out high-level plan for how the government can retain control and access of its data should the geopolitical situation sour First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366632179/Cloud-provider-publishes-tech-sovereignty-plan-for-UK
-
US Auto Insurance Platform ClaimPix Leaked 10.7TB of Records Online
Cybersecurity researcher Jeremiah Fowler discovered a massive 10.7TB ClaimPix leak exposing 5.1M customer files, vehicle data, and Power of Attorney documents. Read the full details. First seen on hackread.com Jump to article: hackread.com/us-auto-insurance-claimpix-leaked-10tb-records/
-
New Android RAT Klopatra Targets Financial Data
New Android RAT Klopatra is targeting financial institutions using advanced evasion techniques First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/android-rat-klopatra-targets/
-
Canadian airline WestJet says some customer data stolen in June cyberattack
The attack occurred during the same period when Scattered Spider had begun to pivot toward the aviation sector. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/canadian-airline-westjet-customer-data-stolen/761493/
-
FTC alleges messaging app violated child privacy law, duped users into subscriptions
A civil complaint filed by the federal government alleges that the Sendit app illegally collected data from users under 13 and tricked people into paying for subscriptions. First seen on therecord.media Jump to article: therecord.media/ftc-alleges-sendit-app-violated-children-privacy-rule
-
Harrods hackers start contacting customers
Retailer Harrods has revealed that a number of customers whose data was stolen in a cyber attack have been contacted by the perpetrators First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366632011/Harrods-hackers-start-contacting-customers
-
New Smish: New York Department of Revenue
As I was visiting SmishTank to report the most recent SMish that I had received (an iMessage from a +27 South African telephone number claiming to be from ParkMobile) I noticed there had been many recent submissions from the New York Department of Revenue. SmishTank is operated by Professor Muhammad Lutfor Rahman, a colleague of mine…
-
Introducing Resource Policies for Continuous AI Security FireTail Blog
Sep 30, 2025 – Alan Fagan – AI moves fast. New models are adopted, get updated, configurations drift. Keeping track of it all is hard, and catching security issues before they become incidents can feel impossible.That is why, as part of our latest release, we’ve added Resource Policies to FireTail.Resource Policies make it simple to…
-
Databricks enters the cybersecurity arena with an AI-driven platform
A crowded field of AI Security Platforms: Databricks’ latest move puts it in competition with established security players who’ve been leaning heavily on AI-driven analytics, including Splunk (now part of Cisco), Microsoft Sentinel, Google Chronicle, and startups like Securonix. Each offers some flavors of unifying data streams, layering AI detection, and reducing analyst fatigue.For Databricks,…
-
Researchers Disclose Google Gemini AI Flaws Allowing Prompt Injection and Cloud Exploits
Tags: ai, attack, cloud, cybersecurity, data, data-breach, exploit, flaw, google, injection, intelligence, privacy, risk, vulnerabilityCybersecurity researchers have disclosed three now-patched security vulnerabilities impacting Google’s Gemini artificial intelligence (AI) assistant that, if successfully exploited, could have exposed users to major privacy risks and data theft.”They made Gemini vulnerable to search-injection attacks on its Search Personalization Model; log-to-prompt injection attacks against Gemini Cloud First seen on thehackernews.com Jump to article: thehackernews.com/2025/09/researchers-disclose-google-gemini-ai.html
-
Microsoft Expands Sentinel Into Agentic Security Platform With Unified Data Lake
Microsoft on Tuesday unveiled the expansion of its Sentinel Security Incidents and Event Management solution (SIEM) as a unified agentic platform with the general availability of the Sentinel data lake.In addition, the tech giant said it’s also releasing a public preview of Sentinel Graph and Sentinel Model Context Protocol (MCP) server.”With graph-based context, semantic access,…