Tag: data
-
DHS Has Been Collecting US Citizens’ DNA for Years
Newly released data shows Customs and Border Protection funneled the DNA of nearly 2,000 US citizens”, some as young as 14″, into an FBI crime database, raising alarms about oversight and legality. First seen on wired.com Jump to article: www.wired.com/story/dhs-has-been-collecting-us-citizens-dna-for-years/
-
SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw
SolarWinds has released hot fixes to address a critical security flaw impacting its Web Help Desk software that, if successfully exploited, could allow attackers to execute arbitrary commands on susceptible systems.The vulnerability, tracked as CVE-2025-26399 (CVSS score: 9.8), has been described as an instance of deserialization of untrusted data that could result in code execution.…
-
Oracle gets to store US users’ TikTok data, says Trump
President to announce details on Big Red’s storage and security deal for Chinese social media phenomenon later this week First seen on theregister.com Jump to article: www.theregister.com/2025/09/23/oracle_gets_to_store_us/
-
How Do Online Gaming Sites Keep Players and Their Data Safe?
Online gaming relies on trust. Players share their email addresses, payment details, and activity data every time they log in. Without strong protection, that information could be exposed or misused. Platforms treat security as part of the service itself, not an extra feature. Encryption, identity checks, system defenses, and fraud monitoring all run in the…
-
Inc Ransomware Group Claims 5.7 TB Theft from Pennsylvania Attorney General’s Office
The Inc ransomware gang claims to have stolen 5.7 TB of data from the Pennsylvania Attorney General’s office in an August 2025 attack. Find out how the breach unfolded, why government agencies are a top target, and what this means for citizens. First seen on hackread.com Jump to article: hackread.com/inc-ransomware-data-pennsylvania-attorney-general/
-
How to Use 1Password’s Travel Mode at the Border (2025)
Tags: dataTravel Mode not only hides your most sensitive data”, it acts as if that data never existed in the first place. First seen on wired.com Jump to article: www.wired.com/story/1password-travel-mode/
-
Why Modern SaaS Platforms Depend on Contextual Data
Discover how contextual data like time, location, and device transforms SaaS platforms, enabling personalized, intuitive, and adaptive user experiences. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/why-modern-saas-platforms-depend-on-contextual-data/
-
NPM package caught using QR Code to fetch cookie-stealing malware
Newly discovered npm package ‘fezbox’ employs QR codes to hide a second-stage payload to steal cookies from a user’s web browser. The package, masquerading as a utility library, leverages this innovative steganographic technique to harvest sensitive data, such as user credentials, from a compromised machine. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/npm-package-caught-using-qr-code-to-fetch-cookie-stealing-malware/
-
6 novel ways to use AI in cybersecurity
Tags: access, ai, attack, authentication, business, ceo, cloud, cyberattack, cybersecurity, data, defense, detection, email, infrastructure, intelligence, malicious, malware, network, phishing, risk, service, tactics, technology, threat, tool, training2. Machine-learning generative adversarial networks: Michel Sahyoun, chief solutions architect with cybersecurity technology firm NopalCyber, recommends using generative adversarial networks (GANs) to create, as well as protect against, highly sophisticated previously unseen cyberattacks. “This technique enables cybersecurity systems to learn and adapt by training against a very large number of simulated threats,” he says.GANs allow…
-
6 novel ways to use AI in cybersecurity
Tags: access, ai, attack, authentication, business, ceo, cloud, cyberattack, cybersecurity, data, defense, detection, email, infrastructure, intelligence, malicious, malware, network, phishing, risk, service, tactics, technology, threat, tool, training2. Machine-learning generative adversarial networks: Michel Sahyoun, chief solutions architect with cybersecurity technology firm NopalCyber, recommends using generative adversarial networks (GANs) to create, as well as protect against, highly sophisticated previously unseen cyberattacks. “This technique enables cybersecurity systems to learn and adapt by training against a very large number of simulated threats,” he says.GANs allow…
-
KuppingerCole 2025: Why Thales is a Market Leader in API Security
APIs are the backbone of modern applications connecting critical microservices and enabling enterprises to turn data into context-aware business logic via AI across their digital services. As applications become more contextual, APIs expose the data, workflows, and model interactions attackers target, making them the enterprise’s primary attack surface. KuppingerCole’s Leadership Compass: API Security & Management……
-
KuppingerCole 2025: Why Thales is a Market Leader in API Security
APIs are the backbone of modern applications connecting critical microservices and enabling enterprises to turn data into context-aware business logic via AI across their digital services. As applications become more contextual, APIs expose the data, workflows, and model interactions attackers target, making them the enterprise’s primary attack surface. KuppingerCole’s Leadership Compass: API Security & Management……
-
EV charging biz zaps customers with data leak scare
Names, emails unplugged in DCS support snafu but ‘billing is safe’ First seen on theregister.com Jump to article: www.theregister.com/2025/09/23/dcs_data_breach/
-
Cybercriminals are going after law firms’ sensitive client data
Regardless of their size, all law firms hold valuable data, including client communications, financial records, and confidential legal strategies. That data has never been … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/23/law-firms-cyberthreats/
-
EV charging biz zaps customers with data leak scare
Names, emails unplugged in DCS support snafu but ‘billing is safe’ First seen on theregister.com Jump to article: www.theregister.com/2025/09/23/dcs_data_breach/
-
Cybercriminals are going after law firms’ sensitive client data
Regardless of their size, all law firms hold valuable data, including client communications, financial records, and confidential legal strategies. That data has never been … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/23/law-firms-cyberthreats/
-
Microsoft DCU’s Takedown of RaccoonO365
When I saw the name of the Microsoft Digital Crime Unit’s latest target, “RaccoonO365” I probably reacted to it differently than most. With the help of a friend in Lagos, we’ve been watching the money launderers and things have reached a point that they now refer to what we previously called “Business Email Compromise” or…
-
Achieving Certainty in Data Security Measures
How Can Non-Human Identities Enhance Data Security Certainty? One question persists: how can organizations enhance data security certainty while managing non-human identities (NHIs) effectively? NHIs”, machine identities that operate within our cybersecurity frameworks”, are critical components in achieving reliable security practices. The challenge, however, lies in bridging the often wide disconnect between security and research…
-
Randall Munroe’s XKCD ”Cursed Number<<
Tags: datavia the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/09/randall-munroes-xkcd-cursed-number/
-
Jeep and Dodge Parent Company Stellantis Confirms Customer Data Breach
Stellantis, parent of Jeep, Chrysler, Dodge and FIAT, confirms data breach through third-party vendor. Contact info exposed, financial data not affected. First seen on hackread.com Jump to article: hackread.com/jeep-dodge-stellantis-confirms-customer-data-breach/
-
2 Clinics Notify 700,000 Patients of Alleged BianLian Hacks
Now-Dormant Gang Claimed North Carolina, Florida Groups on Data Leak Site This Year. Two medical practices – in North Carolina and Florida – are notifying a total of more than 700,000 patients whose information was potentially stolen in separate hacks earlier this year. The now-dormant ransomware gang BianLian had claimed both organizations as victims on…
-
FBI Warns of Spoofed IC3 Websites Harvesting Victim Data
Cybercriminals are mimicking the FBI’s IC3 site to steal personal info. Learn how to spot fake portals and stay protected. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/fbi-warns-spoofed-ic3-websites/
-
PSNI chief sorry over failure to delete data unlawfully seized from journalists
Tags: dataPSNI apologises after failing to destroy data unlawfully seized from journalists Trevor Birney and Barry McCaffrey despite a court agreement. It also apologised to the Investigatory Powers Tribunal for failing to disclose key information to the court. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366631371/PSNI-chief-sorry-over-failure-to-delete-data-unlawfully-seized-from-journalists
-
Technical Analysis of Zloader Updates
Tags: access, attack, banking, cloud, communications, control, corporate, data, data-breach, detection, dns, encryption, malware, network, ransomware, strategy, threat, update, windowsIntroductionZloader (a.k.a. Terdot, DELoader, or Silent Night) is a Zeus-based modular trojan that emerged in 2015. Zloader was originally designed to facilitate banking, but has since been repurposed for initial access, providing an entry point into corporate environments for the deployment of ransomware. Following an almost two-year hiatus, Zloader reemerged in September 2023 with significant enhancements…
-
Automaker giant Stellantis confirms data breach after Salesforce hack
Automotive manufacturing giant Stellantis has confirmed that attackers stole some of its North American customers’ data after gaining access to a third-party service provider’s platform. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/automaker-giant-stellantis-confirms-data-breach-after-salesforce-hack/
-
Data Trust Takes Center Stage at Healthcare Security Summit
CISOs, Regulators and Innovators Unite in New York to Safeguard Healthcare’s Future. From discussions on health data explosion to the keynote on AI deployment, the Healthcare Security Summit: New York offered practical strategies to manage data risks, ensure continuity of patient care and prepare for a regulatory landscape that is rapidly reshaping cybersecurity priorities. First…
-
Top 10 Best Cybersecurity Compliance Management Software in 2025
Cybersecurity compliance has become a mission-critical part of modern business operations. With the rise of data privacy laws, global regulations, and increasing cyber threats, organizations need reliable compliance management software to stay secure and audit-ready. The best compliance platforms streamline frameworks like SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, and more while automating workflows,…