Tag: data
-
FTC says 23andMe purchaser must uphold existing privacy policy for data handling
Federal Trade Commission Chair Andrew Ferguson on Monday sent a letter to Department of Justice bankruptcy regulators warning that any purchaser of 23andMe must adhere to the company’s current privacy policies for protecting consumers’ genetic and other data. First seen on therecord.media Jump to article: therecord.media/ftc-23andme-purchaser-data-privacy
-
Hacker linked to Oracle Cloud intrusion threatens to sell stolen data
Security researchers from Trustwave SpiderLabs provided additional evidence backing up claims of a breach. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/hacker-linked-to-oracle-cloud-intrusion-threatens-to-sell-stolen-data/743981/
-
British intel intern pleads guilty to smuggling top secret data out of protected facility
Hassan Arshad, 25, admitted to transferring sensitive material from an agency computer at GCHQ headquarters. First seen on therecord.media Jump to article: therecord.media/british-intern-gchq-charged-smuggling
-
Check Point confirms breach, but says it was ‘old’ data and crook made ‘false’ claims
Explanation leaves a ‘lot of questions unanswered,’ says infosec researcher First seen on theregister.com Jump to article: www.theregister.com/2025/03/31/check_point_confirms_breach/
-
‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft
The newly identified Android banking trojan Crocodilus takes over devices, enabling overlay attacks, remote control, and keylogging. The post ‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/crocodilus-android-banking-trojan-allows-device-takeover-data-theft/
-
170,000 Impacted by Data Breach at Chord Specialty Dental Partners
An email security incident at Chord Specialty Dental Partners, a US dental service organization, has impacted more than 170,000 people. The post 170,000 Impacted by Data Breach at Chord Specialty Dental Partners appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/170000-impacted-by-data-breach-at-chord-specialty-dental-partners/
-
GenAI turning employees into unintentional insider threats
The amount of data being shared by businesses with GenAI apps has exploded, increasing 30x in one year, according to Netskope. The average organization now shares more than … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/31/genai-apps-risks-organizations/
-
Understanding Privacy Changes: eBay’s AI Policy and The Future of Data Privacy
In this episode, host Tom Eston discusses recent privacy changes on eBay related to AI training and the implications for user data. He highlights the hidden opt-out feature for AI data usage and questions the transparency of such policies, especially in regions without strict privacy laws like the United States. The host also explores how……
-
CrushFTP Vulnerability Lets Hackers Bypass Security and Seize Server Control
A newly disclosed authentication bypass vulnerability (CVE-2025-2825) in CrushFTP file transfer software enables attackers to gain complete control of servers without valid credentials. The vulnerability affects versions 10.0.0 through 11.3.0 of the popular enterprise file transfer solution, exposing organizations to data theft and system compromise. The Exploit: Bypassing Security in 3 Steps Security researchers have…
-
Water Gamayun Hackers Exploit MSC EvilTwin Zero-day Vulnerability to Hack Windows Machine
Water Gamayun, a suspected Russian threat actor, has been identified exploiting the MSC EvilTwin zero-day vulnerability (CVE-2025-26633) to compromise Windows systems. This vulnerability, embedded in the Microsoft Management Console (MSC) framework, allows attackers to execute malicious code remotely, exfiltrate sensitive data, and maintain persistent control over infected machines. The exploit leverages custom payloads and advanced…
-
How CISOs can balance business continuity with other responsibilities
Tags: attack, backup, breach, business, cio, ciso, compliance, cyber, cyberattack, cybersecurity, data, data-breach, finance, framework, healthcare, incident, incident response, metric, nist, ransomware, resilience, risk, service, strategy, supply-chain, technology, threat, usa, vulnerabilityCIO-CISO divide: Who owns business continuity?: While CISOs may find that their remit is expanding to cover business continuity, a lack of clear delineation of roles and responsibilities can spell trouble.To effectively handle business continuity, cybersecurity leaders need a framework to collaborate with IT leadership.Responding to events requires a delicate balance between thoroughness of investigation…
-
£3 million fine for healthcare MSP with sloppy security after it was hit by ransomware attack
A UK firm has been hit by a £3.07 million fine after being hit by a ransomware attack that exposed sensitive data related to almost 80,000 people, and disrupted NHS services. First seen on exponential-e.com Jump to article: www.exponential-e.com/blog/3-million-fine-for-healthcare-msp-with-sloppy-security-after-it-was-hit-by-ransomware-attack
-
Hacker Leaks Samsung Customer Data
Hacker leaks 270,000 customer tickets allegedly stolen from Samsung Germany using long-compromised credentials. The post Hacker Leaks Samsung Customer Data appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/hacker-leaks-samsung-customer-data/
-
Inside Daisy Cloud: 30K Stolen Credentials Exposed
Veriti research recently analyzed stolen data that was published in a telegram group named “Daisy Cloud” (potentially associated with the RedLine Stealer), exposing the inner workings of a cybercrime marketplace. This group offers thousands of stolen credentials in an ongoing basis across a wide range of services, from crypto exchanges to government portals, at disturbingly……
-
Unbefugter Zugriff bei einem College in Maine, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a5a9e39a-f847-4c4a-b745-a6e841c8f62f.html
-
Unbefugter Zugriff bei einer Kreditgenossenschaft in Indiana, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f809cc53-ff4f-4760-9966-6f85fc34164a.html
-
Unbefugter Zugriff bei einer Stadtverwaltung in Indiana, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7b368af8-b730-4730-9abd-13e2a105b897.html
-
Unbefugter Zugriff bei einer Kreditgenossenschaft in Pennsylvania, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e874ba63-10fe-49a3-a92f-fd79c81edb00.html
-
Cyberangriff auf eine Stadtverwaltung in Massachusetts, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6cfd8ba6-7738-4e18-aab0-a51b7bfb5470.html
-
Unbefugter Zugriff bei einer Bank in Arizona, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/655a94de-d6a8-4736-a67c-abd1cba4ebaa.html
-
Unbefugter Zugriff bei einer Kreditgenossenschaft in Maryland, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6c038d1f-41db-4c57-9bdd-c1c7215b7eba.html
-
Cyber-Zwischenfall bei einem Unternehmen der Fischereiindustrie in den USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2b12caeb-be3f-4e55-8c7c-8137883aa312.html
-
Unbefugter Zugriff bei einer theologischen Hochschule in Kentucky, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/47855a35-185f-40e2-b6b3-c293052fd213.html
-
Unbefugter Zugriff bei einem Institut in Massachusetts, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d1408b32-2393-4708-af7b-7cef159536dd.html
-
Cyberangriff auf ein College in Kalifornien, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1ffb74ee-4b1f-4579-8386-9c9d1aaf7c73.html
-
Genetic Breach Fallout: 23andMe’s Collapse Raises Security Alarms
In 2023, a massive data breach at 23andMe shook the foundation of the consumer genomics industry. Fast forward to today, the company has filed for bankruptcy. From Veriti’s perspective, this incident highlights the devastating consequences of failing to secure deeply sensitive personal data, especially when that data reaches beyond individuals and into family legacies. Veriti……
-
UK govt data people not ‘technical,’ says ex-Downing St data science head
Despite pockets of excellence, many wouldn’t make the grade in business, AI advisor implies First seen on theregister.com Jump to article: www.theregister.com/2025/03/28/uk_government_data_people/
-
European Data Health Space seit dem 26. März 2025 in Kraft
Tags: dataKleiner Nachtrag von dieser Woche. Am 26. März 2025 ist die Verordnung zum European Data Health Space formal in Kraft getreten. Die nationalen Regierungen haben nun zwei Jahre Zeit, diese EU-Vorgaben national umzusetzen. In nachfolgendem Beitrag möchte ich nochmals einen … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/29/european-data-health-space-seit-dem-26-maerz-2025-in-kraft/
-
Dodging the Data Observability Trap
Tags: dataFirst seen on scworld.com Jump to article: www.scworld.com/native/dodging-the-data-observability-trap