Tag: data
-
Data Entanglement, AI and Privacy: Why the Law Isn’t Ready
As data continues to fuel AI’s evolution, the fight for privacy will become more complex and more urgent than ever before. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/data-entanglement-ai-and-privacy-why-the-law-isnt-ready/
-
Apple pulls Advanced Data Protection in UK, sparking concerns
Privacy and security concerns mount, as Apple pulls the end-to-end encryption feature for users located in the U.K. following pressures from the government. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366619638/Apple-pulls-Advanced-Data-Protection-in-UK-sparking-concerns
-
KernelSnitch: Uncovering a New Side-Channel Attack on Data Structures
Researchers at Graz University of Technology have uncovered a groundbreaking software-based side-channel attack,KernelSnitch, which exploits timing variances in Linux kernel data structures. Unlike hardware-dependent attacks, KernelSnitch targets hash tables, radix trees, and red-black trees, enabling unprivileged attackers to leak sensitive data across isolated processes, as per a report by a Researcher Published on Github. The…
-
Randall Munroe’s XKCD ‘KM3NeT’
Tags: dataPermalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/randall-munroes-xkcd-km3net/
-
Concerns Over Apple’s UK iCloud Encryption Deactivation
Withdrawal of Advanced Data Protection for British Users Could Have Global Impact. Apple’s decision to withdraw iCloud end-to-end encryption in the United Kingdom has privacy and security advocates worried that the British government could scan and surveil sensitive information of Apple users worldwide. Apple on Friday deactivated its Advanced Data Protection feature in the U.K.…
-
DeepSeek’s ByteDance Data-Sharing Raises Fresh Security Concerns
Confirmation by South Korea’s data protection agency that the AI chatbot sent data to TikTok’s Chinese parent company has spurred a ban in that nation, and is again is calling into question DeepSeek’s safety. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/deepseek-bytedance-data-sharing-security-concerns
-
Warby Parker slapped with $1.5M penalty over data breach
First seen on scworld.com Jump to article: www.scworld.com/brief/warby-parker-slapped-with-1-5m-penalty-over-data-breach
-
Chinese cybersecurity firm’s involvement in surveillance, censorship exposed by data leak
First seen on scworld.com Jump to article: www.scworld.com/brief/chinese-cybersecurity-firms-involvement-in-surveillance-censorship-exposed-by-data-leak
-
Android App on Google Play Targets Indian Users to Steal Login Credentials
A malicious Android application, Finance Simplified (package: com.someca.count), has been identified on the Google Play Store, targeting Indian users under the guise of a financial management tool. The app, which claims to offer an EMI calculator, is instead a sophisticated malware platform facilitating predatory lending, data theft, and extortion. Rapid Spread and Exploitative Practices The…
-
European Union calls for more cyber data-sharing with Nato
Updates to the EU’s Cyber Blueprint, establishing best practice for multilateral security incident response in Europe, include calls for more collaboration with Nato member states, as the geopolitical environment becomes ever more fractious First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366619486/European-Union-calls-for-more-cyber-data-sharing-with-Nato
-
Australia bans government use of Kaspersky software over Russian espionage concerns
Kaspersky software “poses an unacceptable security risk to the Australian government, networks, and data,” Home Affairs Secretary Stephanie Foster said in announcing a ban on the cybersecurity company’s products. First seen on therecord.media Jump to article: therecord.media/kaspersky-australia-government-ban
-
Google Cloud Shields Data With Quantum-Resistant Digital Signatures
Google Cloud’s Key Management Service now features quantum-safe digital signatures to strengthen data integrity and prepare for emerging quantum computing challenges First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/google-cloud-pqc-digital-signatures/
-
A data leak exposes the operations of the Chinese private firm TopSec, which provides Censorship-as-a-Service
A leak suggests that Chinese cybersecurity firm TopSec offers censorship-as-a-service services, it provided bespoke monitoring services to a state-owned enterprise facing a corruption scandal. SentinelLABS researchers analyzed a data leak that suggests that the Chinese cybersecurity firm TopSec offers censorship-as-a-service services. The origin of the data leak is unclear, the leak is large and inconsistently…
-
How to utilize VPN for safe work and remote work environments
A VPN enhances online privacy, encrypts data, and secures devices. Essential for remote work, it protects against cyber threats and ensures safer internet use. First seen on hackread.com Jump to article: hackread.com/how-to-utilize-vpn-safe-work-remote-work-environments/
-
Cybersecurity Weekly Update 24 February 2025
Tags: access, ai, apple, attack, cyber, cyberattack, cybersecurity, data, email, encryption, finance, government, office, privacy, regulation, risk, service, theft, updateWelcome to this week’s edition of our cybersecurity news roundup, bringing you the latest developments and insights from the UK and beyond. Home Office Contractor’s Data Collection Sparks Privacy Concerns The Home Office faces scrutiny after revelations that its contractor, Equifax, collected data on British citizens while conducting financial checks on migrants applying for fee…
-
Apple Removes Advanced Data Protection (ADP) for UK Users
Apple has discontinued its Advanced Data Protection (ADP) feature for UK users following a legal demand from the British government to access encrypted user data. The move marks a pivotal moment in the ongoing global debate over privacy rights and national security, with critics warning of far-reaching implications for consumer security and international tech policy.…
-
âš¡ THN Weekly Recap: From $1.5B Crypto Heist to AI Misuse & Apple’s Data Dilemma
Welcome to your weekly roundup of cyber news, where every headline gives you a peek into the world of online battles. This week, we look at a huge crypto theft, reveal some sneaky AI scam tricks, and discuss big changes in data protection.Let these stories spark your interest and help you understand the changing threats…
-
Australia Bans Kaspersky Software Over National Security and Espionage Concerns
Australia has become the latest country to ban the installation of security software from Russian company Kaspersky, citing national security concerns.”After considering threat and risk analysis, I have determined that the use of Kaspersky Lab, Inc. products and web services by Australian Government entities poses an unacceptable security risk to Australian Government, networks and data,…
-
Working group formed to draft federal data privacy bill
First seen on scworld.com Jump to article: www.scworld.com/brief/working-group-formed-to-draft-federal-data-privacy-bill
-
Phishing campaign exploits Webflow CDN to steal credit card data
First seen on scworld.com Jump to article: www.scworld.com/brief/phishing-campaign-exploits-webflow-cdn-to-steal-credit-card-data
-
Apple removes iCloud encryption in UK following backdoor demand
Apple removed iCloud’s Advanced Data Protection in the UK after the government requested encryption backdoor access. Apple ends iCloud end-to-end encryption in the United Kingdom following the government’s request for encryption backdoor access. Advanced Data Protection is now unavailable for new UK users. In 2022, the IT giant introduced the optional setting Advanced Data Protection (ADP)…
-
Advanced Data Protection: Apple entfernt erweiterte iCloud-Sicherheit in UK
Apple hat seine Advanced-Data-Protection-Funktion im Vereinigten Königreich abgeschaltet, um zu verhindern, eine Backdoor einrichten zu müssen. First seen on golem.de Jump to article: www.golem.de/news/advanced-data-protection-apple-entfernt-erweiterte-icloud-sicherheit-in-uk-2502-193619.html
-
Stay Calm: Securing Your Enterprise Against Leaks
Why Is Protecting Your Enterprise From Data Leaks So Crucial? Where data is the lifeblood of organizations and data breaches are becoming more common, can we truly afford to be complacent about enterprise security? High-profile breaches reveal the extensive damage that could be inflicted. Government interference, hefty fines, and lasting reputational damage are just a……
-
Top House EC Republicans query public for ideas on data privacy law
A request for information from GOP leaders on the House Energy and Commerce Committee is Congress’ latest attempt to push comprehensive data privacy standards. First seen on cyberscoop.com Jump to article: cyberscoop.com/energy-commerce-request-for-information-data-privacy-standards/
-
Schwachstelle in Mongoose-Bibliothek gefährden MongoDB
Kurze Information für Entwickler, die die Mongoose-JavaScript-Bibliothek zum Zugriff auf MongoDB verwenden. Sicherheitsforscher haben gleich zwei kritische Schwachstellen entdeckt, die die Zugriffe auf MongoDB-Datenbanken gefährden. Mongoose ist eine objektorientierte JavaScript-Programmierbibliothek Object Data Modeling (ODM)-Bibliothek , die eine Verbindung … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/02/22/schwachstelle-in-mongoose-bibliothek-gefaehrden-mongodb/
-
Leaked chat logs expose inner workings of secretive ransomware group
Researchers are poring over the data and feeding it into ChatGPT. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/02/leaked-chat-logs-expose-inner-workings-of-secretive-ransomware-group/
-
Change Healthcare’s Mega Attack: 1 Year Later
Ransomware Attack Taught Lessons on Health Sector Resiliency, Vendor Redundancy. It’s been one year since hackers attacked IT services provider Change Healthcare, quickly shutting down critical processes for thousands healthcare entities, triggering a data breach affecting 190 million people. So what top lessons are emerging from that massive disruption and data compromise? First seen on…
-
FBI and CISA warn about continuing attacks by Chinese ransomware group Ghost
Attacks are more focused on encryption than exfiltration: The Ghost attackers have sometimes exfiltrated data back to their Cobalt Strike Team servers or to the Mega.nz file-sharing service, but this has been rare and the amount of information stolen has been limited.According to FBI investigations, the group doesn’t regularly exfiltrate intellectual property or personally identifiable…