Tag: data
-
FBI and CISA warn about continuing attacks by Chinese ransomware group Ghost
Attacks are more focused on encryption than exfiltration: The Ghost attackers have sometimes exfiltrated data back to their Cobalt Strike Team servers or to the Mega.nz file-sharing service, but this has been rare and the amount of information stolen has been limited.According to FBI investigations, the group doesn’t regularly exfiltrate intellectual property or personally identifiable…
-
Zero Trust World: Securing your cloud data
First seen on scworld.com Jump to article: www.scworld.com/resource/zero-trust-world-securing-your-cloud-data
-
Leaked Files Tie Chinese Cybersecurity Firm to Government Censorship
TopSec data leak: 7000+ documents expose potential Chinese government surveillance and censorship practices. Learn about the key findings… First seen on hackread.com Jump to article: hackread.com/leaked-files-chinese-cybersecurity-firm-govt-censorship/
-
Apple Breaks Silence on UK Probe, Removes Data Protection Tool From UK Users
The U.K. government demanded a backdoor into Apple’s Advanced Data Protection. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/apple-advanced-data-protection-removed-uk/
-
DOGE’s USDS Purge Included the Guy Who Keeps Veterans’ Data Safe Online
The cybersecurity lead for VA.gov was fired last week. He tells WIRED that the Veterans Affairs digital hub will be more vulnerable without someone in his role. First seen on wired.com Jump to article: www.wired.com/story/doge-usds-purge-veterans-affairs-site-cybersecurity/
-
Nations Open ‘Data Embassies’ to Protect Critical Info
Estonia and Monaco back up their citizens’ information to a data center in Luxembourg, while Singapore looks to India as its safe haven for data. But geopolitical challenges remain. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/nations-data-embassies-protect-critical-info
-
How CISOs can sharpen their board pitch for IAM buy-in
Tags: access, automation, breach, business, ciso, cloud, compliance, control, cybersecurity, data, finance, guide, iam, identity, metric, risk, security-incident, strategy, supply-chainthe top focus area going into 2025. However, communicating IAM’s value to the board remains a challenge”, it isn’t enough for these security leaders to craft effective IAM strategies”, they must also secure their board’s support.CISOs know that executive buy-in is critical for obtaining the necessary funding and setting the right tone from the top. The…
-
Feds fine Warby Parker $1.5 million for failing to protect customer health data
The eyewear retailer Warby Parker was hit with a $1.5 million fine by the Department of Health and Human Services on Thursday following a credential stuffing attack in 2018 that compromised the personal information of nearly 200,000 people. First seen on therecord.media Jump to article: therecord.media/feds-fine-warby-parker-health-data
-
Apple Withdraws Strong Encryption Feature for All UK Users
US Technology Giant Reportedly Received UK Government Demand for Global Backdoor. Amidst the ever-rising tide of cyberattacks and data breaches, Apple is deactivating a key data security feature for all U.K. users, rather than accede to a reported demand from the British government that the technology giant give it on-demand backdoor access to any user’s…
-
UK police forces ‘supercharging racism’ with predictive policing
Amnesty International says predictive policing systems are ‘supercharging racism’ in the UK by taking historically biased data to further target poor and racialised communities First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366619519/UK-police-forces-supercharging-racism-with-predictive-policing
-
Apple Drops iCloud’s Advanced Data Protection in the U.K. Amid Encryption Backdoor Demands
Apple is removing its Advanced Data Protection (ADP) feature for iCloud from the United Kingdom with immediate effect following government demands for backdoor access to encrypted user data.The development was first reported by Bloomberg.ADP for iCloud is an optional setting that ensures that users’ trusted devices retain sole access to the encryption keys used to…
-
Data Leak Exposes TopSec’s Role in China’s Censorship-as-a-Service Operations
An analysis of a data leak from a Chinese cybersecurity company TopSec has revealed that it likely offers censorship-as-a-service solutions to prospective customers, including a state-owned enterprise in the country.Founded in 1995, TopSec ostensibly offers services such as Endpoint Detection and Response (EDR) and vulnerability scanning. But it’s also providing “boutique” solutions in order First…
-
Apple turns off iCloud encryption feature in UK following reported government legal order
The removal of the Advanced Data Protection (ADP) feature in the U.K. follows the British government reportedly issuing a secret legal demand to Apple to provide it with access to encrypted iCloud accounts. First seen on therecord.media Jump to article: therecord.media/apple-encryption-feature-off-britain
-
Apple Pulls Advanced Data Protection for New UK Users Amid Backdoor Demand
Apple says it can no longer offer end-to-end encrypted cloud backups in the UK and insists it will never build a backdoor or master key. The post Apple Pulls Advanced Data Protection for New UK Users Amid Backdoor Demand appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/apple-pulls-advanced-data-protection-for-new-uk-users-amid-backdoor-demand/
-
Data Suggests It’s Time to Rethink Cloud Permissions
Excessive privileges and visibility gaps create a breeding ground for cyber threats. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/data-suggests-time-to-rethink-cloud-permissions
-
Firing of 130 CISA staff worries cybersecurity industry
Cybersecurity concerns: Alexander Garcia-Tobar, CEO of email authentication provider Valimail, said the new administration’s actions are causing significant concern among security professionals. “Many of us are advocating for cybersecurity to be seen as the bi-partisan effort it should be,” he said via emai, but “the Trump administration has taken a sledgehammer to cancelling or disbanding…
-
Ransomware-Attacke auf Gesundheitsdienstleister
Die Ransomware-Gruppe Medusa will den britischen Gesundheitsdienstleister HCRG Care Group um mehr als 2.000 Daten erleichtert haben.Die Ransomware-Bande Medusa behauptet in einem Darknet-Post, mehr als 2.000 sensible Datensätze der HCRG Care Group erbeutet zu haben. Das Unternehmen zählt zu den größten unabhängigen Anbietern von Gesundheits- und Pflegedienstleistungen im Vereinigten Königreich und arbeitet eng mit dem…
-
Experts race to extract intel from Black Basta internal chat leaks
Researchers say there’s dissent in the ranks. Plus: An AI tool lets you have a go yourself at analysing the data First seen on theregister.com Jump to article: www.theregister.com/2025/02/21/experts_race_to_extract_intel/
-
CL0P Ransomware Launches Large-Scale Attacks on Telecom and Healthcare Sectors
Tags: attack, cyber, data, exploit, extortion, group, healthcare, ransomware, tactics, vulnerability, zero-dayThe notorious CL0P ransomware group has intensified its operations in early 2025, targeting critical sectors such as telecommunications and healthcare. Known for its sophisticated tactics, the group has exploited zero-day vulnerabilities to infiltrate systems, steal sensitive data, and extort victims. This resurgence follows a relatively quieter 2024, during which CL0P listed only 27 victims compared…
-
Cybersecurity in The Internet Age: Safeguarding Your Assets and Data
Cybersecurity is one of the most vital dimensions of contemporary existence with cloud storage, online transactions, and internet services ever increasing. Governments, institutions, and individuals need to be provided with adequate security measures for safeguarding financial information and investments, including cryptocurrencies like Bitcoin, from the growing cyberattacks. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cybersecurity-in-the-internet-age/
-
Fully Protected: Advanced Measures in Cyber Defense
How Crucial is Advanced Cyber Defense in Today’s Security Landscape? Securing sensitive data is a top concern. This presents a challenge that goes beyond conventional security measures. Organizations are now seeking advanced cyber defense strategies that involve non-human identities (NHIs) and secret security management to bolster their protection. These methodologies are not just the future……
-
What is SIEM? Improving security posture through event log data
Tags: access, ai, api, automation, ciso, cloud, compliance, data, defense, detection, edr, endpoint, firewall, fortinet, gartner, google, guide, ibm, infrastructure, intelligence, kubernetes, LLM, microsoft, mitigation, mobile, monitoring, network, openai, regulation, risk, router, security-incident, service, siem, soar, soc, software, threat, toolAt its core, a SIEM is designed to parse and analyze various log files, including firewalls, servers, routers and so forth. This means that SIEMs can become the central “nerve center” of a security operations center, driving other monitoring functions to resolve the various daily alerts.Added to this data are various threat intelligence feeds that…
-
South Korea Keeps DeepSeek AI Chatbot Off App Stores
Regulators Cite Privacy Concerns Over DeepSeek’s Data Collection Practices. The Personal Information Protection Commission, South Korea’s data protection regulator, has directed Chinese artificial intelligence company DeepSeek AI to withdraw its chatbot application from official app stores pending an inquiry into the chatbot’s compliance with data protection rules. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/south-korea-keeps-deepseek-ai-chatbot-off-app-stores-a-27560
-
Menlo Buys CDR Vendor Votiro to Protect Collaboration Tools
CDR, DLP Provider Will Help Safeguard Cloud-Based Applications, Collaboration Tools. Menlo Security bought a data and file security vendor led by a longtime IBM executive to secure cloud-based applications and collaboration tools. Votiro’s CDR and DLP tools will neutralize threats in real time and facilitate AI-driven data protection without disrupting user workflows. First seen on…
-
South Korea alleges DeepSeek of user data sharing with ByteDance
First seen on scworld.com Jump to article: www.scworld.com/brief/south-korea-alleges-deepseek-of-user-data-sharing-with-bytedance
-
Data breach notifications commenced by Finastra
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-notifications-commenced-by-finastra