Tag: data
-
Mega-Breaches Bump Up 2024 Victim Count
Identity Theft Resource Center Catalogs 3,158 Known US Incidents in 2024. The number of U.S. organizations falling victim to a data breach appears to be holding steady, as viewed on an annual basis, according to the latest annual data breach report from the Identity Theft Resource Center, which counted 3,158 reported data breaches in 2024,…
-
ENGlobal says hackers accessed ‘sensitive personal’ data during cyberattack
The engineering and automation contractor for the U.S. government said the hackers encrypted some of the company’s files. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/28/englobal-says-hackers-accessed-sensitive-personal-data-during-cyberattack/
-
10 Tipps zum DataDay 2025
KnowBe4 feiert den Datenschutztag mit praktischen und wirksamen Empfehlungen, die Einzelpersonen und Organisationen dabei helfen sollen, die Kontrolle über ihre Datensicherheit zu übernehmen. In einer Zeit, in der Daten ständig gesammelt, weitergegeben und monetarisiert werden, erinnert der Data-Privacy-Day jedes Jahr daran, wie wichtig es ist, die Privatsphäre im Internet zu schützen und zu fördern. Der…
-
Mega Data Breaches Push US Victim Count to 1.7 Billion
The number of data breach victims increased 312% annually to exceed 1.7 billion in 2024, according to the ITRC 2024 Annual Data Breach Report First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/mega-data-breaches-us-victim-17/
-
iPhone users targeted in Apple’s first zero-day exploit in 2025
Apple iPhone users were targeted for privilege escalation in the zero-day exploitation of a use-after-free vulnerability affecting Apple’s Core Media framework.”A malicious application may be able to elevate privileges,” Apple said in the security update description. “Apple is aware of a report that this issue may have been actively exploited against versions of iOS before…
-
DeepSeek hit by cyberattack and outage amid breakthrough success
Tags: access, ai, apple, attack, ceo, china, compliance, control, cyberattack, cybersecurity, data, detection, encryption, finance, GDPR, google, group, HIPAA, infrastructure, malicious, nvidia, open-source, risk, saas, service, startup, technology, threat, tool, training, vulnerabilityChinese AI startup DeepSeek said it was hit by a cyberattack, prompting the company to restrict user registrations and manage website outages as demand for its AI assistant soared.According to the company’s status page, DeepSeek has been investigating the issue since late evening Beijing time on Monday.”Due to large-scale malicious attacks on DeepSeek’s services, registration…
-
New Phishing Scam Targets Amazon Prime Membership to Steal Credit Card Data
A recent investigation has uncovered a sophisticated phishing campaign leveraging malicious PDF files to redirect unsuspecting users to fake Amazon-branded phishing websites. Researchers from Unit 42 reported that this campaign utilizes PDFs containing embedded links as an initial lure to compromise users and steal sensitive information such as login credentials and credit card details. Attack…
-
US takes aim at healthcare cybersecurity with proposed HIPAA changes
Tags: access, authentication, best-practice, breach, compliance, control, csf, cyber, cyberattack, cybersecurity, data, defense, detection, dora, encryption, finance, framework, government, group, healthcare, HIPAA, incident response, infrastructure, insurance, intelligence, jobs, law, malware, mfa, network, nist, penetration-testing, phishing, privacy, ransom, ransomware, regulation, resilience, risk, security-incident, service, skills, technology, threat, tool, update, usa, vulnerability, vulnerability-managementThe US Department of Health and Human Services (HHS) has launched a consultation on stricter rules for the safeguarding of electronic health records.The proposed revamp of security rules covered by the Health Insurance Portability and Accountability Act (HIPAA) is designed to address the increased risk from cyberattacks such as ransomware against healthcare environments.The revamped rules…
-
Celebrating Data Privacy Day 2025: Why Protecting Your Information Is More Important Than Ever
Data Privacy Day (DPD), observed annually on January 28, is a global initiative dedicated to raising awareness about the critical importance of safeguarding personal information. With cyber threats lurking around every corner of the internet, the day serves as a reminder for individuals and organizations alike to assess their online behavior and take proactive steps…
-
What Makes This “Data Privacy Day” Different?
Tags: access, ai, attack, breach, business, cloud, data, data-breach, finance, identity, infrastructure, malware, monitoring, phishing, privacy, ransomware, risk, scam, threat, tool, training, vulnerabilityAs we celebrate Data Privacy Day, Bernard Montel, Tenable’s EMEA Technical Director and Security Strategist, wants to remind us that we live in a digital world and that we need to protect it. With data breaches a daily occurrence, and AI changing the playing field, he urges everyone to “do better.” Launched in April 2006…
-
The cybersecurity skills gap reality: We need to face the challenge of emerging tech
The cybersecurity skills shortage remains a controversial topic. Research from ISC2 states that the current global workforce of cybersecurity professionals stands at 5.5 million, but the workforce currently needs 10.2 million, a gap of 4.8 million people.Skeptics (and there are lots of them) say hogwash! They claim that these numbers are purely self-serving for ISC2,…
-
Passkeys are gaining popularity, but too much authentication is hard to manage
Tags: access, authentication, cybersecurity, data, passkey, password, software, strategy, zero-trustKeeper Security, the cybersecurity provider of zero-trust and zero-knowledge Privileged Access Management (PAM) software protecting passwords, passkeys, privileged accounts, secrets and remote connections, announces the release of its latest Insight Report, >>Navigating a Hybrid Authentication Landscape.
-
Randall Munroe’s XKCD ‘T. Rex Evolution’
Tags: datavia the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/01/randall-munroes-xkcd-t-rex-evolution/
-
DeepSeek’s Popular AI App Is Explicitly Sending US Data to China
Amid ongoing fears over TikTok, Chinese generative AI platform DeepSeek says it’s sending heaps of US user data straight to its home country, potentially setting the stage for greater scrutiny. First seen on wired.com Jump to article: www.wired.com/story/deepseek-ai-china-privacy-data/
-
Privacy Roundup: Week 4 of Year 2025
Tags: access, ai, apt, attack, backup, botnet, breach, cctv, cve, cybersecurity, data, data-breach, detection, email, exploit, firmware, flaw, google, group, identity, infrastructure, korea, lazarus, leak, login, malicious, malware, north-korea, phishing, phone, privacy, regulation, remote-code-execution, risk, router, scam, service, software, startup, technology, threat, tool, update, virus, vulnerability, windowsThis is a news item roundup of privacy or privacy-related news items for 19 JAN 2025 – 25 JAN 2025. Information and summaries provided here are as-is for warranty purposes. Note: You may see some traditional “security” content mixed-in here due to the close relationship between online privacy and cybersecurity – many things may overlap;…
-
Change Healthcare Breach Impact Doubles to 190M People
One of the largest data breaches in history was apparently twice as impactful as previously thought, with PII belonging to hundreds of millions of people sitting in the hands of cybercriminals. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/change-healthcare-breach-190m-people
-
USPS Impersonators Tap Trust in PDFs in Smishing Attack Wave
Attackers aim to steal people’s personal and payment-card data in the campaign, which dangles the threat of an undelivered package and has the potential to reach organizations in more than 50 countries. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/usps-impersonators-pdfs-smishing-campaign
-
Nursing Home, Rehab Chain Says Hack Affects Nearly 70,000
RansomHub Theft Hit Patients of 2 Dozen HCF Facilities and Home Healthcare Unit. A chain of more than two dozen skilled nursing and rehabilitation facilities is notifying tens of thousands of patients whose information was compromised in a hacking incident last fall. Russian-speaking cybercriminal gang RansomHub claims to have published 250 gbytes of data stolen…
-
The Case for Proactive, Scalable Data Protection
Whether you’re facing growing data demands and increased cyber threats, or simply looking to future-proof your business, it’s time to consider the long-term benefits of transitioning to a cloud-first infrastructure. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/case-proactive-scalable-data-protection
-
TalkTalk confirms data breach involving a third-party platform
UK telecommunications firm TalkTalk disclosed a data breach after a threat actor announced the hack on a cybercrime forum. UK telecommunications company TalkTalk confirmed a data breach after a threat actor claimed responsibility for the cyber attack on a cybercrime forum and offered for sale alleged customer data. A threat actor named >>b0nd
-
New ransomware group Funksec is quickly gaining traction
Tags: access, ai, attack, computer, control, country, cybercrime, data, data-breach, ddos, detection, email, encryption, extortion, government, group, leak, LLM, malware, password, powershell, ransom, ransomware, russia, rust, service, threat, tool, usa, windowsThreat reports for December showed a newcomer to the ransomware-as-a-service (RaaS) landscape quickly climbing the ranks. Called Funksec, this group appears to be leveraging generative AI in its malware development and its founders are tied to hacktivist activity.Funksec was responsible for 103 out of 578 ransomware attacks tracked by security firm NCC Group in December,…
-
American National Insurance Company data likely stolen in MOVEit hack exposed
First seen on scworld.com Jump to article: www.scworld.com/brief/american-national-insurance-company-data-likely-stolen-in-moveit-hack-exposed
-
Alleged TalkTalk data compromise under scrutiny
Tags: dataFirst seen on scworld.com Jump to article: www.scworld.com/brief/alleged-talktalk-data-compromise-under-scrutiny
-
Brazil bans iris scan company co-founded by Sam Altman from paying citizens for biometric data
Brazil’s National Data Protection Authority (ANPD) is blocking Tools for Humanity, a company co-founded by OpenAI’s Sam Altman, from offering individuals cryptocurrency in return for iris scans intended for an online identity program.]]> First seen on therecord.media Jump to article: therecord.media/brazil-iris-scan-data-privacy-tools-for-humanity
-
Change Healthcare Breach Impacted Data Of 190 Million People: UnitedHealth
UnitedHealth says that the 2024 breach of Change Healthcare impacted the data of 190 million people, up from the prior estimate of 100 million people. First seen on crn.com Jump to article: www.crn.com/news/security/2025/change-healthcare-breach-impacted-data-of-190-million-people-unitedhealth
-
TalkTalk Confirms Data Breach, Downplays Impact
UK telecoms firm TalkTalk has confirmed falling victim to a data breach after a threat actor boasted about hacking it. The post TalkTalk Confirms Data Breach, Downplays Impact appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/talktalk-confirms-data-breach-downplays-impact/
-
White House Considers Oracle-Led Takeover of TikTok with U.S. Investors
In a significant development, the Trump administration is reportedly formulating a plan to prevent a nationwide ban on TikTok, involving Oracle and a consortium of private investors. Under the proposed arrangement, ByteDance, TikTok’s Chinese parent company, would retain a minority stake, while Oracle would oversee critical operations, including algorithm management, data collection, and software updates.…
-
UnitedHealth hikes number of Change cyberattack breach victims to 190M
The new estimate nearly doubles the company’s previous report of 100 million affected individuals, already the largest healthcare data breach ever reported to federal regulators. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/change-healthcare-attack-affects-190-million/738369/
-
GitHub Vulnerability Exposes User Credentials via Malicious Repositories
A cybersecurity researcher recently disclosed several critical vulnerabilities affecting Git-related projects, revealing how improper handling of credential protocols can lead to sensitive data leaks. From GitHub Desktop to Git Credential Manager and Git LFS, these issues were uncovered during a routine bug-hunting session for the GitHub Bug Bounty program, resulting in the assignment of multiple…
-
Critical Vulnerability in IBM Security Directory Enables Session Cookie Theft
IBM has announced the resolution of several security vulnerabilities affecting its IBM Security Directory Integrator and IBM Security Verify Directory Integrator products. The vulnerabilities, identified through the Common Vulnerabilities and Exposures (CVE) system, expose users to various risks, including sensitive data disclosure and potential cookie theft. The company urges customers to update to the latest…