Tag: data
-
PowerSchool data breach brings claims of negligence, poor cyber hygiene
The K-12 software company is facing legal pushback and criticism following a cyberattack that impacted a still unknown number of districts. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/powerschool-data-breach-lawsuits-negligence/737961/
-
Trump-Backed Stargate Initiative to Pour $500B into AI
AI Consortium Includes OpenAI, SoftBank and Oracle. Tech giants OpenAI, SoftBank and Oracle are forming a new entity in a bid to advance artificial intelligence infrastructure in the United States. Stargate aims to establish the foundational infrastructure for future AI development, including building data centers nationwide. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/trump-backed-stargate-initiative-to-pour-500b-into-ai-a-27350
-
ADP deepens relationship with Wavenet
Tags: dataCollaboration between Assured Data Protection and Wavenet, as well as Evolve and Evolve IP, underlines the benefits of partners working together First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366618296/ADP-deepens-relationship-with-Wavenet
-
Doti AI Raises £7 Million Seed Funding for Instant Access to Internal Company Data
Doti’s platform uses AI to improve, automate, and streamline standard office and business processes across distributed and hybrid environments. The post Doti AI Raises £7 Million Seed Funding for Instant Access to Internal Company Data appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/doti-ai-raises-7-million-seed-funding-for-instant-access-to-internal-company-data/
-
What PowerSchool isn’t saying about its ‘massive’ student data breach
The hack has the potential to be one of the biggest of the year, but the edtech giant is refusing to answer important questions First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/22/what-powerschool-isnt-saying-about-its-massive-student-data-breach/
-
Security is Actually a Data Search Problem: How We Win by Treating it Like One
The reality is stark: Cybersecurity isn’t an endpoint problem or a reactive defense game”, it’s a data search problem. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/security-is-actually-a-data-search-problem-how-we-win-by-treating-it-like-one/
-
Trust in Cloud Compliance: Ensuring Regulatory Alignment
Can Your Organization Trust in Cloud Compliance? As businesses increasingly transition to cloud-based operations, the question arises: Can we trust the cloud to keep our data secure and compliant? With the rise of regulatory standards and data protection laws, high-level cloud compliance trust has become a critical concern for enterprises. Overseeing the trust in cloud……
-
Spooks of the internet came alive this Halloween
Halloween 2024 made history with a massive spike in distributed denial of service (DDoS) attacks, with one particular assault reaching over 5 Terabits-per-second (Tbps) worth of phony traffic.In its quarterly analysis of DDoS attacks, Cloudflare reported a surge in hyper-volumetric attacks in the fourth quarter of 2024.”In the fourth quarter, over 420 of those attacks…
-
Discover Hidden Browsing Threats: Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks
As GenAI tools and SaaS platforms become a staple component in the employee toolkit, the risks associated with data exposure, identity vulnerabilities, and unmonitored browsing behavior have skyrocketed. Forward-thinking security teams are looking for security controls and strategies to address these risks, but they do not always know which risks to prioritize. In some cases,…
-
Kommentar von Dr. Christoph Matras, FPS – Data Scraping und Urheberrecht beim Training von KI-Modellen
First seen on security-insider.de Jump to article: www.security-insider.de/-urheberrecht-data-scraping-ki-training-urteil-a-29ff437114879b6ee7f6325ab8034444/
-
Half a million hotel guests at risk after hackers accessed sensitive data
The personal information of almost half a million people is now in the hands of hackers after a security breach of a company used by some of the world’s best known hotel brands. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/half-a-million-hotel-guests-at-risk-after-hackers-accessed-sensitive-data
-
SQL Injection Vulnerability in Microsoft’s DevBlogs Lets Hackers Injecting Malicious SQL
In a recent discovery, a security researcher uncovered a critical SQL injection vulnerability on Microsoft’s DevBlogs website (accessible at https://devblogs.microsoft.com). This vulnerability could allow attackers to manipulate the site’s underlying database by injecting malicious SQL queries, posing a significant risk to the platform and its data integrity. Identifying the Vulnerability The vulnerability was found in the…
-
Cyberattack Hits PowerSchool, Exposing Personal Data of Students and Staff
PowerSchool, a leading provider of cloud-based software used by schools to manage student information, experienced a cybersecurity incident. The PowerSchool cyberattack, which occurred between December 22 and December 28, 2024, affected several school districts across North America. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/powerschool-cyberattack-detail/
-
Security chiefs whose companies operate in the EU should be exploring DORA now
Tags: attack, business, ciso, compliance, conference, corporate, cyber, cybersecurity, data, detection, dora, finance, framework, GDPR, incident, network, regulation, resilience, risk, service, technology, threat, vulnerabilityIf your enterprise operates in Europe, you should care about the Digital Operational Resilience Act (DORA), which took effect on January 17. DORA, also known as Directive (EU) 2022/2555 of the European Parliament, aims to enhance and build the EU’s cybersecurity capabilities and it has been hanging like the Sword of Damocles over the heads…
-
Imperva Protects Against the Exploited CVEs in the Cleo Data Theft Attacks
The Clop ransomware group has once again demonstrated its ability to exploit vulnerabilities to compromise sensitive systems. As Cleo”, a managed file transfer provider for businesses”, grapples with the aftermath of Clop’s targeted attack on their systems, the spotlight turns to CVE-2024-50623 and CVE-2024-55956, two critical vulnerabilities that enabled these breaches. In this blog, we’ll…
-
PowerSchool theft latest: Decades of Canadian student records, data from 40-plus US states feared stolen
Lawsuits pile up after database accessed by miscreants First seen on theregister.com Jump to article: www.theregister.com/2025/01/22/powerschool_canada_lawsuits/
-
HPE Investigates After Alleged Data Breach
The company reports that it is not experiencing any operational issues within its business, so far. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/hpe-investigates-alleged-data-breach
-
Three Keys to Modernizing Data Security: DSPM, AI, and Encryption
Tags: access, ai, automation, best-practice, business, cloud, compliance, container, control, cyber, cybercrime, data, data-breach, detection, encryption, GDPR, incident response, infrastructure, privacy, regulation, risk, saas, security-incident, skills, software, strategy, threat, tool, vulnerabilityThree Keys to Modernizing Data Security: DSPM, AI, and Encryption andrew.gertz@t“¦ Tue, 01/21/2025 – 14:56 Organizations worldwide face a “perfect storm” of increasing and ever-evolving cyber threats. Internal and external factors are at play, elevating cyber risks and their consequences and mandating new approaches to safeguard data. A recent study based on responses from over…
-
Disciplinary and special ed records of Toronto students may have leaked in PowerSchool breach
The data breach at the educational software company may affect millions of students at Toronto public schools, one of thousands of districts using PowerSchool tools. ]]> First seen on therecord.media Jump to article: therecord.media/disciplinary-special-records-toronto-powerschool
-
Fake Homebrew Google ads target Mac users with malware
Hackers are once again abusing Google ads to spread malware, using a fake Homebrew website to infect Macs and Linux devices with an infostealer that steals credentials, browser data, and cryptocurrency wallets. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-homebrew-google-ads-target-mac-users-with-malware/
-
Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day
Seven days after disclosure and little action taken, data shows First seen on theregister.com Jump to article: www.theregister.com/2025/01/21/fortinet_firewalls_still_vulnerable/
-
HPE probes hacker claim involving trove of sensitive company data
The company said it has no immediate evidence of operational impacts or compromised customer data. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/hpe-probes-hacker-claim-data/737855/
-
Greek authorities subject refugees to invasive surveillance
Greek border authorities are subjecting asylum seekers to invasive phone confiscations and artificial intelligence-powered surveillance, in another potential violation of European data protection laws First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366618223/Greek-authorities-subject-refugees-to-invasive-surveillance
-
Toronto school district says 40 years of student data stolen in PowerSchool breach
Canada’s largest school board says hackers may have accessed some 40 years’ worth of student data during the recent PowerSchool breach. In a letter sent to parents this week, the Toronto District School Board (TDSB) said that the data breach affected all students enrolled in the district between September 1985 and December 2024. The school…
-
Almost 10% of GenAI Prompts Include Sensitive Data: Study
A study by cybersecurity startup Harmonic Security found that 8.5% of prompts entered into generative AI models like ChatGPT, Copilot, and Gemini last year included sensitive information, putting personal and corporate data at risk of being leaked. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/almost-10-of-genai-prompts-include-sensitive-data-study/
-
GDPR Fines Total Euro1.2bn in 2024
Data from DLA Piper showed a 33% year-on-year fall in GDPR fines issued in Europe in 2024, with total penalties reaching Euro1.2bn First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/gdpr-fines-total-2024/
-
ChatGPT API flaws could allow DDoS, prompt injection attacks
OpenAI-owned ChatGPT might have a vulnerability that could allow threat actors to launch distributed denial of service (DDoS) attacks on unsuspecting targets. According to a discovery made by German security researcher Benjamin Flesch, the ChatGPT crawler, which OpenAI uses to collect data from the internet to improve ChatGPT, can be tricked into DDoSing arbitrary websites. “ChatGPT crawler…
-
HPE probes IntelBroker’s bold data theft boasts
Incident response protocols engaged following claims of source code burglary First seen on theregister.com Jump to article: www.theregister.com/2025/01/21/hpe_intelbroker_claims/