Tag: data
-
What is PCI DSS 4.0: Is This Still Applicable For 2024?
In a time when cyber threats continuously evolve, a security standard or framework is essential for protecting digital assets. The Payment Card Industry Data Security Standard (PCI DSS), developed by the PCI Security Standards Council, empowers organisations to safeguard cardholder data globally. PCI DSS offers technical guidance and practical steps to effectively protect cardholder data……
-
Mobile Data Privacy Class Action Against Google Proceeds
First seen on scworld.com Jump to article: www.scworld.com/brief/mobile-data-privacy-class-action-against-google-proceeds
-
Fake LDAPNightmware exploit on GitHub spreads infostealer malware
A deceptive proof-of-concept (PoC) exploit for CVE-2024-49113 (aka “LDAPNightmare”) on GitHub infects users with infostealer malware that exfiltrates sensitive data to an external FTP server. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-ldapnightmware-exploit-on-github-spreads-infostealer-malware/
-
U.S. cannabis dispensary STIIIZY disclosed a data breach
US marijuana dispensary STIIIZY warns customers of leaked IDs and passports following a November data breach. US marijuana dispensary STIIIZY disclosed a data breach after a vendor’s point-of-sale system was compromised by cybercriminals. The security breach exposed customer data and IDs between October 10 and November 10, 2024. After discovering the security breach, the company…
-
New Paper: “Future of SOC: Transform the ‘How’” (Paper 5)
After a long, long, long writing effort “¦ eh “¦ break, we are ready with our 5th Deloitte and Google Cloud Future of the SOC paper “Future of SOC: Transform the ‘How’.” As a reminder (and I promise you do need it; it has been years”¦), the previous 4 papers are: “New Paper: “Future of the SOC: Evolution or…
-
Comic Agilé Mikkel Noe-Nygaard, Luxshan Ratnaravi #320 Aligning Teams
Tags: datavia the respected Software Engineering expertise of Mikkel Noe-Nygaard and the lauded Software Engineering / Enterprise Agile Coaching work of Luxshan Ratnaravi at Comic Agilé! Permalink First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/01/comic-agile-mikkel-noe-nygaard-luxshan-ratnaravi-320-aligning-teams/
-
Hackers Attack PowerSchool, Expose K-12 Teacher and Student Data
Giant education software provider PowerSchool reported that hackers using compromised credentials access a database and stole student and teacher data in an attack that the company said was not ransomware, though a ransom apparently was paid. Affected K-12 school districts are scrambling to alert parents and staffs. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/hackers-attack-powerschool-expose-k-12-teacher-and-student-data/
-
Telefónica confirms internal ticketing system breach after data leak
Spanish telecommunications company Telefónica confirms its internal ticketing system was breached after stolen data was leaked on a hacking forum. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/telefonica-confirms-internal-ticketing-system-breach-after-data-leak/
-
Marijuana dispensary STIIIZY warns of leaked IDs after November data breach
A data breach in November exposed the IDs and passports of people who bought products from STIIIZY, a large marijuana dispensary in California. ]]> First seen on therecord.media Jump to article: therecord.media/marijuana-dispensary-warns-of-data-breach
-
Mexican fintech firm’s data exposed by unresolved misconfiguration
First seen on scworld.com Jump to article: www.scworld.com/brief/mexican-fintech-firms-data-exposed-by-unresolved-misconfiguration
-
Data breach disclosed by BayMark Health Services
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-disclosed-by-baymark-health-services
-
Last-Minute Biden Rules on AI Chips Hits Industry Resistance
Nvidia, Semiconductor Trade Group Push Back Against Reported Chip Restrictions. The White House’s reported final push to impose tighter restrictions on global semiconductor exports, including artificial intelligence chips critical for data centers, has drawn strong criticism from Nvidia and the semiconductor industry in the last days of the administration. First seen on govinfosecurity.com Jump to…
-
Strategic Approaches to Enhance Data Security
How Crucial Are Non-Human Identities to Data Security? Data security has long been the bedrock of digital enterprises, providing robust defenses against the myriad of cyber threats that organizations face daily. But how often have you considered Non-Human Identities (NHIs) and Secrets Security Management in these defenses? If you haven’t been, it’s time to start….…
-
In Other News: Bank of America Warns of Data Breach, Trucking Cybersecurity, Treasury Hack Linked to Silk Typhoon
Noteworthy stories that might have slipped under the radar: 2025 trucking cybersecurity report, Bank of America discloses data breach, Silk Typhoon behind US Treasury hack. The post In Other News: Bank of America Warns of Data Breach, Trucking Cybersecurity, Treasury Hack Linked to Silk Typhoon appeared first on SecurityWeek. First seen on securityweek.com Jump to…
-
Vulnerability Remediation vs Mitigation: Which Strategy Wins in Cybersecurity?
Cybersecurity vulnerabilities pose significant risks to organizations in today’s digital landscape. Left unaddressed, these vulnerabilities can lead to data breaches, financial losses, and reputational damage. Organizations must decide how to tackle vulnerabilities”, through remediation, mitigation, or a combination of both. But which strategy is more effective? This blog explores the nuances of vulnerability remediation vs…
-
Major Addiction Treatment Firm BayMark Confirms Ransomware Attack Caused Data Breach
Substance abuse treatment provider BayMark Health Services says patient personal information was compromised in a data breach. The post Major Addiction Treatment Firm BayMark Confirms Ransomware Attack Caused Data Breach appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/major-addiction-treatment-firm-baymark-confirms-ransomware-attack-caused-data-breach/
-
Taking the Pain Out of Cybersecurity Reporting: A Practical Guide for MSPs
Cybersecurity reporting is a critical yet often overlooked opportunity for service providers managing cybersecurity for their clients, and specifically for virtual Chief Information Security Officers (vCISOs). While reporting is seen as a requirement for tracking cybersecurity progress, it often becomes bogged down with technical jargon, complex data, and disconnected spreadsheets that fail to First seen…
-
AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion Tactics
Tags: ai, cybersecurity, data, encryption, extortion, group, hacker, intelligence, ransom, ransomware, tactics, theftCybersecurity researchers have shed light on a nascent artificial intelligence (AI) assisted ransomware family called FunkSec that sprang forth in late 2024, and has claimed more than 85 victims to date.”The group uses double extortion tactics, combining data theft with encryption to pressure victims into paying ransoms,” Check Point Research said in a new report…
-
Malware targets Mac users by using Apple’s security tool
A variant of the Banshee macOS infostealer was seen duping detection systems with new string encryption copied from Apple’s in-house algorithm.A Check Point research, which caught the variant after two months of successful evasion, said threat actors distributed Banshee using phishing websites and fake GitHub repositories, often impersonating popular software like Google Chrome, Telegram, and…
-
Medusind Breach Exposes Sensitive Patient Data
The US medical billing firm is notifying over 360,000 customers that their personal, financial and medical data may have been exposed First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/medusind-breach-patient-data/
-
Fake PoC Exploit Targets Security Researchers with Infostealer
Trend Micro detailed how attackers are using a fake proof-of-concept for a critical Microsoft vulnerability, designed to steal sensitive data from security researchers First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fake-poc-exploit-researchers/
-
SEC rule confusion continues to put CISOs in a bind a year after a major revision
Tags: attack, breach, business, ciso, citrix, compliance, control, cyber, cyberattack, cybersecurity, data, government, incident, incident response, law, network, privacy, regulation, risk, security-incident, software, strategy, supply-chainConfusion around when and how to report cybersecurity breaches continues to plague companies a year after revised US Securities and Exchange Commission (SEC) cybersecurity breach reporting rules came into effect, experts say.As the agency that regulates and enforces federal US securities laws continues to flex its enforcement muscles against organizations that violate the strict rules,…
-
>>Siri Data Stays Private, Not Used for Ads,<< Apple Says
Apple Inc. says its commitment to user privacy, emphasizing that its products, such as the digital assistant Siri, are designed to safeguard personal data from the very beginning and not used for any advertising purpose. >>Apple has never used Siri data to build marketing profiles, never made it available for advertising, and never sold it…
-
United Nations Aviation Agency Hacked Recruitment Data Exposed
The International Civil Aviation Organization (ICAO), a United Nations agency responsible for coordinating global aviation standards, has reported a significant information security incident that has exposed the personal data of approximately 42,000 applicants. The agency is actively investigating the breach, which was attributed to a malicious threat actor known for targeting international organizations. United Nations…
-
Ivanti zero-day exploited by APT group that previously targeted Connect Secure appliances
Researchers from Google’s Mandiant division believe the critical remote code execution vulnerability patched on Wednesday by software vendor Ivanti has been exploited since mid-December by a Chinese cyberespionage group. This is the same group that has exploited zero-day vulnerabilities in Ivanti Connect Secure appliances back in January 2024 and throughout the year.The latest attacks, exploiting…