Tag: data
-
Senate bill prohibiting health, location data brokerage unveiled
Tags: dataFirst seen on scworld.com Jump to article: www.scworld.com/brief/senate-bill-prohibiting-health-location-data-brokerage-unveiled
-
Almost 30K Sabre employees’ data compromised in ransomware attack
First seen on scworld.com Jump to article: www.scworld.com/brief/almost-30k-sabre-employees-data-compromised-in-ransomware-attack
-
NY Health Group Fined $550K in Unpatched Vulnerability Hack
AG Says HealthAlliance Tried But Failed to Fix Zero-Day Flaw That Led to Exploit. New York State has levied a $550,000 fine against a healthcare group that tried – but failed – to patch a critical zero-day vulnerability in a Citrix NetScaler appliance used for telemedicine. Hackers exploited the flaw, stealing 196 gigabytes of data…
-
Texas adds data broker specializing in driver behavior to list of alleged privacy law violators
Arity, a data broker, is accused by Texas’ attorney general of sharing drivers’ behavior data without clear notice or consent. The notice follows several others to app companies in recent weeks. First seen on therecord.media Jump to article: therecord.media/arity-data-broker-texas-data-privacy-violation-notice
-
The Silent Precursor to Data Breaches
Phishing is more than a mere nuisance”, it is a formidable precursor to destructive data breaches. The post Phishing: The Silent Precursor to Data Breaches appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/phishing-the-silent-precursor-to-data-breaches/
-
MOVEit Repackaged and Recycled
The largest repackage and re-post of an old leak In November 2024, a hacker known as “Nam3L3ss” allegedly released previously undisclosed data from the MOVEit breach in May 2023. This leak consisted of millions of records, including sensitive employee and big brand corporate information, significantly escalating the breach’s impact. Digging into this story reveals that……
-
Screen Actors Guild Health Plan sued after September data breach exposes healthcare info
SAG-AFTRA Health Plan said investigators traced the breach back to a phishing email that compromised the account. Law enforcement has been notified and the investigation is ongoing. ]]> First seen on therecord.media Jump to article: therecord.media/screen-actors-guild-health-plan-sued-over-data-breach
-
Krispy Kreme Cyberattack Disrupts Online Orders; Company Responds to Data Breach
Krispy Kreme disclosed a cyberattack impacting its operations, most notably disrupting online ordering services in parts of the United States. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/krispy-kreme-cyberattack/
-
KeyTrap DNSSEC: The day the internet (almost) stood still
Tags: attack, cyberattack, cybersecurity, data, dns, email, exploit, germany, google, Internet, mitigation, service, software, technology, vulnerabilityA severe vulnerability in the internet lookup protocol DNSSEC carried the potential to make much of the web functionally inaccessible for many, according to a presentation at Black Hat Europe.DNSSEC (Domain Name System Security Extensions) offers mitigation against various types of cyberattacks, including DNS spoofing and cache poisoning, by providing a way to cryptographically authenticate…
-
3 Common GDPR Challenges and How to Overcome Them
Practical tips for GDPR compliance Responsible for data protection and EU GDPR (General Data Protection Regulation) compliance? Chances are you’ve come across these 3 common challenges: Data privacy trainer Andy Snow hears about these challenges a lot, having trained over 4,000 people on the GDPR. Here are his practical tips for overcoming them. In this…
-
Cleo patches critical zero-day exploited in data theft attacks
Cleo has released security updates for a zero-day flaw in its LexiCom, VLTransfer, and Harmony software, currently exploited in data theft attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cleo-patches-critical-zero-day-exploited-in-data-theft-attacks/
-
MITRE ATTCK Evaluation Results 2024 Cynet Became a Leader With 100% Detection Protection
Across small-to-medium enterprises (SMEs) and managed service providers (MSPs), the top priority for cybersecurity leaders is to keep IT environments up and running. To guard against cyber threats and prevent data breaches, it’s vital to understand the current cybersecurity vendor landscape and continually assess the effectiveness of available solutions. Luckily, the 2024 MITRE ATT&CK Evaluation…
-
Trump FTC pick seen as mixed bag for data privacy enforcement
Ferguson has voted in favor of every privacy-related enforcement since he began his tenure as a commissioner in April, but a leaked memo he wrote to Trump suggest he will diverge from the current approach in important ways.]]> First seen on therecord.media Jump to article: therecord.media/trump-ftc-pick-ferguson-seen-as-mixed-bag-on-privacy
-
El Salvador’s cyber laws threaten media freedom and privacy, human rights experts warn
New laws in El Salvador “could be used to delete online publications that are critical of the government under the guise of data protection,” said Juanita Goebertus of Human Rights Watch. “This is a recipe for censorship and opacity.”]]> First seen on therecord.media Jump to article: therecord.media/el-salvador-cyber-data-protection-laws-human-rights-concerns
-
Remcos RAT Malware Evolves with New Techniques
Cyber-attacks involving Remcos RAT surged in Q3 2024, enabling attackers to control victim machines remotely, steal data and carry out espionage First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/remcos-rat-malware-evolves-new/
-
Bitcoin ATM firm Byte Federal hacked via GitLab flaw, 58K users exposed
US Bitcoin ATM operator Byte Federal has disclosed a data breach that exposed the data of 58,000 customers after its systems were breached using a GitLab vulnerability. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/bitcoin-atm-firm-byte-federal-hacked-via-gitlab-flaw-58k-users-exposed/
-
Experts discovered surveillance tool EagleMsgSpy used by Chinese law enforcement
Chinese law enforcement uses the mobile surveillance tool EagleMsgSpy to gather data from Android devices, as detailed by Lookout. Researchers at the Lookout Threat Lab discovered a surveillance tool, dubbed EagleMsgSpy, used by Chinese law enforcement to spy on mobile devices. The researchers analyzed multiple samples of the malware and gained access to internal documents obtained from…
-
Mobile Surveillance Tool EagleMsgSpy Used by Chinese Law Enforcement
Lookout details EagleMsgSpy, a surveillance tool used by Chinese law enforcement to collect data from Android devices. The post Mobile Surveillance Tool EagleMsgSpy Used by Chinese Law Enforcement appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/mobile-surveillance-tool-eaglemsgspy-used-by-chinese-law-enforcement/
-
How to Choose the Right Test Data Management Tools
In today’s fast-paced, compliance-focused world, choosing the right test data management (TDM) tools is vital for development and QA teams. These tools go beyond simple data masking”, they manage, secure, and optimize test data across multiple environments to ensure regulatory compliance, enhance testing efficiency, and support fast release cycles. With so many options available, each…
-
Malicious ESLint Package Let Attackers Steal Data And Inject Remote Code
Cybercriminals exploited typosquatting to deploy a malicious npm package, `@typescript_eslinter/eslint`, targeting developers seeking the legitimate TypeScript ESLint plugin, which was designed to mimic the genuine plugin, compromised systems by monitoring keystrokes, clipboard data, and executing remote commands. They leveraged a WebSocket server for real-time control and data exfiltration as the persistence of a secondary malicious…
-
New Chinese Surveillance Tool Attack Android Users Since 2017
Wuhan Chinasoft Token Information Technology Co., Ltd. developed EagleMsgSpy, a surveillance tool operational since 2017, which, installed as an APK, secretly collects extensive user data, including chat messages, screen recordings, audio, call logs, contacts, SMS, location, and network activity. Because the data is sent to a command-and-control server, there is a possibility that it could…
-
Mike Morse Law Firm Chooses Keeper Security to Safeguard its Sensitive Legal Data
Keeper Security has announced the release of a new case study in partnership with the Mike Morse Law Firm. This case study highlights how the firm leverages Keeper to address critical cybersecurity challenges and protect sensitive client information. In an industry often slow to adopt emerging technologies, Mike Morse Law Firm demonstrates how legal organisations…
-
Krispy Kreme Faces Cyberattack Disrupting Online Orders; Company Responds to Data Breach
Krispy Kreme disclosed a cyberattack impacting its operations, most notably disrupting online ordering services in parts of the United States. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/krispy-kreme-cyberattack/
-
ConvoC2 A Red Teamers Tool To Execute Commands on Hacked Hosts Via Microsoft Teams
A stealthy Command-and-Control (C2) infrastructure Red Team tool named ConvoC2 showcases how cyber attackers can exploit Microsoft Teams to execute system commands on compromised hosts remotely. This innovative project, designed with Red Team operations in mind, uses Teams messages for hidden data exfiltration and command execution, demonstrating a significant security challenge for organizations relying on…
-
Insurance Worker Sentenced After Illegally Accessing Claimants’ Data
An insurance employee has been handed a suspended sentence after illegally accessing personal information First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/worker-sentenced-illegally/