Tag: privacy
-
Security Breaches Found in AI-Powered Repair Tool Wondershare RepairIt
Trend Micro reveals that RepairIt “contradicted its privacy policy by collecting, storing, and, due to weak Development, Security, and Operations practices, inadvertently leaking private user data.” The post Security Breaches Found in AI-Powered Repair Tool Wondershare RepairIt appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/repairit-security-breach/
-
European AI company’s ‘reputation reports’ are inaccurate and illegal, watchdog claims
The digital privacy nonprofit noyb says a Lithuania-based data broker has a “very shady business model” that runs afoul of European data privacy laws. First seen on therecord.media Jump to article: therecord.media/reputation-reports-data-broker-noyb-complaint-lituania
-
Brave launches ‘Ask Brave’ feature to fuse AI with traditional search
Brave Software, the creator of the privacy-focused web browser and search engine, has introduced a new subsystem called Ask Brave that unifies search and AI chat into a single interface. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/brave-launches-ask-brave-feature-to-fuse-ai-with-traditional-search/
-
Milestone Episode 400: Reflecting on 16 Years of Shared Security
Episode 400! In this special milestone edition of the Shared Security Podcast, we look back at 16 years of conversations on security, privacy, and technology. From our very first episodes in 2009 to today’s AI-driven threats, we cover the topics that defined each era, the surprises along the way, and the lessons that still matter….…
-
Milestone Episode 400: Reflecting on 16 Years of Shared Security
Episode 400! In this special milestone edition of the Shared Security Podcast, we look back at 16 years of conversations on security, privacy, and technology. From our very first episodes in 2009 to today’s AI-driven threats, we cover the topics that defined each era, the surprises along the way, and the lessons that still matter….…
-
USENIX 2025: PEPR ’25 Enterprise-Scale Privacy For AI: How Canva Scaled Customer Control Of Data For AI Training
Creator, Author and Presenter: Phillip Ward, Canva Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/usenix-2025-pepr-25-enterprise-scale-privacy-for-ai-how-canva-scaled-customer-control-of-data-for-ai-training/
-
USENIX 2025: PEPR ’25 UsersFirst: A User-Centric Threat Modeling Framework For Privacy Notice And Choice
Creators, Authors and Presenters: Norman Sadeh And Lorrie Cranor, Carnegie Mellon University Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/usenix-2025-pepr-25-usersfirst-a-user-centric-threat-modeling-framework-for-privacy-notice-and-choice/
-
USENIX 2025: Using Privacy Infrastructure To Kickstart AI Governance: NIST AI Risk Management Case Studies
Creators, Authors and Presenters: Katharina Koerner, Trace3; Nandita Rao Narla, DoorDash Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/usenix-2025-using-privacy-infrastructure-to-kickstart-ai-governance-nist-ai-risk-management-case-studies/
-
USENIX 2025: PEPR ’25 Observable…Yet Still Private? An Offensive Privacy Perspective On Observability
Creators, Authors and Presenters: Cat Easdon, Dynatrace Research; Patrick Berchtold, Dynatrace Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/usenix-2025-pepr-25-observable-yet-still-private-an-offensive-privacy-perspective-on-observability/
-
Senate Bill Seeks Privacy Protection for Brain Wave Data
MIND Act Asks FTC to Study Exploitation Risks for Neural Data Collected by Devices. Are brain waves and similar neural data the next frontier in consumer privacy worries? A trio of U.S. senators have introduced federal legislation aiming to get ahead of risks that such brain-related data could be collected and misused by tech firms,…
-
China is Fueling Surveillance Technology Adoption in Latin America”, Who is in Charge of Data Privacy?
China’s Belt and Road Initiative (BRI) is well known for funding major infrastructure projects, including new highways, ports and energy plants across more than 150 countries. However, China has also gained a serious foothold when it comes to surveillance infrastructure. This less publicized development has taken off in Latin America in particular, where 35 cities..…
-
China is Fueling Surveillance Technology Adoption in Latin America”, Who is in Charge of Data Privacy?
China’s Belt and Road Initiative (BRI) is well known for funding major infrastructure projects, including new highways, ports and energy plants across more than 150 countries. However, China has also gained a serious foothold when it comes to surveillance infrastructure. This less publicized development has taken off in Latin America in particular, where 35 cities..…
-
Cybersecurity Snapshot: CISA Highlights Vulnerability Management Importance in Breach Analysis, as Orgs Are Urged To Patch Cisco Zero-Days
Tags: 2fa, access, advisory, api, attack, authentication, breach, business, cisa, cisco, cloud, control, credentials, crime, cve, cyber, cybersecurity, data, defense, endpoint, exploit, fido, finance, firewall, framework, github, grc, guide, identity, incident response, infrastructure, Internet, ISO-27001, kev, law, lessons-learned, malicious, malware, mfa, mitigation, monitoring, network, open-source, phishing, privacy, ransomware, risk, saas, scam, security-incident, service, soc, software, supply-chain, tactics, threat, update, vpn, vulnerability, vulnerability-management, worm, zero-dayCISA’s takeaways of an agency hack include a call for timely vulnerability patching. Plus, Cisco zero-day bugs are under attack, patch now. Meanwhile, the CSA issued a framework for SaaS security. And get the latest on the npm breach, the ransomware attack that disrupted air travel and more! Here are six things you need to…
-
TruSources to show off its on-device identity-checking tech at TechCrunch Disrupt 2025
Age-verification laws are a privacy and security nightmare. This startup performs age checks on-device, without users having to upload their IDs to the internet. First seen on techcrunch.com Jump to article: techcrunch.com/2025/09/26/trusources-to-show-off-its-on-device-identity-checking-tech-at-techcrunch-disrupt-2025/
-
Okta introduces Identity Security Fabric to secure AI agents
Tags: ai, backup, control, credentials, data, deep-fake, government, identity, infrastructure, malicious, mobile, okta, privacy, vulnerabilityDigital credentials round out the platform: The third fabric component is digital credentials capabilities through the Okta Verifiable Digital Credentials (VDC) platform, scheduled for fiscal 2027 release.The system would allow organizations to issue cryptographically secure versions of government IDs, employment records, and professional certifications.”Built on open standards for maximum control and future interoperability, VDCs will…
-
Okta introduces Identity Security Fabric to secure AI agents
Tags: ai, backup, control, credentials, data, deep-fake, government, identity, infrastructure, malicious, mobile, okta, privacy, vulnerabilityDigital credentials round out the platform: The third fabric component is digital credentials capabilities through the Okta Verifiable Digital Credentials (VDC) platform, scheduled for fiscal 2027 release.The system would allow organizations to issue cryptographically secure versions of government IDs, employment records, and professional certifications.”Built on open standards for maximum control and future interoperability, VDCs will…
-
Top 5 Essential Privacy Tools for 2024: Stay Safe Online
Discover the most effective privacy tools for protecting your digital life in 2024. From encrypted messaging apps to secure password managers, learn which tools First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/top-5-essential-privacy-tools-for-2024-stay-safe-online/
-
Qantas cutting CEO pay signals new era of cyber accountability
Tags: ai, attack, breach, ceo, ciso, cyber, cybersecurity, data, data-breach, finance, governance, incident, incident response, malicious, privacy, ransomware, riskWhat should CISOs and CEOs do now?: CISOs, who have historically borne the brunt of breaches and malicious cyber incidents, should take heed of this emerging trend. “Be aware of the environment and expectations today, and where they’re headed,” Redgraves’ Tully says. “Try to get out in front of that. You need to work with…
-
The Definitive Guide to Compliance Costs: Where Your Budget Goes
Key Takeaways Businesses are managing compliance on multiple fronts: cybersecurity standards, privacy regulations, third-party oversight, and sector-specific rules that change faster than budgets can adapt. Each requirement adds to the total cost of compliance. It’s easy to pinpoint your audit fees or the price of their GRC platform. But those are only part of the……
-
The Definitive Guide to Compliance Costs: Where Your Budget Goes
Key Takeaways Businesses are managing compliance on multiple fronts: cybersecurity standards, privacy regulations, third-party oversight, and sector-specific rules that change faster than budgets can adapt. Each requirement adds to the total cost of compliance. It’s easy to pinpoint your audit fees or the price of their GRC platform. But those are only part of the……
-
USENIX 2025: PEPR ’25 Remediating Systemic Privacy Incidents
Creator, Author and Presenter: Sam Havron, Meta Our thanks to USENIX for publishing their Presenter’s outstanding USENIX ’25 Conference content on the organization’s’ YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/usenix-2025-pepr-25-remediating-systemic-privacy-incidents/
-
Google, Flo Health, Flurry to Pay $59.5M in Privacy Lawsuit
Settlement Ends Litigation Alleging Unlawful Sharing of Consumers’ Fertility Data. Flo Health, Google and Flurry have agreed to shell out millions of dollars to fund a nearly $60 million settlement for proposed class action lawsuit that accused Flo of using tracking codes in its fertility app that shared women’s sensitive information with Google and Flurry…
-
USENIX 2025: PEPR ’25 Privacy Paradigms For Law Enforcement Response
Creators, Authors and Presenters: Lukas Bundonis, Netflix; Ben Ballard, MITRE Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/usenix-2025-pepr-25-privacy-paradigms-for-law-enforcement-response/
-
Cloud Security Alliance launches framework to improve SaaS security
Tags: access, business, ceo, cloud, compliance, control, firewall, framework, governance, international, Internet, monitoring, network, privacy, risk, risk-assessment, saas, zero-trustChange control and configuration managementData security and privacy lifecycle managementIdentity and access managementInteroperability and portabilityLogging and monitoringSecurity incident management, e-discovery, and cloud forensicsThese domains are designed to map high-level business requirements into tangible SaaS security features that customers can actually configure and rely on, such as log delivery, SSO enforcement, secure configuration guidelines, and incident…
-
Dem report concludes Department of Government Efficiency violates cybersecurity, privacy rules
DOGE is “bypassing cybersecurity protections” at three agencies, Senate Homeland Security and Governmental Affairs Committee Democrats concluded. First seen on cyberscoop.com Jump to article: cyberscoop.com/senate-democrats-report-doge-cybersecurity-privacy-violations/
-
Google, period-tracking app to pay combined $56 million to settle privacy claims
According to court documents filed this week by the plaintiffs, Google will set up a $48 million fund for Flo app users who entered information about menstruation or pregnancy from November 2016 until the end of February 2019. First seen on therecord.media Jump to article: therecord.media/google-flo-health-settle-privacy-class-action
-
Thales Named a Leader in the Data Security Posture Management Market
Tags: access, ai, attack, breach, cloud, compliance, container, control, cybersecurity, data, data-breach, defense, detection, encryption, finance, GDPR, google, Hardware, identity, intelligence, law, microsoft, monitoring, network, office, privacy, regulation, resilience, risk, soc, software, strategy, technology, threat, toolThales Named a Leader in the Data Security Posture Management Market madhav Thu, 09/25/2025 – 06:15 Most breaches begin with the same blind spot: organizations don’t know precisely what data they hold, or how exposed it is. Value and risk sit side by side. Data Security Todd Moore – Global VP of Data Security Products…
-
Check your own databases before asking to see our passport photos, Home Office tells UK cops
Guidance follows privacy complaints over sharp increase in police searches of travel doc and visa pic libraries First seen on theregister.com Jump to article: www.theregister.com/2025/09/25/uk_passport_photo_cache_block_rules/
-
Google’s $425 Million Fine a Win for Privacy, But Will it Stick?
Google must pay $425M for violating California privacy laws by tracking 98M users despite opt-outs. A major win for data privacy, though appeals loom. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/googles-425-million-fine-a-win-for-privacy-but-will-it-stick/
-
Google’s $425 Million Fine a Win for Privacy, But Will it Stick?
Google must pay $425M for violating California privacy laws by tracking 98M users despite opt-outs. A major win for data privacy, though appeals loom. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/googles-425-million-fine-a-win-for-privacy-but-will-it-stick/