Tag: privacy
-
Blue Shield Exposed Health Data of 4.7 Million via Google Ads
Blue Shield of California has disclosed a significant data privacy incident affecting up to 4.7 million members, after discovering that protected health information (PHI) may have been inadvertently shared with Google Ads over nearly three years. The healthcare provider is now alerting potentially impacted members and implementing new safeguards to prevent future breaches. The breach…
-
Cybersecurity Snapshot: NIST Aligns Its Privacy and Cyber Frameworks, While Researchers Warn About Hallucination Risks from GenAI Code Generators
Tags: access, advisory, ai, attack, breach, china, cisa, cisco, ciso, cloud, computer, control, csf, cve, cyber, cyberattack, cybersecurity, data, defense, encryption, espionage, exploit, firmware, framework, governance, government, group, hacker, hacking, healthcare, identity, infrastructure, Internet, LLM, malicious, mfa, mitigation, mitre, network, nist, open-source, password, phishing, privacy, risk, risk-assessment, router, service, software, strategy, supply-chain, technology, threat, tool, update, vulnerabilityCheck out NIST’s effort to further mesh its privacy and cyber frameworks. Plus, learn why code-writing GenAI tools can put developers at risk of package-confusion attacks. Also, find out what Tenable webinar attendees said about identity security. And get the latest on the MITRE CVE program and on attacks against edge routers. Dive into five…
-
The Urgent Need for Tokenizing Personally Identifiable Information
If we want privacy, trust and resilience in our digital infrastructure, tokenization is no longer optional. It’s essential. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/the-urgent-need-for-tokenizing-personally-identifiable-information/
-
Lawsuit: Therapist Accessed Nude Breast Photos of 425 Women
Kansas Plastic Surgeon’s Patients Allege Privacy Abuses Over Worker’s EHR Access. A physical therapist working at a Kansas medical center used his credentials to inappropriately access nude photos of hundreds of breast augmentation patients of an unrelated plastic surgery clinic over two years – until he was fired in 2023, a proposed class action lawsuit…
-
Care what you share
In this week’s newsletter, Thorsten muses on how search engines and AI quietly gather your data while trying to influence your buying choices. Explore privacy-friendly alternatives and get the scoop on why it’s important to question the platforms you interact with online. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/care-what-you-share/
-
NIST Updates Privacy Framework With AI and Governance Revisions
The US National Institute of Standards and Technology has updated its Privacy Framework to work cohesively with its Cybersecurity Framework and guide organizations to develop stronger postures to handle privacy risks. First seen on darkreading.com Jump to article: www.darkreading.com/data-privacy/nist-updates-privacy-framework-ai-governance
-
Tails 6.14.2 Released with Critical Fixes for Linux Kernel Vulnerabilities
The Tails Project has urgently releasedTails 6.14.2, addressing critical security vulnerabilities in the Linux kernel and the Perl programming language. This emergency release is vital for users who rely on Tails’ security and privacy features, following the discovery of multiple flaws that could compromise system safety. Critical Security Vulnerabilities Addressed The most significant updates in…
-
23andMe bankruptcy draws investigation from House panel over data concerns
A House committee launched an investigation into the privacy and security risks associated with the bankruptcy of genetic testing company 23andMe and has asked its former CEO to testify at a hearing planned for early May. First seen on therecord.media Jump to article: therecord.media/23andme-bankruptcy-house-investigation-data-concerns
-
The Investigatory Powers Tribunal explained
Tags: privacyThe Investigatory Powers Tribunal is a semi-secret judicial body that has made significant legal rulings on privacy, surveillance and the use of investigatory powers. What does it do and why is it important? First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622356/The-Investigatory-Powers-Tribunal-explained
-
Where it Hertz: Customer data driven off in Cleo attacks
Car hire biz takes your privacy seriously, though First seen on theregister.com Jump to article: www.theregister.com/2025/04/15/hertz_cleo_customer_data/
-
Hertz Data Breach Exposes Customer Personal Information to Hackers
The Hertz Corporation has confirmed that sensitive personal information belonging to customers of its Hertz, Dollar, and Thrifty brands was compromised after hackers targeted a vendor’s file transfer platform. The breach has sparked concerns about identity theft and privacy, prompting Hertz to offer free identity monitoring services for affected individuals. According to an official notice…
-
Top Four Considerations for Zero Trust in Critical Infrastructure
Tags: access, ai, attack, authentication, automation, best-practice, breach, business, cctv, ceo, cloud, communications, compliance, corporate, cyber, cybersecurity, data, defense, email, encryption, exploit, finance, group, hacker, healthcare, identity, infrastructure, iot, law, malicious, mfa, nis-2, privacy, regulation, risk, saas, service, software, strategy, threat, tool, vulnerability, zero-trustTop Four Considerations for Zero Trust in Critical Infrastructure madhav Tue, 04/15/2025 – 06:43 TL;DR Increased efficiency = increased risk. Critical infrastructure organizations are using nearly 100 SaaS apps on average and 60% of their most sensitive data is stored in the cloud. Threat actors aren’t naive to this, leading to a whopping 93% of…
-
Microsoft’s Recall AI Tool Is Making an Unwelcome Return
Microsoft held off on releasing the privacy-unfriendly feature after a swell of pushback last year. Now it’s trying again, with a few improvements that skeptics say still aren’t enough. First seen on wired.com Jump to article: www.wired.com/story/microsoft-recall-returns-privacy/
-
EU’s GDPR Article 7 Poses New Challenges for Businesses To Secure AI-Generated Image Data
As businesses worldwide embrace digital transformation, the European Union’s General Data Protection Regulation (GDPR), enacted in 2018, remains a cornerstone of data privacy and security. A recent safety report highlighting the rapid advancement of artificial intelligence (AI) has renewed focus on GDPR compliance, particularly Article 7, which governs consent requirements for handling personal data, including…
-
Don’t Be Robotic About Your Robots’ Cybersecurity
If AI-powered robotics companies do not increase their investment in privacy and cybersecurity, they risk the promise of their innovations. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/dont-be-robotic-about-your-robots-cybersecurity/
-
After 20 Years, Google Patches Major Web Privacy Vulnerability
After two decades of persistent concern among privacy advocates and web security researchers, Google is finally rolling out a fix for a long-standing vulnerability in Chrome that has silently exposed users’ browsing history. The issue stems from how browsers have… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/chrome-136-ends-20-year-privacy-leak/
-
Chrome 136 fixes 20-year browser history privacy risk
Google is fixing a long-standing privacy issue that, for years, enabled websites to determine users’ browsing history through the previously visited links. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chrome-136-fixes-20-year-browser-history-privacy-risk/
-
Kaspersky Shares 12 Essential Tips for Messaging App Security and Privacy
In an era where instant messaging apps like WhatsApp, Telegram, Signal, iMessage, Viber, and WeChat dominate personal and professional communication, digital privacy and security have never been more critical. To help users keep their accounts secure and private, cybersecurity experts at Kaspersky have shared 12 simple yet effective tips for safe messaging practices. Here’s a…
-
Why Data Privacy Isn’t the Same as Data Security
Failing to distinguish between data privacy and data security leaves businesses vulnerable to regulatory scrutiny and the kinds of breaches that erode consumer trust overnight. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/data-privacy-versus-data-security
-
Protecting Your Business on the Move: A Modern Cybersecurity Guide
Stay secure on the move. Protect your devices, data, and privacy with smart habits, reliable gear, updated software… First seen on hackread.com Jump to article: hackread.com/protecting-business-on-move-cybersecurity-guide/
-
Introduction to the Australian Privacy Principles
Tags: privacyThe post Introduction to the Australian Privacy Principles appeared first on Feroot Security. First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/04/introduction-to-the-australian-privacy-principles/
-
Data privacy regulators lobby lawmakers to not draft federal legislation preempting state laws
The head of the California Privacy Protection Agency and New Jersey Attorney General Matthew Platkin argued their relatively tough state privacy laws should not be overtaken by what is sure to be weaker federal legislation. First seen on therecord.media Jump to article: therecord.media/data-privacy-law-state-lobby-congress
-
Google Gemini 2.5 Pro extends on-prem GenAI support
Google Gemini is the first proprietary frontier model that can be run on-premises via Google Distributed Cloud for privacy- and cost-conscious enterprises. First seen on techtarget.com Jump to article: www.techtarget.com/searchitoperations/news/366622200/Google-Gemini-25-Pro-extends-on-prem-GenAI-support
-
Is HR running your employee security training? Here’s why that’s not always the best idea
Tags: attack, awareness, best-practice, breach, business, ciso, communications, compliance, cyber, cybersecurity, data, finance, guide, healthcare, privacy, resilience, risk, security-incident, service, threat, training, vulnerabilityHR doesn’t have specialized security knowledge: Another limitation is that an organization’s security training can be a component in maintaining certain certifications, compliance, contractual agreements, and customer expectations, according to Hughes.”If that’s important to your organization, then security, IT, and compliance teams will know the subjects to cover and help guide in the importance of…
-
AI-Powered Cookie Consent Management: Navigating the Future of Website Privacy Compliance
AI is revolutionizing cookie consent management, turning a complex compliance challenge into a strategic advantage. With automated scanning, intelligent categorization, and adaptive interfaces, businesses can now ensure regulatory compliance while improving user experience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/ai-powered-cookie-consent-management-navigating-the-future-of-website-privacy-compliance/
-
Privacy fights over expiring surveillance law loom after House hearing
At issue are warrant requirements sought by Judiciary Committee members and other gripes they have about the most recent Section 702 legislation. First seen on cyberscoop.com Jump to article: cyberscoop.com/house-judiciary-committee-privacy-protections-fisa-section-702-reform-2024/
-
UK’s Request to Keep Apple Privacy Case Secret Rejected
The U.K.’s Home Secretary claimed that publishing details about the appeal would be prejudicial to national security, but judges disagreed. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-apple-icloud-encryption-uk-us-privacy/