Tag: privacy
-
My Take: Here’s why Google’s $32B Wiz grab is the latest Big Tech leap sure to further erode privacy
We’ve seen this movie before. Alphabet, Google’s parent company’s, $32 billion bid for Wiz isn’t just about security and privacy. It’s the latest round in Big Tech’s long-running game of business leapfrog”, where each giant keeps lunging into the next guy’s… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/my-take-heres-why-googles-32b-wiz-grab-is-the-latest-big-tech-leap-sure-to-further-erode-privacy/
-
Trump moves to fire Democratic FTC commissioners
The move, which critics say is unconstitutional, also potentially threatens numerous agency investigations and enforcement around privacy and cybersecurity. First seen on cyberscoop.com Jump to article: cyberscoop.com/trump-moves-to-fire-democratic-ftc-commissioners/
-
Do You Hear What I Hear? Amazon Removes Echo Privacy Setting, What You Should Know
Amazon is mandating cloud-based processing for Echo voice commands, removing local storage and disabling Alexa’s voice ID to expand its generative AI capabilities. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-amazon-echo-privacy-generative-ai/
-
New research reveals security’s biggest AI challenges and two potential solutions
Tags: ai, attack, business, compliance, data, intelligence, privacy, risk, strategy, technology, threat, tool, training99% of teams are embracing AI78% of leaders are confident that changes to their roles will be manageableBut this enthusiasm coexists with many concerns about AI, including frustration at the pace of adoption. And a deeper analysis of the data suggests that these adoption challenges may be preventing teams from exploring more impactful applications. While…
-
Is Security Human Factors Research Skewed Towards Western Ideas and Habits?
Really interesting research: “How WEIRD is Usable Privacy and Security Research?” by Ayako A. Hasegawa Daisuke Inoue, and Mitsuaki Akiyama: Abstract: In human factor fields such as human-computer interaction (HCI) and psychology, researchers have been concerned that participants mostly come from WEIRD (Western, Educated, Industrialized, Rich, and Democratic) countries. This WEIRD skew may hinder understanding…
-
iPhone-Android: A Major Privacy Upgrade is Coming Soon
This breakthrough will finally allow secure, encrypted messaging between different mobile platforms. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-iphone-android-encrypted-messaging/
-
CIAM Basics: A Comprehensive Guide to Customer Identity and Access Management in 2025
CIAM has evolved from a security tool into a business advantage. This comprehensive guide explores how CIAM solutions balance robust security with seamless user experiences, helping organizations build trust, enhance customer engagement, and navigate complex privacy regulations. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/ciam-basics-a-comprehensive-guide-to-customer-identity-and-access-management-in-2025/
-
Transparency in UK-Apple backdoor hearing urged by US lawmakers, privacy advocates
First seen on scworld.com Jump to article: www.scworld.com/brief/transparency-in-uk-apple-backdoor-hearing-urged-by-us-lawmakers-privacy-advocates
-
Amazon’s Controversial Change to Echo’s Privacy Settings Takes Effect Soon
Amazon is mandating cloud-based processing for Echo voice commands, removing local storage and disabling Alexa’s voice ID to expand its generative AI capabilities. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-amazon-echo-privacy-generative-ai/
-
Attackers use CSS to create evasive phishing messages
Threat actors exploit Cascading Style Sheets (CSS) to bypass spam filters and detection engines, and track users’ actions and preferences. Cisco Talos observed threat actors abusing Cascading Style Sheets (CSS) to evade detection and track user behavior, raising security and privacy concerns, including potential fingerprinting. Cascading Style Sheets (CSS) is a stylesheet language used to…
-
UK Cybersecurity Weekly News Roundup 16 March 2025
Tags: access, apple, attack, backdoor, backup, compliance, control, cyber, cyberattack, cybercrime, cybersecurity, data, encryption, finance, firewall, government, group, hacking, insurance, law, lockbit, malicious, network, office, privacy, ransomware, regulation, risk, russia, service, software, virusWelcome to this week’s edition of our cybersecurity news roundup, bringing you the latest developments and insights from the UK and beyond. UK Government’s Stance on Encryption Raises Global Concerns The UK government has ordered Apple to provide backdoor access to iCloud users’ encrypted backups under the Investigatory Powers Act of 2016. This secret order…
-
Apple Introduces RCS EndEnd Encryption for iPhone Messages
Apple has announced the integration of end-to-end encryption (E2EE) for Rich Communication Services (RCS) on iPhones. This development follows the introduction of RCS in iOS 18, marking a new era in mobile messaging with enhanced privacy and security features. The GSMA, a key organizer behind this technology, has released new specifications incorporating E2EE based on…
-
Hackers Use CSS Tricks to Bypass Spam Filters and Monitor Users
Cybersecurity experts have uncovered how hackers use Cascading Style Sheets (CSS) to deceive spam filters and monitor user behavior. This sophisticated technique allows malicious actors to remain under the radar while gaining insights into user preferences and actions. The abuse of CSS for both evasion and tracking poses substantial threats to privacy and security. The…
-
360 Privacy Raises $36M to Expand Threat Protection Services
Investment to Scale Engineering, Expansion from Data Deletion to Threat Reduction. Executive digital protection firm 360 Privacy raised $36 million to expand its engineering team and boost its ability to remove sensitive data from brokers. The company is shifting from a data deletion focus to broader threat mitigation, tackling risks from digital tracking and location…
-
Apple Fights UK Over Encryption Backdoors as US Officials Warn of Privacy Violations
The British side reportedly said they would have to produce warrants for each individual data access request, so they will always have to be made as part of an investigation into serious crime. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-apple-icloud-encryption-uk-us-privacy/
-
California’s legal push on geolocation data collection must take aim at the right targets, privacy experts say
An investigation by California’s attorney general into use of location data could rein in the worst abusers, but should also be able to determine legitimate business use. First seen on cyberscoop.com Jump to article: cyberscoop.com/california-ag-investigation-location-data-privacy/
-
Quantifying cyber risk strategies to resonate with CFOs and boards
In this Help Net Security interview, Mir Kashifuddin, Data Risk Privacy Leader at PwC, discusses how CISOs can translate cyber risk into business value and secure a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/14/mir-kashifuddin-pwc-business-cyber-risk/
-
Apple’s alleged UK encryption battle sparks political and privacy backlash
National security defense being used to keep appeal behind closed doors First seen on theregister.com Jump to article: www.theregister.com/2025/03/14/apple_uk_encryption_hearing/
-
UK’s secret iCloud backdoor order triggers civil rights challenge
The U.K. government’s secret order to Apple demanding it backdoor the end-to-end encrypted version of its iCloud storage service has now been challenged by two civil rights groups, Liberty and Privacy International, which filed complaints Thursday. They called the order >>unacceptable and disproportionate>global consequences
-
CIOs and CISOs take on NIS2: Key challenges, security opportunities
Tags: access, cio, ciso, compliance, cybersecurity, data, GDPR, group, healthcare, ISO-27001, jobs, monitoring, nis-2, office, organized, privacy, regulation, risk, skills, software, strategy, supply-chain, technology, trainingCompliance will be easier for some: There are CIOs and CISOs who have found NIS2 compliance relatively easy: those who have worked toward ISO/IEC 27001:2022 certification, whether they remained in the preparation phase or actually got certified.Those who have the certification report having found themselves with “80% of the work done”: the company is ready…
-
EU Seeks US Assurances on Trans-Atlantic Data Flows
Worries Grow Over Data Privacy Framework Stability. A European official said he received assurances the U.S. is committed to preserving the legal framework underpinning commercial data flows across the Atlantic. The Data Privacy Framework already faces legal challenges in Europe, but fears of its durability compounded with the Trump administration. First seen on govinfosecurity.com Jump…
-
How to secure your personal metadata from online trackers
When it comes to safeguarding your privacy online, most people focus on securing passwords, encrypting communications, and clearing browsing history. While these practices are … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/03/13/how-to-protect-personal-metadata/
-
Apple’s appeal against UK’s secret iCloud backdoor order must be held in public, rights groups urge
Privacy rights groups have called on Apple’s legal challenge to a secret U.K. government order asking it to backdoor an end-to-end encrypted (E2EE) version of its iCloud storage service to be heard in public, rather than behind closed doors. The existence of the order emerged via press reports last month. Apple went on to confirm…
-
Data Privacy Framework – Trump gefährdet Datentransfers in die USA
First seen on security-insider.de Jump to article: www.security-insider.de/rechtliche-probleme-datenuebertragung-usa-a-8696caa84d2e7526473aa40f85773067/
-
Hiring privacy experts is tough, here’s why
Tags: ai, business, ciso, compliance, cybersecurity, data, framework, jobs, privacy, resilience, skills, technology, trainingWhy it is difficult to hire privacy experts: Finding a highly skilled privacy professional can feel like chasing a unicorn, Kazi describes. “Yes, privacy is important, but they want somebody who’s a lawyer, an expert in technology, knowledgeable about user interface and user experience, and ideally, they know a lot about ethics and are an…
-
Generative AI red teaming: Tips and techniques for putting LLMs to the test
Defining objectives and scopeAssembling a teamThreat modelingAddressing the entire application stackDebriefing, post-engagement analysis, and continuous improvementGenerative AI red teaming complements traditional red teaming by focusing on the nuanced and complex aspects of AI-driven systems including accounting for new testing dimensions such as AI-specific threat modeling, model reconnaissance, prompt injection, guardrail bypass, and more. AI red-teaming…
-
NIST Finalizes Differential Privacy Rules to Protect Data
The National Institute of Standards and Technology (NIST) released updated differential privacy guidelines for organizations to follow to protect personally identifiable information when sharing data. First seen on darkreading.com Jump to article: www.darkreading.com/data-privacy/nist-finalizes-differential-privacy-rules-to-protect-data