Tag: privacy
-
DOGE’s Use of AI Raises Major Privacy Concerns, Legal Heat
Lawsuits Mounting Over Elon Musk’s Attempts to Slash Federal Government Spending. Lawsuits are mounting against President Donald Trump and Elon Musk’s task force for shrinking the federal government as reports indicate the group is feeding sensitive federal data into artificial intelligence systems to target budget cuts, potentially accessing Americans’ sensitive data. First seen on govinfosecurity.com…
-
Privacy Roundup: Week 6 of Year 2025
Tags: access, ai, api, apple, backdoor, breach, browser, cctv, chrome, control, credit-card, cybersecurity, data, data-breach, encryption, exploit, firmware, framework, germany, government, group, leak, malware, monitoring, phishing, privacy, regulation, risk, router, scam, service, software, spy, technology, threat, tool, update, vpn, vulnerability, windowsThis is a news item roundup of privacy or privacy-related news items for 2 FEB 2025 – 8 FEB 2025. Information and summaries provided here are as-is for warranty purposes. Note: You may see some traditional “security” content mixed-in here due to the close relationship between online privacy and cybersecurity – many things may overlap;…
-
UK’s secret Apple iCloud backdoor order is a global emergency, say critics
Security experts say the ‘draconian’ order would have global ramifications that make this a privacy ’emergency for us all’ First seen on techcrunch.com Jump to article: techcrunch.com/2025/02/10/uks-secret-apple-icloud-backdoor-order-is-a-global-emergency-say-critics/
-
Experts Dismayed at UK’s Apple Decryption Demands
Security and privacy experts have questioned a new demand from the UK Home Office on Apple’s encrypted iCloud service First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/experts-dismayed-uk-apple/
-
UK Gov demands backdoor to access Apple iCloud backups worldwide
UK secretly demands Apple create an iCloud backdoor via a Technical Capability Notice, raising privacy concerns over end-to-end encryption. The UK demands Apple to create a backdoor to access any iCloud backups, the request raises concerns about user privacy and undermines Apple’s security commitments. >>The British government’s undisclosed order, issued last month, requires blanket capability…
-
CISOs: Stop trying to do the lawyer’s job
Tags: breach, business, ciso, compliance, cybersecurity, data, email, finance, group, guide, incident response, international, jobs, law, privacy, RedTeam, risk, risk-management, security-incident, service, skills, strategy, technology, training, updateThere’s a joke that’s been floating around boardrooms for years: “What’s the difference between lawyers and engineers? Lawyers don’t think they’re engineers.”This light-hearted jab highlights a fundamental difference between the two professions. Engineers, and by extension CISOs, focus on building and fixing things, learning a wide array of skills, sometimes sticking their hands into technologies…
-
Political campaigns struggle to balance AI personalization and voter privacy
In this Help Net Security interview, Mateusz Åabuz, researcher at the IFSH, discusses the balance between using AI for personalized political campaigns and protecting voter … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/02/10/mateusz-labuz-ifsh-ai-personalization-privacy/
-
UK Pressures Apple to Create Global Backdoor To Spy on Encrypted iCloud Access
United Kingdom has reportedly ordered Apple to create a backdoor allowing access to all encrypted content stored in its iCloud service. The demand, issued under the U.K.’s controversial Investigatory Powers Act of 2016, has raised alarm among privacy advocates and tech experts. If implemented, this order would allow British authorities to bypass encryption protections not…
-
DeepSeek, data privacy on lawmakers’ radar
U.S. lawmakers are taking steps to ban DeepSeek from government devices, which should signal to enterprises the inherent risks of using the service. First seen on techtarget.com Jump to article: www.techtarget.com/searchcio/news/366619060/DeepSeek-data-privacy-on-lawmakers-radar
-
Google’s 7-year slog to improve Chrome extensions still hasn’t satisfied developers
Makers of content blockers, privacy add-ons say promises weren’t kept First seen on theregister.com Jump to article: www.theregister.com/2025/02/07/google_chrome_extensions/
-
FedRAMP ConMon vs Audits: What’s the Difference?
A lot goes into protecting the information security of the nation. The National Institute of Standards and Technology, NIST, maintains a list of security controls under the banner of NIST SP 800-53, Security and Privacy Controls for Information Systems and Organizations. Meanwhile, the Federal Risk and Authorization Management Program, or FedRAMP, sets up a framework……
-
Catholic Hospital Chain: 2023 Hack Affected Nearly 900,000
Midwest Chain Also Faces Multiple Federal Data Privacy Lawsuits. A Midwest chain of doctor practices and 13 Catholic hospitals has reported that a 2023 hacking incident that disrupted its IT system for several days and may have compromised the sensitive data of nearly 900,000 people. The group is also facing an assortment of data privacy…
-
Asian Governments Rush to Ban DeepSeek Over Privacy Concerns
Governments Are Skeptical of Chinese A1 Platform’s Data Security Controls. Countries across Asia are racing to ban government officials, national agencies and critical infrastructure organizations from using Chinese artificial intelligence company DeepSeek’s open-source chatbot application, citing data security and privacy risks. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/asian-governments-rush-to-ban-deepseek-over-privacy-concerns-a-27476
-
Many state privacy laws fail to protect consumer data, report finds
First seen on scworld.com Jump to article: www.scworld.com/brief/many-state-privacy-laws-fail-to-protect-consumer-data-report-finds
-
Yahoo Finance: U.S. Lawmakers Push to Ban China’s DeepSeek AI Over Security Risks Feroot Security Analysis
Washington, D.C. U.S. lawmakers announced a bill to ban DeepSeek, the Chinese AI chatbot app, from government devices following a security analysis by Feroot Security that revealed alarming privacy and national security risks. The research suggests that DeepSeek collects user data, including digital fingerprints, login credentials, and behavioral information, potentially sending it to servers…The post…
-
States prepare privacy lawsuit against DOGE over access to federal data
More than a dozen state attorneys general say they plan to sue the Trump administration over the actions of Elon Musk’s DOGE team, including its access to private data federal payment systems. First seen on therecord.media Jump to article: therecord.media/doge-privacy-lawsuit-state-attorneys-general
-
CIOs and CISOs grapple with DORA: Key challenges, compliance complexities
Tags: access, automation, banking, business, cio, ciso, communications, compliance, control, country, cyber, cybersecurity, data, dora, finance, framework, GDPR, governance, jobs, law, monitoring, network, nis-2, penetration-testing, privacy, regulation, resilience, risk, risk-management, service, skills, supply-chain, technology, threat, tool, training, vulnerabilityIn force since January, the Digital Operational Resilience Act (DORA) has required considerable effort from CIOs and CISOs at 20 types of financial entities to achieve compliance. For many, the journey is not complete.”In the past months, financial entities targeted by DORA have been busy internally defining roles and responsibilities related to ICT security, identifying…
-
Will DOGE Access to CMS Data Lead to HIPAA Breaches?
Experts Cast Nervous Eye on Musk and Team’s Handling of Health-Related Info. Privacy experts are keeping a nervous eye on the potential for compromises involving Americans’ health and personal information resulting from the White House’s Department of Government Efficiency – led by Elon Musk – accessing government IT systems containing Medicare and health related data.…
-
Federal judge tightens DOGE leash over critical Treasury payment system access
Lawsuit: ‘Scale of intrusion into individuals’ privacy is massive and unprecedented’ First seen on theregister.com Jump to article: www.theregister.com/2025/02/06/federal_court_leashes_doges_tresury_access/
-
Musk, DOGE Move into Treasury Systems Raises Security, Privacy Concerns
Tags: privacyFirst seen on scworld.com Jump to article: www.scworld.com/news/musk-doge-move-into-treasury-systems-raise-security-privacy-concerns
-
How to customize Safari for private browsing on iOS
Apple’s Safari browser includes several features aimed at enhancing privacy while browsing the web. Two of the most notable privacy features are Intelligent Tracking … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/02/06/safari-privacy-features/
-
OPM asks judge to dismiss federal workers’ lawsuit, files privacy assessment of email system
The Trump administration’s Office of Personnel Management wants a federal court to drop a lawsuit that alleges the agency illegally set up a new email server to sent government-wide messages. First seen on therecord.media Jump to article: therecord.media/opm-asks-judge-to-dismiss-email-lawsuit-files-pia
-
Lawmakers fear Elon Musk, DOGE not adhering to privacy rules
House members say Musk’s organization is “running roughshod” over security and privacy standards, and senators worry about access to classified information. First seen on cyberscoop.com Jump to article: cyberscoop.com/lawmakers-fear-elon-musk-doge-not-adhering-to-privacy-rules/
-
Microsoft Defender Privacy Protection – Das VPN-Feature, das Microsoft loswerden will
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-defender-privacy-protection-aenderungen-funktionen-a-39174feadefacbe603445a67efd2afc8/
-
DEF CON 32 Data On Demand: The Challenges Of Building A Privacy Focused AI Device
Author/Presenter: Matt Domko Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/def-con-32-data-on-demand-the-challenges-of-building-a-privacy-focused-ai-device/
-
Musk’s DOGE effort could spread malware, expose US systems to threat actors
Tags: access, ai, api, attack, authentication, ceo, cio, computer, computing, control, cyber, cybercrime, cybersecurity, data, defense, email, exploit, governance, government, hacking, infection, infosec, international, jobs, malicious, malware, network, office, privacy, ransomware, risk, service, technology, threat, toolOver the past 10 days, an astonishing series of actions by Elon Musk via his Department of Government Efficiency (DOGE) project has elevated the cybersecurity risk of some of the most sensitive computing systems in the US government. Musk and his team of young, inexperienced engineers, at least one of whom is not a US…
-
What 2025 HIPAA Changes Mean to You
Tags: access, application-security, authentication, breach, business, cloud, compliance, control, cybersecurity, data, encryption, healthcare, HIPAA, identity, incident response, insurance, law, mfa, monitoring, nist, office, penetration-testing, privacy, risk, risk-analysis, service, strategy, threat, tool, vulnerabilityWhat 2025 HIPAA Changes Mean to You madhav Tue, 02/04/2025 – 04:49 Thales comprehensive Data Security Platform helps you be compliant with 2025 HIPAA changes. You are going about your normal day, following routine process at your healthcare organization, following the same business process you’ve followed for the last twelve years. You expect Personal Health…
-
7 tips for improving cybersecurity ROI
Tags: advisory, ai, attack, business, ciso, compliance, control, corporate, cyber, cybersecurity, data, defense, detection, exploit, finance, gartner, group, incident response, infrastructure, intelligence, metric, monitoring, network, privacy, resilience, risk, risk-assessment, risk-management, service, siem, software, strategy, technology, threat, tool, vulnerability, wafWhen it comes to cybersecurity investments, smart money is directed toward initiatives that deliver the greatest protection at the lowest possible cost. But what appears to be a straightforward calculation can often be anything but.CISOs perennially face challenges securing adequate funding to safeguard the enterprise, placing them often in difficult positions attempting to stretch resources…
-
Italy moves to ban DeepSeek amid data privacy concerns
First seen on scworld.com Jump to article: www.scworld.com/brief/italy-moves-to-ban-deepseek-amid-data-privacy-concerns