Scott Ikeda, Senior Correspondent at CPO Magazine

Microsoft building showing data leak from Microsoft Power Apps

Microsoft Power Apps Data Leak Fallout: 38 Million Records Exposed, State and City Governments Among Those Breached

August 27, 2021

Microsoft Power Apps appears to list all data types as public unless the default settings are changed. The data leak exposed several coronavirus tracing and vaccination portals, as well as at least one job applicant database that contained social security numbers.

Woman using Zoom application on mobile phone showing GDPR violation for data transfers

Data Protection News

Hamburg DPA Says Zoom Is Not Compliant With GDPR Due to U.S. Data Transfers, No Longer Allowed for State Government Agencies

August 26, 2021

Germany's data protection authority has determined that Zoom's data transfers to the U.S. are in violation of the terms of the GDPR in light of the Schrems II ruling, and has issued a formal warning.

Hacker pointing finger at laptop screen showing ransomware via social engineering

Cyber Security News

Nigerian Threat Actors Skip Social Engineering, Make Direct Pitches to Employees To Install Ransomware on Company Networks

August 25, 2021

Most ransomware attacks begin with some combination of phishing and social engineering. An enterprising ransomware gang in Nigeria appears to be skipping this messy step, simply making a direct pitch to employees to join in on the attack.

Hands in a black gloves holding bitcoin and Ethereum coin showing crypto exchange cyber attack

Cyber Security News

Cyber Attack on Crypto Exchange Liquid Results in Loss of $97 Million in Ethereum Tokens and Other Assets

August 25, 2021

Crypto exchange Liquid, one Japan's most popular exchanges, is now short $97 million in total assets after a cyber attack that pulled funds directly from the wallets of some of its customers.

Judge gavel on the China flag showing data protection law impacting tech firms

Data Protection News

China’s New Data Protection Law Maintains Full State Access To Private Information, but Puts Clamps on Tech Firms Comparable to EU’s GDPR

August 24, 2021

China’s new GDPR-style data protection law does almost nothing to curb the state's unfettered access to data stored within the country, but does sharply limit the ways in which tech firms can handle and share it.

Household indoor digital surveillance webcam showing supply chain vulnerability in IoT devices

Cyber Security News

Supply Chain Vulnerability in Cloud Connectivity Platform Threatens 83 Million IoT Devices

August 24, 2021

Supply chain vulnerability in the ThroughTek "Kalay" network, a cloud-based communications platform used by an estimated 83 million IoT devices, could allow for remote compromise and control.

Dark background of silhouettes of computer motherboard showing security vulnerability affecting software supply chain

Cyber Security News

Blackberry Buried Security Vulnerability in OS Until Forced To Disclose by Feds; Was Discovered in April

August 23, 2021

Security vulnerability that impacts an older form of a BlackBerry industrial systems OS, still in use in both industrial settings and hospital equipment, was discovered by Microsoft researchers in April of this year. Many are only now learning about it.

Tesla flagship store in Chengdu China showing smart car data protection regulation

Data Privacy News

China’s Data Protection Regulation Push Comes to the Smart Car Market; Vehicle Keys, Locally Generated Information Must Be Stored In-Country

August 20, 2021

Expansion of China's data protection regulations will impact the smart car market in the country. The CCP has clarified terms to require this of the digital keys to smart vehicles and the data they generate.

Cyber Security News

T-Mobile Data Breach: 100 Million Customer Data Records Compromised Including Social Security, Driver’s License & Unique Device Numbers

August 19, 2021

T-Mobile appears to have suffered a devastating data breach as a reported 100 million records have appeared for sale on a dark web forum. The customer data is about as sensitive as possible, containing accurate Social Security and driver's license numbers.

Woman in protective medical mask with vaccine passport showing fake vaccine certificate

Cyber Security News

As Vaccine Passport Programs Roll Out, Black Market for Fake Vaccine Certificates Does Booming Business

August 19, 2021

Fake vaccine certificates have been available for some time, but the market has picked up significant steam as the concept of "vaccine passports" has spread to domestic life and everyday activities.

Microsoft Power Apps Data Leak Fallout: 38 Million Records Exposed, State and City Governments Among Those Breached

Cyber Attack on Crypto Exchange Liquid Results in Loss of $97 Million in Ethereum Tokens and Other Assets

China’s New Data Protection Law Maintains Full State Access To Private Information, but Puts Clamps on Tech Firms Comparable to EU’s GDPR

Supply Chain Vulnerability in Cloud Connectivity Platform Threatens 83 Million IoT Devices

Blackberry Buried Security Vulnerability in OS Until Forced To Disclose by Feds; Was Discovered in April

China’s Data Protection Regulation Push Comes to the Smart Car Market; Vehicle Keys, Locally Generated Information Must Be Stored In-Country

T-Mobile Data Breach: 100 Million Customer Data Records Compromised Including Social Security, Driver’s License & Unique Device Numbers

As Vaccine Passport Programs Roll Out, Black Market for Fake Vaccine Certificates Does Booming Business

String of Ransomware Cyber Attacks Prompts First “Cybersecurity State of Emergency” Declaration From Japan

Oracle Health Data Breach Impacted Over 20 Million Patients

Data Breach at Denmark’s Central Population Registry Impacts 8.8 Million People

ASOS Data Breach Led to Customers Receiving Unauthorized Push Notifications