A ransomware gang that recently hit major UK retailers such as Marks & Spencer with cyber attacks is now setting its sights on US companies, according to a warning from Google's security team.
Senior Correspondent at CPO Magazine
Scott Ikeda is a technology futurist and writer for more than 15 years. He travels extensively throughout Asia and writes about the impact of technology on the communities he visits. Over the last 5 years, Scott has grown increasingly focused on the future landscape of big data, surveillance, cybersecurity and the right to privacy.
Crypto exchange Coinbase has said that it will reimburse customers that lost funds due to a recent data breach, and is also setting aside a $20 million reward for information leading to the arrest and conviction of the hackers.
An agreement in principle on two consumer privacy suits brought by the Texas Attorney General's office would settle the complaints for a total of $1.375 billion. The suits broadly involve surreptitious tracking of users via several methods and products in recent years, including alleged undisclosed company use of biometrics.
The European Vulnerability Database was announced via press release on May 13, which indicated that the undertaking is already operational. Though the timing is likely coincidental to at least some degree, the announcement comes just weeks after the MITRE CVE database avoided defunding.
A new handbook published by crypto advocacy group European Crypto Initiative (EUCI) warns that EU regulators will ban anonymous crypto accounts and privacy coins by 2027, according to the terms of the recently adopted Anti-Money Laundering Regulation (AMLR).
TeleMessage provides secure archiving services for a variety of messaging apps, including Telegram and WhatsApp. In this case, the security breach is of an unofficial Signal clone that parent company Smarsh offers called "TM SGNL."
A case of what TikTok says was the mistaken storage of EU data on a server in China appears to be concluding with a €530 million fine for the video giant, under charges of violating Article 46(1) of the GDPR and its requirement to "verify, guarantee and demonstrate" that its data transfers were kept adequately secure.
In at least two of the attacks, those on Co-op and Marks and Spencer, the DragonForce group is confirmed to have used very similar social engineering approaches to convince the IT help desks to have an employee password reset.
Microsoft claims that its new passwordless methods reduce password use by over 20% and result in users signing in faster. The company added passkeys as an option for personal accounts along with a password manager for Windows Hello early last year.
Opet notes that the SaaS model is usually the default option for whatever software a company might need, and often is the only option available. That means a global concentration of risk such that numerous third-party security breaches could cascade.”
