Scott Ikeda, Senior Correspondent at CPO Magazine

California AG Finds Privacy Violations in DoorDash Suit, $375,000 CCPA Enforcement Settlement Announced

February 29, 2024

DoorDash has settled an ongoing investigation by the California Department of Justice after Attorney General Rob Bonta announced the company had committed privacy violations under the terms of the CCPA. In addition to paying a $375,000 civil fine, the food delivery giant will be subject to additional CCPA enforcement terms going forward.

Hacker working on laptop showing LockBit ransomware new data leak site

Cyber Security News

LockBit Ransomware Group Says It Is Back in Business, Debuts New Data Leak Site

February 28, 2024

Shortly after a major international law enforcement takedown, the LockBit ransomware group says that it is back online and has launched a new data leak site complete with "countdown clocks" for its current victims.

Digital map of United States showing state data privacy laws

Data Protection News

EPIC: State Data Privacy Laws Failing Due to Too Much Business Influence on Legislation, Inadequate Consumer Redress

February 27, 2024

A new report gave almost half of the 14 states that have laws on the books a failing grade and notes that industry lobbying influence on state data privacy laws has been very strong. California is the only state with a model that was not originally drafted by a big tech outfit.

State-sponsored Chinese hacker in front of laptop with digital Chinese flag background showing document leak

Cyber Security News

Document Leak Reveals Use of Private Firm by State-Sponsored Chinese Hackers for International Espionage

February 26, 2024

Private Chinese hackers were employed not just for foreign hacking, but also as a part of the government's domestic surveillance program. The document leak indicates that i-Soon may have also hacked domestic targets for the purpose of intelligence-gathering.

Data Protection News

Coalition Headed by Schrems, Wikimedia Europe Urges EU Privacy Regulators to Reject Meta’s Ad-Free Subscription Option

February 23, 2024

The coalition suggests that if privacy regulators sign off on Meta’s ad-free scheme, it will immediately be adopted by every other service that monetizes via personalized advertising. That could undo a great deal of the work GDPR decisions have done.

Handcuffs on a keyboard showing law enforcement operation on Lockbit ransomware group

Cyber Security News

International Law Enforcement’s “Operation Cronos” Snags LockBit Ransomware Group’s Leak Site, Crypto Wallets and Decryption Keys

February 22, 2024

International law enforcement operation appears to have significantly disrupted the capabilities of the LockBit ransomware group, one of the biggest internet-based criminal hacking organizations in the world, seizing about 200 of the group's crypto wallets and over 1,000 decryption keys.

Close up of face showing mobile trojan malware steal facial data

Cyber Security News

GoldPickaxe Mobile Trojan Malware Captures Facial Data, Intercepts Text Messages to Access Financial Accounts

February 20, 2024

The new GoldPickaxe evolution of the GoldDigger trojan malware takes things a step further, retaining the prior functionality but adding the ability to capture facial data for the purpose of creating a deepfake to defeat biometric logins.

Hacker hands using laptop with virtual brain showing OpenAI tools used by state-sponsored hacking groups

Cyber Security News

Microsoft: State-Sponsored Hacking Groups Are Making Use of OpenAI Tools

February 19, 2024

A recent surge in phishing messages by profit-seeking criminal hackers has been tied to OpenAI tools, but a new report from Microsoft finds that state-sponsored hacking groups are making of use of these new AI abilities as well.

Bitcoin with padlock on motherboard showing ransomware payments

Cyber Security News

Chainalysis: Global Ransomware Payments Top $1 Billion, Beating Prior Record

February 16, 2024

Numerous recent sources have been indicating a resurgence for ransomware in 2023, and perhaps the best evidence yet comes from a new Chainalysis report: for the first time ever, global ransomware payments topped over $1 billion in cryptocurrency.

Hand holds credit card and works on keyboard showing data breach at payment providers

Cyber Security News

Record-Breaking Data Breaches of French Payment Providers May Impact Half of the Country’s Population

February 16, 2024

The data breach is thought to impact about 33 million people in total, or nearly half of the country's total population of about 67 million. Both of the data breach subjects are third-party payment providers for France’s medical insurance industry.

California AG Finds Privacy Violations in DoorDash Suit, $375,000 CCPA Enforcement Settlement Announced

LockBit Ransomware Group Says It Is Back in Business, Debuts New Data Leak Site

EPIC: State Data Privacy Laws Failing Due to Too Much Business Influence on Legislation, Inadequate Consumer Redress

Document Leak Reveals Use of Private Firm by State-Sponsored Chinese Hackers for International Espionage

International Law Enforcement’s “Operation Cronos” Snags LockBit Ransomware Group’s Leak Site, Crypto Wallets and Decryption Keys

GoldPickaxe Mobile Trojan Malware Captures Facial Data, Intercepts Text Messages to Access Financial Accounts

Microsoft: State-Sponsored Hacking Groups Are Making Use of OpenAI Tools

Chainalysis: Global Ransomware Payments Top $1 Billion, Beating Prior Record

Record-Breaking Data Breaches of French Payment Providers May Impact Half of the Country’s Population

Data Breach at Denmark’s Central Population Registry Impacts 8.8 Million People

ASOS Data Breach Led to Customers Receiving Unauthorized Push Notifications

Wikimedia: Rogue AI Agents Traced Back to OpenAI Made Unauthorized Edits, Attempted to Compromise Etherpad

A Wave of AI-Powered Cyber Attacks Hits Numerous South Korean Banks, Exposing Sensitive PII