The CircleCI security breach leaves most of its CI/CD platform clients with a pile of time-consuming cleanup of assorted keys, tokens and variables as they are forced to immediately rotate secrets.
Senior Correspondent at CPO Magazine
Scott Ikeda is a technology futurist and writer for more than 15 years. He travels extensively throughout Asia and writes about the impact of technology on the communities he visits. Over the last 5 years, Scott has grown increasingly focused on the future landscape of big data, surveillance, cybersecurity and the right to privacy.
Popular collaboration tool Slack is the latest to suffer a security breach involving its GitHub repositories, with the company reporting that private source code was stolen in late December.
Irish DPC has handed down a €390 million fine to Meta over its targeted advertising practices on Facebook and Instagram. The fine stems from a long legal battle over Meta's claim that users enter into an implicit contract agreeing to receive personalized ads when they accept the terms of service.
Microsoft faces a hefty fine over Bing cookie consent issues, and has additionally been given three months to get the system into compliance or it could face additional fines of €60,000 per day.
The Irish DPC probe centers on an API vulnerability that appears to have been exploited by multiple parties before being detected and remediated. The data breach first came to light in August and was acknowledged by Twitter.
Up to 87 million Facebook accounts had user data inappropriately accessed during the Cambridge Analytica scandal, in which a weakness in the platform's API was used to harvest protected profile and activity information.
The FTC has assessed Fortnite maker Epic a total of $520 million in penalties, roughly divided between COPPA violations and the use of dark patterns to trick players into making in-game purchases.
Popular password manager LastPass has confirmed that a previously reported November security incident was a data breach that resulted in the theft of customer data, including encrypted password vaults.
36% of Corvus claims were related to fund transfer fraud in Q3 2022, hitting an all-time high and outpacing ransomware for the first time in a long time. Ransomware cyber insurance claims remain the most costly per incident, however.
One of Britain's most popular newspapers, The Guardian, is reporting that a suspected ransomware attack is causing some internal network trouble. The paper's report characterized it as "serious" despite it seemingly not stopping online or offline production of the paper.
