Scott Ikeda, Senior Correspondent at CPO Magazine

Food Delivery Company DoorDash Latest Name Added to Data Breach Spree Conducted by Twilio Hackers

September 1, 2022

The attack the food delivery company DoorDash appears to have been part of the ongoing "0ktapus" campaign, which first made news when it ensnared Twilio. Customers may have had contact information exposed along with order information and partial credit card information.

Businessman typing on keyboard laptop computer and holding smartphone showing Okta phishing campaign

Cyber Security News

Twilio Hackers Behind Okta Phishing Campaign That Breached Over 130 Organizations

August 31, 2022

In the roughly five months that the Okta phishing campaign has been active, it has racked up 9,931 login credentials from about 130 organizations. 5,541 included MFA codes, and 3,120 included the victim's email account.

Child holding smartphone with TikTok icon on phone showing TicTok browser tracking keystrokes

Data Privacy News

Security Researcher Finds That TikTok Browser Is Tracking Keystrokes

August 30, 2022

Alarms raised about embedded TikTok browser capable of tracking keystrokes. Company says that the ability exists within the code, but that it is not active and only used internally for debugging and testing purposes.

LastPass password manager mobile app on phone screen showing security breach

Cyber Security News

Security Breach at Password Manager LastPass as Hackers Steal Source Code and Proprietary Information

August 30, 2022

Recent security breach at password manager LastPass does not appear to be an immediate threat to the encrypted vaults that customers use to store their passwords, but the hackers may have made off with source code and proprietary information.

Data Privacy News

Class Action Lawsuit Accuses Oracle of “Global Surveillance,” Creating Detailed Profiles of Five Billion People

August 29, 2022

A class action lawsuit accuses Oracle of creating “global surveillance” profiles for five billion people worldwide, attaching things like purchase records and GPS locations to their name and contact information.

Cyber Security News

Whistleblower Report Slams Twitter Security and Privacy Practices, Asserts Company Deceived Public and Is Employing Foreign Agents

August 26, 2022

A shocking whistleblower report from Peiter ‘Mudge’ Zatko, a well-known cybersecurity expert who served as Twitter's head of security from mid-2020 to early 2022, asserts that the company is "grossly negligent" in "several areas" of information security and privacy protections.

Medicine doctor with tablet showing health data and Facebook ads

Data Privacy News

Study Finds Medical Apps Are Sharing Health Data With Third Party Trackers, Funneling Info To Targeted Facebook Ads

August 25, 2022

Apps handling sensitive health data, including some that interface with labs and other entities covered by HIPAA privacy regulations, were found to be sharing health data with third party trackers that provide cues for targeted Facebook ads.

Dollar banknotes on a laptop showing BlackByte ransomware gang's data leak site

Cyber Security News

BlackByte Ransomware Group Adds New “Feature” to Data Leak Site With Tiered Payment Options

August 24, 2022

The BlackByte ransomware gang's "2.0" reboot of their data leak site sports a new "feature" for its victims: a tiered payment system that allows for smaller payments to delay publication of sensitive data, or to simply download and recover it prior to having it dumped for public viewing.

Data Privacy News

Concerns Raised About Home Mapping, Patient Privacy as Amazon Acquires One Medical and Roomba

August 23, 2022

Two of Amazon's recent proposed acquisitions are raising concerns about the retail giant's expanding reach into the everyday lives of Americans, this time involving patient privacy and home mapping.

Close up of hand using smart phone at night showing Twilio hack exposed phone numbers of privacy messaging app Signal

Cyber Security News

Twilio Hack Confirmed To Have Exposed 1,900 Phone Numbers From Privacy Messaging App Signal

August 23, 2022

Twilio said that the data of 125 customers was accessed by the threat actors for some amount of time. Privacy messaging app Signal has indicated that the attackers had some level of access to about 1,900 registered phone numbers.

Food Delivery Company DoorDash Latest Name Added to Data Breach Spree Conducted by Twilio Hackers

Twilio Hackers Behind Okta Phishing Campaign That Breached Over 130 Organizations

Security Researcher Finds That TikTok Browser Is Tracking Keystrokes

Security Breach at Password Manager LastPass as Hackers Steal Source Code and Proprietary Information

Class Action Lawsuit Accuses Oracle of “Global Surveillance,” Creating Detailed Profiles of Five Billion People

Whistleblower Report Slams Twitter Security and Privacy Practices, Asserts Company Deceived Public and Is Employing Foreign Agents

Study Finds Medical Apps Are Sharing Health Data With Third Party Trackers, Funneling Info To Targeted Facebook Ads

BlackByte Ransomware Group Adds New “Feature” to Data Leak Site With Tiered Payment Options

Concerns Raised About Home Mapping, Patient Privacy as Amazon Acquires One Medical and Roomba

Twilio Hack Confirmed To Have Exposed 1,900 Phone Numbers From Privacy Messaging App Signal

Oracle Health Data Breach Impacted Over 20 Million Patients

Data Breach at Denmark’s Central Population Registry Impacts 8.8 Million People

ASOS Data Breach Led to Customers Receiving Unauthorized Push Notifications

Wikimedia: Rogue AI Agents Traced Back to OpenAI Made Unauthorized Edits, Attempted to Compromise Etherpad