Scott Ikeda, Senior Correspondent at CPO Magazine

Unlocked padlock with bullet hole showing Spring Java Framework zero-day RCE vulnerability

New Zero-Day RCE Vulnerability in Spring Java Framework; Could “Spring4Shell” Be the Next Log4Shell?

April 4, 2022

A new zero-day remote code execution (RCE) vulnerability in the Spring Java Framework is drawing comparisons to Log4Shell. It can be exploited by simply sending a crafted HTTP request to a target system.

Hackers attacking NFT game on Defi platform Ronin network

Cyber Security News

Ronin Network Attacked Via NFT Game in One of the Biggest Breaches of a DeFi Platform

April 1, 2022

A breach of the Ronin network’s bridge between it and the popular NFT game "Axie Infinity" netted an attacker the equivalent of $625 million in Ethereum and other coins, making it one of the largest DeFi Platfform thefts to date.

EU flag and computer keyboard showing Digital Markets Act on Big Tech and inteoperability

Data Privacy News

EU Digital Markets Act Is GDPR-like in Scope, Focuses on Big Tech “Gatekeeper” Platforms and Messaging Interoperability

April 1, 2022

The Digital Markets Act focuses on Big Tech, and its requirements would force message interoperability among other terms that Facebook and similar services are unlikely to be happy about.

Nestlé headquarters in Route de Lavaux showing cyber attack and data leak

Cyber Security News

Did Anonymous Carry Out a Cyber Attack on Nestlé? Company Claims Data Leak Was Internal

March 30, 2022

Nestlé says that the incident is not a cyber attack by Anonymous but an internal data leak, with the information being errantly published to the public-facing web for some weeks.

Handcuffs on a keyboard showing arrests for Lapsus$ hackers

Cyber Security News

Suspected Lapsus$ Hackers Arrested; London Group Between the Ages of 16 and 21

March 30, 2022

Lapsus$ hackers appeared to be reckless – posting about their activities on Twitter and other social media sites, and reportedly broke into Zoom conference calls at the companies they had just breached to taunt employees.

Apple shopfront with iPhone advertisement showing IDFA and ad tracking

Data Privacy News

Apple Privacy Chief: “Regrets” Creating IDFA, Did Not Intend for Some Ad Tracking Uses to be Implemented

March 29, 2022

The IDFA was created as something of a compromise to make ad tracking possible while protecting user privacy, but designer Erik Neuenschwander eventually came to openly regret having ever created the system.

Data Protection Insights

CCPA Data Privacy Trends Report: Data Subject Requests Indicate California Consumers Are Quick To Assert Their Privacy Rights

March 29, 2022

The CCPA went into effect at the start of 2020, providing two complete years of data at this point. The total number of data subject requests just about doubled from one year to the next.

Data flows around the city showing data transfer deal for Privacy Shield

Data Privacy News

EU and US Move Closer to Privacy Shield Replacement With Agreement on Data Transfer Deal

March 28, 2022

The EU and US have reached an agreement in principle on a Privacy Shield replacement, but details of the data transfer deal are not yet available to the public.

Hands of open source developer in act of hacktivism

Cyber Security News

In Act of Hacktivism, Open Source Project Maintainer Uses Code to Wipe Russian and Belarusian Computers

March 25, 2022

An open source project maintainer decided to protest the war in Ukraine by targeting computers with an IP address in Russia or Belarus with a malicious update in a controversial act of hacktivism.

Man pointing at virtual lock icon showing security breach of authentication services provider

Cyber Security News

Hacking Group Claims It Compromised Authentication Services Provider Okta; Causing Widespread Concern Over Security Breach

March 24, 2022

Okta has about 15,000 clients and provides authentication services for remote logins, usually for employees and students. A known security breach took place in January, but LAPSUS$ says this is something else.

New Zero-Day RCE Vulnerability in Spring Java Framework; Could “Spring4Shell” Be the Next Log4Shell?

Ronin Network Attacked Via NFT Game in One of the Biggest Breaches of a DeFi Platform

EU Digital Markets Act Is GDPR-like in Scope, Focuses on Big Tech “Gatekeeper” Platforms and Messaging Interoperability

Did Anonymous Carry Out a Cyber Attack on Nestlé? Company Claims Data Leak Was Internal

Suspected Lapsus$ Hackers Arrested; London Group Between the Ages of 16 and 21

Apple Privacy Chief: “Regrets” Creating IDFA, Did Not Intend for Some Ad Tracking Uses to be Implemented

CCPA Data Privacy Trends Report: Data Subject Requests Indicate California Consumers Are Quick To Assert Their Privacy Rights

In Act of Hacktivism, Open Source Project Maintainer Uses Code to Wipe Russian and Belarusian Computers

Hacking Group Claims It Compromised Authentication Services Provider Okta; Causing Widespread Concern Over Security Breach

String of Ransomware Cyber Attacks Prompts First “Cybersecurity State of Emergency” Declaration From Japan

Oracle Health Data Breach Impacted Over 20 Million Patients

Data Breach at Denmark’s Central Population Registry Impacts 8.8 Million People

ASOS Data Breach Led to Customers Receiving Unauthorized Push Notifications