Latest

News

Latest news on data protection, privacy and cybersecurity regulatory developments, data breaches and enforcement actions happening around the world.

WhatsApp messenger app with lock showing WhatsApp account issue with account deactivation

Cyber Security News

Critical WhatsApp Account Vulnerability Addressed: Third-Party Account Deactivations by Email Prompt Verification Changes

August 2, 2023

WhatsApp accounts could be deactivated simply by sending a request from any email address, so long as the attacker knew the associated phone number. Going forward, the account deactivation process now involves a follow-up message that requests verification of ownership of the associated phone number.

British central bank building showing poor savings rates blamed on UK data protection laws

Data Protection News

UK Banks: Consumers Getting Poor Savings Rates the Fault of Data Protection Laws

August 1, 2023

After being pulled into an early July meeting with regulators over uncompetitive savings rates, some UK banks are now blaming data protection laws for consumer financial woes, claiming that rules forbid them from communicating better options to customers.

Open security lock on computer circuit board showing NATO data theft

Cyber Security News

Alleged NATO Data Theft Leaked Hundreds of Sensitive Documents and Thousands of User Records

August 1, 2023

NATO is investigating an alleged data theft by a hacktivist group SiegedSec. 845 MB of compressed data was leaked and found to contain unclassified information and 8,000 employee records from 31 nations.

System hacked warning on monitor showing cost of data breach

Cyber Security News

IBM Cost of Data Breach Report 2023: Costs Hit Record High, But Only About Half of Breached Companies Increase Their Security Investment

August 1, 2023

Average cost of data breach has once again hit a new record to $4.45 million, up 15.3% just from 2020. Yet only 51% of organizations that have suffered a breach plan to increase security spending.

View from the roof showing SEC rules on incident disclosure for cybersecurity breaches

Cyber Security News

New SEC Rules Require Incident Disclosure for Cybersecurity Breaches Within Four Days

July 31, 2023

New rules voted in by the SEC last week require all publicly traded companies to report any cybersecurity breaches that could cause a material impact within four days. Timer doesn't start until the company determines that the breach could be material.

ChatGPT on phone screen showing OpenAI credentials sold on dark web

Cyber Security News

Over 200,000 Compromised OpenAI Credentials Available for Purchase on the Dark Web

July 31, 2023

Over 200,000 OpenAI credentials are listed for sale on dark web marketplaces as interest in the generative AI chatbot peaks within the black hat community.

Hands of gamer on keyboard showing Roblox developers data breach

Cyber Security News

Previously Unknown Data Breach Exposed Roblox Developers’ Personal Information

July 28, 2023

Previously unknown data breach that became public knowledge on July 18 impacted approximately 4,000 accounts of individuals who attended the Roblox Developer Conference between 2017 and 2020. Data had remained within “niche cheating communities within Roblox.”

Data Protection News

Meta Facing Severe Targeted Advertising Restrictions, Potential $100,000 Per Day Fine in Norway

July 27, 2023

For every day that Meta remains out of compliance during the 90-day period, it will be assessed the equivalent of $100,000. The fine period would run until the end of October, and should Meta be out of compliance for the full duration it would end up paying a total of $9 million.

Smart home, app on phone showing Cyber Trust Mark for smart devices

Cyber Security News

How Much Protection Does the New “U.S. Cyber Trust Mark” for Smart Devices Offer?

July 27, 2023

U.S. Cyber Trust Mark, a labeling program intended to make the relative security level of smart devices more apparent to consumers, is based on a NIST standard first put forward in a February 2022 white paper, addressing a longstanding problem with shortcomings in IoT security.

Keyboard with red backlight showing Chinese hackers cyber espionage

Cyber Security News

Cyber Espionage Incident Involving Microsoft Cloud Expands, Chinese Hackers May Have Compromised “Hundreds of Thousands” of Government Email Accounts

July 26, 2023

The assessment of the damage from the recent cyber espionage campaign by Chinese hackers has now been revised and greatly expanded, with more senior officials and ambassadors confirmed to have been targeted and potentially "hundreds of thousands" of email accounts breached.

1 … 99 100 101 102 103 … 318

News

Critical WhatsApp Account Vulnerability Addressed: Third-Party Account Deactivations by Email Prompt Verification Changes

UK Banks: Consumers Getting Poor Savings Rates the Fault of Data Protection Laws

Alleged NATO Data Theft Leaked Hundreds of Sensitive Documents and Thousands of User Records

IBM Cost of Data Breach Report 2023: Costs Hit Record High, But Only About Half of Breached Companies Increase Their Security Investment

New SEC Rules Require Incident Disclosure for Cybersecurity Breaches Within Four Days

Over 200,000 Compromised OpenAI Credentials Available for Purchase on the Dark Web

Previously Unknown Data Breach Exposed Roblox Developers’ Personal Information

How Much Protection Does the New “U.S. Cyber Trust Mark” for Smart Devices Offer?

Cyber Espionage Incident Involving Microsoft Cloud Expands, Chinese Hackers May Have Compromised “Hundreds of Thousands” of Government Email Accounts

Security flaw in Microsoft’s Analytics Platform Titan Exposes 17 Trillion Records

Meta Muse AI Assistant’s Zero-Day Vulnerability Could Enable Attackers to Inject Malware

New Disclosure of “Meddling” OpenAI Agents Includes Attacks on UN and US Government Websites

ShinyHunters Hacks the FBI in a Security Breach Exposing Personal Information of 38,000 People