Proposed Active Cyber Defense Bill “hack back” will allow victims of hacker attacks to carry out digital vigilantism but what are the consequences when companies take law into their own hands?
The Scattered Spider ransomware gang has been grabbing headlines with a string of bold and high-profile cyber attacks. But researchers with Google's Threat Intelligence Group (GTIG) now believe that some of these attacks may have been misattributed, and that the similarly long-tenured ShinyHunters group may have instead been the culprits.
Law enforcement agencies purchasing illicit breach data from SpyCloud, presumably for use in investigations, raising questions of due legal process by these agencies.
Mimecast’s forensic investigation found that SolarWinds hackers accessed limited source code repositories and account details after compromising customers' Microsoft 365 tenants.
Russian darknet market Hydra emerged as the hotspot for illegal transactions within three years, earning $1.37 billion in cryptocurrency transactions.
Japanese watchmaker Seiko has suffered a data breach that leaked sensitive information, with the Russian ransomware gang BlackCat/AlphaV claiming responsibility for the attack.
Privacy advocates were upset with the bank data decision, but were also handed a win by the Supreme Court with its ruling that the national government could not go ahead with a plan to collect the biometric data of cell phone users.
Japanese tech giant Olympus suffered a suspected BlackMatter ransomware attack in early August that disrupted operations in its European, Middle East, and African operations.
Four of the largest U.S. wireless carriers, T-Mobile, AT&T, Verizon and Sprint, face a potential collective fine of $200 million for failing to secure location data sold to third parties.
The UK is now firming up what its data handling and privacy rules will look like post-Brexit. The lead item is an announcement of partnerships with countries that have lost "trusted partner" status in the EU, most notably the United States.
