Bad bots account for 30% of internet traffic and are increasingly used in account takeover and API attacks, while human traffic fell to an 8-year low of just over half of all internet traffic.
Massive data leak (handed over to German business newspaper Handelsblatt) reportedly contains troves of customer payment information, employee personal information, and customer safety complaints about the automated driving functions of Tesla vehicles.
Microsoft reports a long-term campaign by Chinese hackers that has burrowed into a number of different aspects of US critical infrastructure, with the eventual goal being the creation of a system of widespread disruption that could be 'switched on' during another global crisis or a conflict between the two nations.
The Montana TikTok ban is now facing a lawsuit from parent company ByteDance, on the basis of violation of Constitutional rights and assorted federal laws. The ban is not slated to take effect until January 2024, and legal challenges were expected in the interim.
Another vulnerability that can expose master passwords in KeePass has surfaced, after one was discovered to start the year. The new security exploit involves traces of the password being left in system memory, and potentially reassembled if the memory is dumped.
Authorities in the U.S. and Australia have warned that the BianLian ransomware gang has abandoned the double extortion model for purely data extortion attacks. More groups are likely to follow suit and forego the hassle of developing and managing the encryption and decryption process in favor of a less complicated attack,
Washington is the latest state in which Google has settled a location tracking lawsuit, adding to a list that has cost it a little over half a billion dollars to date. Lawsuits date back to a 2018 probe that found Google apps and services were continuing to track and log data even after users had changed privacy settings.
Group-IB researchers infiltrated the Qilin ransomware operation and observed that the group's payment structure rewards affiliates with 80% from a ransomware payout of $3 million or less and 85% for any payout exceeding $3 million.
A new record for GDPR fines has been set as the European Data Protection Board (EDPB) is requiring Meta to pay $1.3 billion for its international data transfers related to the dissolution of the Privacy Shield framework.
The US Department of Transportation has suspended the TRANServe benefits system to address a security breach impacting 237,000 current and former federal employees.
