A malicious fake ChatGPT Chrome extension on Google's official web store targets Facebook Ad accounts for takeover, leveraging the chatbot's popularity. Extension has been downloaded more than 2,000 times.
The ransomware gang ALPHV has claimed to have breached Amazon's Ring on the underground site it uses to extort victims, though it has yet to provide any evidence.
Telecoms giant AT&T confirmed a third-party data breach involving a marketing vendor exposing 9 million customer accounts to unauthorized access.
A press release from the Department of Science, Innovation and Technology (DSIT) framed the new UK GDPR draft as a "common sense" reduction of "pointless paperwork" that would save billions of dollars annually.
Taiwanese PC maker Acer confirmed a data breach after a hacker listed the stolen data on a hacking forum, including technical product specifications and infrastructure details.
The agreement means that WhatsApp will make its privacy policy clearer to end users, in compliance with EU rules, in addition to making it easier for users to reject updates along with clearer explanations in situations where refusing the new privacy policy means agreeing to no longer use the service.
The FTC investigation's specific concern with the Musk era is that the company is retaining adequate resources to fund and staff the privacy practices it remains obligated to in a 2011 FTC settlement.
TikTok is no longer welcome on the devices of federal agencies, along with many state governments. But some in Congress are calling for an even broader TikTok ban, to the point of removing it from the country entirely.
A health data breach appears to have exposed the sensitive personal information of members of Congress and their employees. DC Health Link is used by many (but not all) members and their assorted staff.
The U.S. aviation sector is looking at new cybersecurity requirements in four fundamental areas: network segmentation and redundancy, access control, monitoring and detection of threats, and timely patching.
