Latest

News

Latest news on data protection, privacy and cybersecurity regulatory developments, data breaches and enforcement actions happening around the world.

Cars waiting on the road showing car manufacturer API security flaws

Cyber Security News

Severe API Security Flaws Affect Millions of Vehicles from 16 Car Manufacturers, Including BMW, Mercedes and Toyota

January 11, 2023

API security flaws on millions of vehicles from 16 car manufacturers expose them to unauthorized remote control, account takeovers, and personal information disclosure. Multiple car manufacturers using nearly identical car systems with almost similar functionality.

Apple Store in France showing ad personalization and consent fine by CNIL

Data Protection News

Apple Fined €8 Million for App Store Ad Personalization in France, Consent Process Insufficient

January 11, 2023

CNIL has hit Apple's App Store with a fine of €8 million over its ad personalization practices, taking it to task for not properly collecting consent and making the process of opting out too indirect.

Developer working on CI/CD platform showing security breach result in need to rotate secrets

Cyber Security News

Major Security Breach at Widely Used CI/CD Platform Prompts Developers To Rotate Secrets

January 10, 2023

The CircleCI security breach leaves most of its CI/CD platform clients with a pile of time-consuming cleanup of assorted keys, tokens and variables as they are forced to immediately rotate secrets.

Slack website with magnifying glass showing security breach of GitHub repositories exposed source code

Cyber Security News

Targeting of GitHub Repositories Continues as Slack Reports Security Breach, Stolen Source Code

January 10, 2023

Popular collaboration tool Slack is the latest to suffer a security breach involving its GitHub repositories, with the company reporting that private source code was stolen in late December.

Data Protection News

Irish DPC Orders €390 Million Fine to Meta Over Targeted Advertising, Orders Implementation of Ability To Opt Out

January 9, 2023

Irish DPC has handed down a €390 million fine to Meta over its targeted advertising practices on Facebook and Instagram. The fine stems from a long legal battle over Meta's claim that users enter into an implicit contract agreeing to receive personalized ads when they accept the terms of service.

Comcast Xfinity service vehicle showing 2FA bypass

Cyber Security News

Widespread 2FA Bypass Attack Compromised Comcast Xfinity Accounts; Targets Coinbase, Gemini, Evernote, and Dropbox

January 9, 2023

A widespread 2FA bypass attack compromised Comcast Xfinity customer email accounts and attempted to take over their Coinbase and Gemini Wallets, Evernote and Dropbox accounts.

Hacker working on computer showing search engine ads used for malware and phishing

Cyber Security News

FBI: Hackers Are Using Search Engine Ads for Phishing and Malware Distribution

January 6, 2023

The FBI warned that hackers are using search engine ads for phishing and spreading malware to unsuspecting users by impersonating legitimate businesses and services.

Homepage of Microsoft Bing search engine showing cookie consent fine by CNIL

Data Protection News

French Regulator Hits Microsoft With €60 Million Fine Over Bing Cookie Consent

January 6, 2023

Microsoft faces a hefty fine over Bing cookie consent issues, and has additionally been given three months to get the system into compliance or it could face additional fines of €60,000 per day.

Hand holding package of Ring camera showing swatting attacks

Cyber Security News

Grand Jury Indicts Suspects Who Hijacked Ring Cameras to Livestream Swatting Attacks

January 5, 2023

Suspects face prison sentences after hacking email accounts to access Ring cameras, initiate and live-stream swatting attacks, and threaten and taunt responding police officers.

Data Protection News

Irish DPC Adds Late December Data Breach of 400 Million Twitter Users To Existing Probe of API Vulnerabilities

January 5, 2023

The Irish DPC probe centers on an API vulnerability that appears to have been exploited by multiple parties before being detected and remediated. The data breach first came to light in August and was acknowledged by Twitter.

1 … 120 121 122 123 124 … 314

News

Severe API Security Flaws Affect Millions of Vehicles from 16 Car Manufacturers, Including BMW, Mercedes and Toyota

Major Security Breach at Widely Used CI/CD Platform Prompts Developers To Rotate Secrets

Targeting of GitHub Repositories Continues as Slack Reports Security Breach, Stolen Source Code

Irish DPC Orders €390 Million Fine to Meta Over Targeted Advertising, Orders Implementation of Ability To Opt Out

Widespread 2FA Bypass Attack Compromised Comcast Xfinity Accounts; Targets Coinbase, Gemini, Evernote, and Dropbox

FBI: Hackers Are Using Search Engine Ads for Phishing and Malware Distribution

Grand Jury Indicts Suspects Who Hijacked Ring Cameras to Livestream Swatting Attacks

Irish DPC Adds Late December Data Breach of 400 Million Twitter Users To Existing Probe of API Vulnerabilities

Self-Propagating Malware ChainDrop Hits Over 400 NPM Packages in Massive Supply Chain Attack

Russian Hackers Exploit Hotel Wi-Fi Networks to Compromise Microsoft 365 Accounts

Claude’s Great Escape: Anthropic AI Models Join OpenAI Agents in Hacking Their Way Out of Sandboxes

Leak of Microsoft Meeting Documents Indicates Company Is Struggling to Keep Up With Security Vulnerabilities Uncovered by Mythos