Latest

News

Latest news on data protection, privacy and cybersecurity regulatory developments, data breaches and enforcement actions happening around the world.

UK flag on a black keyboard showing cybersecurity laws for MSPs

Cyber Security News

New Cybersecurity Laws Coming for UK MSPs

December 8, 2022

UK MSPs will be brought under the same cybersecurity laws that govern essential services, such as critical infrastructure and health care. The move stems in large part from an increasing focus on MSPs by the most advanced nation-state security actors.

Security lock with a hole on computer circuit board showing Log4Shell vulnerability

Cyber Security News

Despite a Year of Warnings and Patching, Nearly 3 Out of 4 Organizations Still Vulnerable to Log4Shell

December 8, 2022

The battle against Log4Shell is proceeding very slowly due to a confluence of factors. It remains buried in a number of assets, particularly legacy systems that are tougher to address. But it also continues to affect organizations via new devices.

Phone with TikTok screen in the hands of a girl showing TikTok ban due to national security

Data Privacy News

South Dakota Enacts TikTok Ban for Government Employees Over National Security Concerns

December 7, 2022

The South Dakota TikTok ban applies to the devices of government agencies, employees and contractors, put forward in the interest of protecting state and national security.

Google Chrome application icon on mobile phone screen showing spyware vendor linked to zero-day exploitation framework

Cyber Security News

“Commercial Spyware” Vendor Linked to Exploitation Framework Using Zero-Days in Chrome, Firefox and Windows

December 7, 2022

A spyware vendor in Spain has been linked to a zero-day exploitation framework that impacted Windows, as well as the Chrome and Firefox browsers, from 2018 to 2021. Google researchers present markers found in its code including a script that is signed by the company.

LastPass password manager icon in mobile phone showing security breach of customer data

Cyber Security News

Second LastPass Security Breach in 2022 Exposed Customer Data, Company Admits

December 6, 2022

Password manager LastPass notified its customers of a second security breach in 2022, with the threat actor accessing customer data stored on a shared cloud service.

Computer keyboard and handcuffs showing arrests of cybercriminals by Interpol

Cyber Security News

INTERPOL Arrested Almost 1,000 Cybercriminals and Recovered $130 Million in Global Operation

December 6, 2022

INTERPOL’s arrested nearly 1,000 cybercriminals, recovered $130 million from 2,800 accounts linked to proceeds of crime, and closed 1,600 cases in Operation HAECHI III.

Cyber Security News

Nearly 500 Million WhatsApp Records Allegedly Stolen in Data Leak, Offered on Dark Web for a Few Thousand Dollars

December 5, 2022

Threat actor is offering the alleged WhatsApp data leak for a relatively low cost, dividing it up by country of origin and offering each package for prices in the range of several thousand dollars via a dark web forum.

EU Flags outside EU Parliament showing DDoS cyber attack

Cyber Security News

Killnet DDoS Group Executes a Cyber Attack on the EU Parliament Website After Resolution Against Russia

December 5, 2022

Pro-Russian Killnet DDoS group took responsibility for the cyber attack that shut down the EU parliament website after members passed a resolution designating Russia as a state sponsor of terrorism.

Cyber Security News

Data Leak Exposes Private Profile Information of 5.4 Million Twitter Users, Dumped for Free on Underground Forum

December 2, 2022

Vulnerability in Twitter's API in 2021 caused a data leak that exposed private user profile information of at least 5.4 million users. The information is now available for free via a dark web forum.

Cyber Security News

Document Leak Reveals Meta Employees Took Bribes To Use Account Recovery Tool for Expedited Service, Account Hijacking

December 2, 2022

Rogue Meta employees and contractors abused an internal tool called "Oops," which is primarily intended for in-house account recovery for employees and business partners. There were some cases of account hijacking for money.

1 … 124 125 126 127 128 … 314

News

New Cybersecurity Laws Coming for UK MSPs

Despite a Year of Warnings and Patching, Nearly 3 Out of 4 Organizations Still Vulnerable to Log4Shell

South Dakota Enacts TikTok Ban for Government Employees Over National Security Concerns

“Commercial Spyware” Vendor Linked to Exploitation Framework Using Zero-Days in Chrome, Firefox and Windows

Second LastPass Security Breach in 2022 Exposed Customer Data, Company Admits

INTERPOL Arrested Almost 1,000 Cybercriminals and Recovered $130 Million in Global Operation

Nearly 500 Million WhatsApp Records Allegedly Stolen in Data Leak, Offered on Dark Web for a Few Thousand Dollars

Killnet DDoS Group Executes a Cyber Attack on the EU Parliament Website After Resolution Against Russia

Data Leak Exposes Private Profile Information of 5.4 Million Twitter Users, Dumped for Free on Underground Forum

Document Leak Reveals Meta Employees Took Bribes To Use Account Recovery Tool for Expedited Service, Account Hijacking

Self-Propagating Malware ChainDrop Hits Over 400 NPM Packages in Massive Supply Chain Attack

Russian Hackers Exploit Hotel Wi-Fi Networks to Compromise Microsoft 365 Accounts

Claude’s Great Escape: Anthropic AI Models Join OpenAI Agents in Hacking Their Way Out of Sandboxes

Leak of Microsoft Meeting Documents Indicates Company Is Struggling to Keep Up With Security Vulnerabilities Uncovered by Mythos