Irish DPC has handed down a €390 million fine to Meta over its targeted advertising practices on Facebook and Instagram. The fine stems from a long legal battle over Meta's claim that users enter into an implicit contract agreeing to receive personalized ads when they accept the terms of service.
A widespread 2FA bypass attack compromised Comcast Xfinity customer email accounts and attempted to take over their Coinbase and Gemini Wallets, Evernote and Dropbox accounts.
The FBI warned that hackers are using search engine ads for phishing and spreading malware to unsuspecting users by impersonating legitimate businesses and services.
Microsoft faces a hefty fine over Bing cookie consent issues, and has additionally been given three months to get the system into compliance or it could face additional fines of €60,000 per day.
Suspects face prison sentences after hacking email accounts to access Ring cameras, initiate and live-stream swatting attacks, and threaten and taunt responding police officers.
The Irish DPC probe centers on an API vulnerability that appears to have been exploited by multiple parties before being detected and remediated. The data breach first came to light in August and was acknowledged by Twitter.
Attacks against healthcare institutions have become more prevalent. Driving this are several factors, including the dramatic drop in the value of stolen credit card data and the relative ease with which attackers can breach healthcare institutions.
Up to 87 million Facebook accounts had user data inappropriately accessed during the Cambridge Analytica scandal, in which a weakness in the platform's API was used to harvest protected profile and activity information.
The FTC has assessed Fortnite maker Epic a total of $520 million in penalties, roughly divided between COPPA violations and the use of dark patterns to trick players into making in-game purchases.
Popular password manager LastPass has confirmed that a previously reported November security incident was a data breach that resulted in the theft of customer data, including encrypted password vaults.










