Apple's recent privacy campaign, which has essentially alienated the mobile advertising industry by crippling app tracking, is ostensibly about putting the consumer first. That may not be the company’s endgame.
The investigation into the August Twilio hack was recently concluded, and the company has found that the same attacker was responsible for a vishing attack that led to a smaller breach in June.
Seiko has confirmed that the July 2023 data breach resulted from a ransomware attack and leaked personal information. BlackCat/ALPHV ransomware gang, took responsibility for the attack and claimed to have exfiltrated 2 TB of data.
CISA notified 93 critical infrastructure organizations of the presence of a vulnerability that could lead to ransomware attacks, and plans to scale up the program and provide more warnings in the coming months.
Disney has settled accusations of violating federal children’s privacy rules preventing the collection of personal data of internet users under the age of 13, and the outcome builds on the terms of a prior 2019 FTC settlement involving Google that set new requirements for parental consent on YouTube.
The supply chain attack method leverages commonly-used dependency managers and private or non-existent dependencies to install malicious code and backdoors in internal applications.
Though the fine is not one of the largest issued by CNIL (or for general GDPR violations across the bloc), the case is noteworthy in that Discord is mostly being taken to task for not providing default or built-in security options rather than the fallout of a specific data breach.
Average cost of data breach has once again hit a new record to $4.45 million, up 15.3% just from 2020. Yet only 51% of organizations that have suffered a breach plan to increase security spending.
560 million Ticketmaster customers have had personal information and possibly payment card data exposed as part of a 1.3 TB theft by the ShinyHunters hacking group. The data breach appeared on the underground hacking forum BreachForums and was put up for ransom for half a million dollars.
REvil Ransomware operators deposited $1 million in Bitcoins on a Russian-speaking hacker forum to recruit hackers to work as affiliates earning 70-80% commission.
