Study examined 640 of the most popular shopping apps currently available via the Google Play Store. About two-thirds of these make use of ad libraries, and on average these apps connect with 1.8 ad networks that can share phone permissions.
The Uber data breach resulted in the theft of a variety of internal company information, and stemmed from a third-party vendor. The thieves also got away with source code and employee personal information.
Several New Zealand government agencies were impacted by a ransomware attack on Mercury IT, a 25-employee firm that serves dozens of public and private organizations in the country. New Zealand’s Ministry of Justice and Health New Zealand (Te Whatu Ora) have confirmed being impacted by the cyber incident.
Ransomware attack on the cloud computing company Rackspace caused email outages for thousands of customers forcing it to transfer customers from its Hosted Exchange service to Microsoft 365.
Some users have found that asking ChatGPT to exploit smart contracts actually returns viable vulnerabilities. Experiments are beginning to reveal that AI chatbots may shake up the cybersecurity world.
XIoT devices are laden with security risks. 68% have a known vulnerability with a CVSS score of at least 8 and 18% are carrying a vulnerability of at least 9. And the average organization has three to five XIoT devices per employee.
Legislation that would institute a TikTok ban on government devices has cleared the first major hurdle in Congress, passing the Senate with unanimous consent. The "No TikTok on Government Devices Act" was authored by Senator Josh Hawley (R-MO) but had strong bipartisan support.
The US proposal for a new EU-US data transfer framework that meets GDPR standards was drawn up in early 2022. The EDPB will now scrutinize the arrangement before passing it on to the EU member states and the European Parliament for final decisions.
The rapporteur for France's lead data protection agency (CNIL) is recommending a six million euro fine for Apple’s breach of the EU’s ePrivacy directive due to privacy violations. Apple had granted exceptions to the ATT framework for a variety of its own pre-installed apps.
The FBI and Europol seized 48 internet domains for DDoS-for-hire services in a multi-prong operation, charged six administrators with cybercrimes, and obtained customer databases.
