CISA added single-factor authentication to bad cybersecurity practices, adding that it was extremely risky for remote and administrative access to critical infrastructure.
A threat actor sold for an undisclosed amount a toolkit to conceal and execute malicious code without detection on most graphics cards, including AMD, Nvidia, and Intel.
Australia's OAIC has called for law enforcement to be blocked from accessing Covid contact tracing data to track suspects via their check-in histories, saying that it threatens to undermine public participation in the program.
The 2021 OT/ICS Cybersecurity Report confirms that threats to industrial operations are rising both in number and severity and while monitoring is up, but 48% say that they cannot be sure that they have not been breached.
Outgoing UK Information Commissioner Elizabeth Denham has suggested a shift in focus from individual cookie popups at each website to regulation of browsers and devices as the source of expressing user tracking preferences.
Report found that 43% of IT security professionals surveyed believe they are paying too much for their current SIEM solution relative to the system's capabilities and the value it brings the organization.
Hackers could exploit ProxyToken authentication bypass vulnerability to steal victims’ emails and personally identifiable information from vulnerable Microsoft Exchange servers.
The Irish DPC has taken some heat for perceived softness in issuing GDPR fines to Big Tech. A $267 million fine issued to WhatsApp is the first substantial amount that the Irish regulator has assessed, but it comes amidst accusations and criticism.
A new system of warrants grants Australian police broad powers to infiltrate and even modify the online accounts of suspected cybercriminals, in the name of combating dark web transactions and anonymization.
Google is making massive annual payments to Apple to be placed as the default search engine on its devices. Research indicates a price of $15 billion for the privilege in 2021.