Previously unknown data breach that became public knowledge on July 18 impacted approximately 4,000 accounts of individuals who attended the Roblox Developer Conference between 2017 and 2020. Data had remained within “niche cheating communities within Roblox.”
Over 200,000 OpenAI credentials are listed for sale on dark web marketplaces as interest in the generative AI chatbot peaks within the black hat community.
New rules voted in by the SEC last week require all publicly traded companies to report any cybersecurity breaches that could cause a material impact within four days. Timer doesn't start until the company determines that the breach could be material.
Average cost of data breach has once again hit a new record to $4.45 million, up 15.3% just from 2020. Yet only 51% of organizations that have suffered a breach plan to increase security spending.
NATO is investigating an alleged data theft by a hacktivist group SiegedSec. 845 MB of compressed data was leaked and found to contain unclassified information and 8,000 employee records from 31 nations.
After being pulled into an early July meeting with regulators over uncompetitive savings rates, some UK banks are now blaming data protection laws for consumer financial woes, claiming that rules forbid them from communicating better options to customers.
WhatsApp accounts could be deactivated simply by sending a request from any email address, so long as the attacker knew the associated phone number. Going forward, the account deactivation process now involves a follow-up message that requests verification of ownership of the associated phone number.
The damage tally from the massive MOVEit data breach continues to go up, as a US government contractor is reporting that 8 to 11 million records of health data have been exposed.
The lone strong biometric privacy law in the United States has struck again, this time taking $68.5 million from Instagram in a settlement for a class action first filed nearly three years ago.
A dozen Norwegian government ministries suffered a cyber attack exploiting a zero-day vulnerability in Ivanti Endpoint Manager Mobile (EPMM), the Norwegian National Security Authority (NSM) has disclosed.










