Toyota discovered a second cloud misconfiguration data leak that exposed 260,000 domestic and international customers' in-vehicle data and personal information for over eight years.
Controversial anti-doxxing law that has been in the works since the 2019 protests has emerged from Hong Kong's legislature, with language that appears to confirm the fears of critics.
Proposed EARN IT Act is viewed as an anti-encryption bill as the government commission tasked to create a "best practices" list is composed of representatives with an interest in encryption backdoors.
Popular remote monitoring and management software firm AnyDesk has suffered a cyber attack that compromised its production systems and leaked source code and code signing certificates.
While API security remains a major concern for most organizations, most were unprepared, with only 11% having a concrete API security strategy to detect and stop API attacks.
Report found that API security was a major concern for businesses as malicious traffic grew triple that of legitimate sources and causing delays in application rollout.
API Vulnerabilities and Bot Attacks Cost Businesses $187 Billion, Increased Adoption Worsens Problem
API vulnerabilities and bot attacks cost businesses $187 billion annually, and the problem is worsening with rapid adoption, underscoring the need for investment in API security and bot management.
A API vulnerability documented by independent security blogger "bobdahacker" created a path to replacing the FIFA World Cup matches playing out on televisions and devices all over the world with any video of the attacker's choosing.
Apparel giant VF Corporation has disclosed in a regulatory filing that the December ransomware attack leaked the personal information of over 35 million customers.
While the fine will hardly break either of the two tech titans, the ruling could provide a precedent on data collection that could prove much more costly in the future if applied to everything else made available on app stores.
