The Oracle Cloud attack is on pace to be one of 2025's biggest data breaches, possibly on the scale of the MOVEit breach if enough clients turn out to be impacted. However, Oracle has yet to publicly acknowledge it.
Oracle Health data breach stemming from a legacy server affected multiple hospitals and healthcare organizations, potentially leaking sensitive patient information.
The two data breaches are separate issues, but the common theme is criticism of Oracle's forthrightness about what exactly happened and what victims should expect going forward.
October is National Cyber Security Awareness Month and the time to focus on improving cyber security awareness training and boosting overall cyber security resilience.
73% of organizations intensified software supply chain security efforts to address risks posed by open source code used by 80% of the companies, a Synopsys/ESG study found.
At least one major credit card fraud gang has switched focus to building out fake dating and customer support websites since 2019, tricking payment processors into granting them access, and running charges against stolen credit cards.
Internet Society's Online Trust Alliance report shows only 30% of U.S. presidential candidates made the Honor Roll in audit which focused on three main areas – consumer privacy, website security and consumer protection.
While the Otter privacy policy makes clear that its AI notetaker service may indeed train on the voices of users while they are in meetings, the privacy lawsuit notes that guests without Otter accounts that can be invited to these meetings have not been similarly notified or opted in.
OpenAI did not comment on the Modal Labs incident specifically, but had previously released a statement indicating that the AI agent had ranged further afield than previously realized and had breached accounts at four other services in addition to the known Hugging Face incident.
After 12 years at the head of the Hamburg data protection commission, Johannes Caspar is stepping down. The privacy commissioner returns to academia disillusioned with the GDPR, calling it "broken" and lamenting infighting.
