The current wave of action against mobile apps stems from an early November promise from the CAC to "clean up" those that are committing privacy violations or facilitating criminal activity.
A hacker on a Russian-speaking forum is selling hundreds of business executives' email and password combinations for Office 365 and Microsoft accounts for use in BEC scams.
2020 has demonstrated several times over that no target is beneath the world's cyber criminals; this time it's a coordinated phishing attack on the global vaccine supply chain.
The court will determine how the nearly 35-year-old CFAA is interpreted. The worst possible interpretation could put employees and contractors at the mercy of the terms of service of systems and software.
The world's biggest domain registrar, GoDaddy, has suffered another blow to its reputation for security after losing control of the addresses of several well-known cryptocurrency services.
The Information Society Forum (ISF) believes that human-centered security is the way forward. Security awareness thus must stay in tune with expected patterns of behavior and psychological realities.
Researchers from Palo Alto Networks discovered data leak from Baidu and other apps that could allow user tracking across devices for a lifetime. Over 6 million users in the United States were affected.
Hackers published a list of 50,000 Fortinet VPN credentials stolen from vulnerable devices. A second data leak dumped sslvpn_websession files for every IP initially compromised.
A wildlife park in Hangzhou has landed in some legal trouble after implementing a facial recognition system. A court agreed the sudden switch to this system constitutes privacy infringement.
Hackers compromised more than 300,000 Spotify accounts in a credential stuffing attack exploiting a third-party database containing 380 million credentials stolen from other breaches.
