In spite of many, many public warnings, users of Windows and Microsoft's various cloud-based services appear to still be committing the cyber sin of password reuse.
North Carolina and Florida have banned ransomware payments for government agencies. Pennsylvania, New York, Texas, Arizona and New Jersey have also had bills of this nature recently come up for consideration.
South Korea is placing public health concerns over patient privacy in the growing COVID-19 outbreak by publicly publishing location details about patients’ movements.
A software security flaw in PayPal’s loan app leaked customer data for 6 months, forcing the payment giant to issue refunds after unauthorized transactions occurred in some affected accounts.
Sites such as Paypal and Yahoo were blocked in Indonesia due to new internet regulations that require registering with the national government and granting it broad access to user data.
New Citizens Lab report reveals that the government of Bahrain has used the Pegasus iPhone spyware to track at least nine activists since June 2020. Two zero-days used in zero click iPhone exploit targeting iMessage.
Extensive campaign involving the Pegasus spyware in El Salvador targeted at least 35 journalists and political activists from June 2020 to November 2021, with most of the country's major media outlets affected.
The narrative around NSO Group's Pegasus spyware thus far has been one of authoritarian governments using it to suppress internal criticism. The story may be shifting to one of international espionage with US State Department iPhones hacked by it.
NSO Group was found to not only have exceeded its legal level of access to the WhatsApp servers and broken the terms of service with its Pegasus spyware, but to also have violated the US Computer Fraud and Abuse Act as well as California state law.
Pegasus spyware was used to track journalists, lawyers and activists in Jordan from 2019 to late 2021. Some specific incidents occurred on iPhones after Apple had sued NSO Group and removed exploits.
