It has been discovered that the FBI quietly held on to the Kaseya decryption key for three weeks prior to making it available to the public in a bid to "disrupt" the attack.
A headline-grabbing international lawsuit has cast some doubt on the security of WhatsApp chats, with claims that parent company Meta is not providing true end-to-end encryption and retains the ability to access user conversations internally.
A data breach has leaked sensitive medical records of over 15 million French citizens after hackers breached a centralized health information management system used by various health facilities.
Some of the biggest names in Big Tech may be considering pulling out of Hong Kong. The reason is a recently-implemented "doxxing" privacy law developed in the wake of the 2019 pro-democracy protests.
Investment scams that involve grooming a target to invest in fraudulent endeavors took off like a rocket in 2022 and led all cyber crime, racking up $3.3 billion in losses on the year.
The sheer number of reports that cloud security teams deal with are becoming a serious problem, and "alert fatigue" is causing critical alerts to be missed at an alarming rate.
Privacy activism group noyb, which has made headlines for its high-profile cases against Facebook in the EU, has brought a corruption complaint against the Irish DPC over its handling of a case that dates back years.
Snake oil marketing tactics by cybersecurity vendors complicate organizations’ security stack and expand the attack surface, according to Egress cybersecurity hype report. 91% of decision-makers found it difficult to select cybersecurity vendors due to unclear marketing about their specific offerings.
App developers have in the past criticized Apple for not applying its series of new privacy rules to itself in an even manner. The company now faces an antitrust probe in Italy saying that the system was unfair to third party developers.
Testing of frontier AI agents by the UK’s AI Security Institute (AISI) found that "autonomous, unsanctioned action" took place on the open internet in about 1 out of 12 runs, with the agents cited as attempting to socially engineer humans into taking action and in at least one case attempting to hack an open-source project using a variety of different approaches.
