Oldest

News

Latest news on data protection, privacy and cybersecurity regulatory developments, data breaches and enforcement actions happening around the world.

Alert sign showing cyber extortion on Change Healthcare

Cyber Security News

Second Cyber Extortion Attack on Change Healthcare Follows Rumored $22 Million Payment, May Involve Former BlackCat/ALPHV Hackers

April 12, 2024

RansomHub has claimed credit for the new cyber extortion attempt on Change Healthcare. The group says that it stole 4 TB of data that includes sensitive personal information, including financial information and medical records belonging to US military personnel.

Hacker on the phone showing audio deepfake and voice phishing

Cyber Security News

LastPass Reports Voice Phishing Attempt on Employee Using Audio Deepfake of Company CEO

April 16, 2024

A blogpost from LastPass Labs warns of an attempted voice phishing attack on an employee that made use of an audio deepfake of company CEO Karim Toubba. The attacker peppered the LastPass employee with a series of calls, text messages, though the employee recognized it as a scam attempt and no damage was done.

Microsoft office building showing cloud server leaked employee credentials

Cyber Security News

Microsoft’s Unsecured Azure Cloud Server Exposed Internal Employee Credentials for a Month

April 16, 2024

Microsoft has experienced another security lapse after inadvertently exposing employee credentials for accessing internal databases and systems via an unsecured Azure cloud server, which was accessible over the public Internet without a password for nearly a month after discovery.

Man typing on a keyboard laptop showing CISA alert for password compromise

Cyber Security News

Sisense Password Compromise Triggers a CISA Alert Requiring Credentials Reset

April 17, 2024

A password compromise affecting business intelligence and analytics firm Sisense has triggered a CISA alert urging customers to reset their account login credentials and secrets.

Man typing on keyboard and holding smartphone showing third party breach impact MFA

Cyber Security News

Third Party Breach at Cisco Exposes MFA Logs for Some Customers

April 18, 2024

Cisco Duo customers may have had VoIP and SMS MFA logs exposed to an attacker in early April. Third party breach is the result of one of the provider's employees being phished. The attackers then seemed to target the MFA logs of specific clients of interest.

Hammer on US flag showing federal privacy law

Cyber Security News

New Attempt at Federal Privacy Law Would Complement State Laws, Add Private Right of Action

April 19, 2024

As with many of these recent attempts at a comprehensive federal privacy law, the bill has bipartisan support. But its fate is just as uncertain as any of its predecessors during a Congressional period in which data privacy has been kept in the backseat.

Hand typing on keyboard showing third party data breach

Cyber Security News

A Home Depot Third-Party Data Breach Leaks the Personal Information of 10,000 Employees

April 19, 2024

Home improvement retail chain Home Depot suffered a third-party data breach when a trusted vendor leaked a sample of 10,000 employee records during software testing.

TV remote on TV background showing credential stuffing attacks and 2FA

Cyber Security News

Roku Makes 2FA Mandatory for Customers After String of Credential Stuffing Attacks

April 22, 2024

After weathering two waves of credential stuffing attacks thus far in 2024, the second of which involved over half a million compromised accounts, Roku is now requiring that customers set up a 2FA method.

Control panel showing Russian hackers attack on water treatment plant

Cyber Security News

State-Sponsored Russian Hackers Linked to Breach of Texas Water Treatment Plant

April 23, 2024

Leading cybersecurity firm Mandiant believes that a notorious group of Russian hackers is behind a recent rash of attacks on water utilities in several countries, including the United States. On January 18 the group was able to induce a tank overflow at a Texas water treatment plant, and has made similar incursions in France and Poland.

Alert symbol showing cyber attack on French municipalities

Cyber Security News

A Massive Cyber Attack Disrupts Operations Across Numerous French Municipalities

April 23, 2024

A “large-scale cyber attack” has taken down local government services in several French municipalities since the night of Tuesday, April 9. Local media reported that municipal workers who reported to work on Wednesday were instructed not to switch on their computers or use other devices.

1 … 244 245 246 247 248 … 313

News

Second Cyber Extortion Attack on Change Healthcare Follows Rumored $22 Million Payment, May Involve Former BlackCat/ALPHV Hackers

LastPass Reports Voice Phishing Attempt on Employee Using Audio Deepfake of Company CEO

Sisense Password Compromise Triggers a CISA Alert Requiring Credentials Reset

Third Party Breach at Cisco Exposes MFA Logs for Some Customers

New Attempt at Federal Privacy Law Would Complement State Laws, Add Private Right of Action

A Home Depot Third-Party Data Breach Leaks the Personal Information of 10,000 Employees

Roku Makes 2FA Mandatory for Customers After String of Credential Stuffing Attacks

State-Sponsored Russian Hackers Linked to Breach of Texas Water Treatment Plant

A Massive Cyber Attack Disrupts Operations Across Numerous French Municipalities

Claude’s Great Escape: Anthropic AI Models Join OpenAI Agents in Hacking Their Way Out of Sandboxes

Leak of Microsoft Meeting Documents Indicates Company Is Struggling to Keep Up With Security Vulnerabilities Uncovered by Mythos

Cyber Attack by Suspected Iranian Hackers Hits 36 Minnesota Water Utilities, Causing Outages

Feds Warn About Iranian Hackers Expanding the List of Targeted PLCs to Compromise Critical Infrastructure