A complaint in Poland alleges GDPR violations by ChatGPT in the areas of lawful basis for data processing, data access, fairness, transparency and personal privacy.
In a recent Pew research study where thousands of Americans were asked 10 questions related to digital security and privacy, majority could not even answer half of the questions correctly.
The Trump administration had proposed banning TikTok as a national security threat. Cybersecurity researchers from the University of Toronto have come to a different conclusion, though with caveats.
More stringent data collection rules went into effect in China at the beginning of May. The government continued to show that it is serious about its regulatory stance by sweeping up 33 mobile apps.
Talos confirms that at least one known Cisco bug, CVE-2018-0171, was likely to have been actively exploited by Salt Typhoon. But the researchers say that the primary approach was to target legitimate existing credentials, likely through a variety of methods.
More than half of organizations experienced a third-party data breach attributed to external privileged access, and subsequent lack of control, auditing, and monitoring.
Popular domain registrar and web hosting company GoDaddy was slapped with an FTC order mandating a robust information security program for allegedly failing to stop data breaches and misleading customers about its cybersecurity practices.
Russian hackers stole 50 million passwords from popular online services such as PayPal, Amazon, Roblox, Steam and crypto wallets by deploying infostealer malware on users’ devices.
Germany set a new precedent with an antitrust ruling against Facebook, forcing the company to make major changes to their data collection practices – German users are to be given a greater degree of notice and choice in how their data is used.
Documents leaked to Vice's Motherboard magazine indicate that, between 2018 and 2020, Google fired at least 80 employees for data misuse. At least a few involve employees accessing user accounts and manipulating or deleting the data of other employees.
