A to Z

News

Latest news on data protection, privacy and cybersecurity regulatory developments, data breaches and enforcement actions happening around the world.

Businessman working with laptop with biometric authentication showing Windows Hello vulnerability

Cyber Security News

Windows Hello Vulnerability Allows Attackers To Bypass Biometric Authentication Using Spoofed Images

August 2, 2021

Researcher discovered a Microsoft Windows Hello vulnerability allowing an attacker to bypass biometric authentication using images recreated from the target's face.

Cyber Security News

Windows Support Scam Targets Users in a Google Ads Malvertising Campaign

August 3, 2022

Malwarebytes discovered a malvertising campaign targeting top keywords and users' search behavior to display malicious Google Ads and redirecting to Windows support scam websites.

Man face blended with binary code digits showing major international companies being attacked by Winnti malware

Cyber Security News

Winnti Malware Rampages Through Major International Companies

August 7, 2019

Winnti malware makes a “comeback”, victimizing major international firms including Bayer, BASF, Siemens and others. The attackers are particularly interested in industrial secret and tracking movements of specific people.

Facial recognition technology applied to people walking on street showing the enhanced facial recognition technology protections in the new proposed Washington Privacy Act

Data Protection News

With Enhanced Facial Recognition Technology Protections, the New Washington Privacy Act Would Be the Strongest U.S. Privacy Bill

February 27, 2020

New proposed Washington Privacy Act will have provisions on facial recognition technology that require explicit opt-in consent for companies to collect and use biometric data.

Man working on laptop showing data breach of file transfer

Cyber Security News

WK Kellogg Confirms Data Breach from Cleo Managed File Transfer System Attributed to Clop Ransomware

April 16, 2025

U.S. food giant WK Kellogg Co. has disclosed a data breach that affected Cleo, a third-party managed file transfer system that allowed a threat actor to access sensitive information.

Hand holding a phone with Wordle game running showing ad tracking and data sharing

Data Privacy News

Wordle Remains “Free” After NYT Acquisition, but Now Comes Bundled With Tons of Ad Tracking

March 7, 2022

The original version of Wordle, hosted by creator Josh Wardle on a self-hosted website, did not have any advertising or connection to ad tracking networks.

Hacker hands typing on keyboard showing CRM system data breach

Cyber Security News

Workday’s Client Information Leaked in Apparent Salesforce CRM System Data Breach

August 21, 2025

Human capital management (HCM) software giant Workday says that a social engineering data breach on a third-party CRM system has impacted its clients’ business information.

Man working from home and sitting in front of laptop facing cybersecurity challenges

Cyber Security News

Working From Home Brings New Cybersecurity Challenges as Workers Commonly Bypass Inconvenient Measures

September 17, 2021

The mass shift to working from home precipitated by the Covid-19 pandemic created massive security challenges. A full 30% of remote workers under the age of 24 say that they circumvent or ignore security policies when they get in the way of getting work done.

hacker with screen showing cybercrime gangs retirement

Cyber Security News

World’s Biggest Cybercrime Gangs Change Mind About Retirement, Form Supergroup Instead

November 11, 2025

Scattered Spider, ShinyHunters, and LAPSUS$ are the three groups involved, and have collectively been the most active of the major cybercrime gangs over roughly the past year. The groups all had prior ties via "The Com," a broader collection of cyber criminals that loosely affiliate and come together for singular projects in a fluid way.

Polygons forming a human brain showing AI law passed in EU

Cyber Security News

World’s First Comprehensive AI Law Passes EU Parliament, But Many Terms Will Not Be in Force Immediately

March 15, 2024

Final adoption of the EU AI law is expected to be a formality at this point, but is not slated to take place until April 2024. From there, individual components of the regulation go into effect anywhere from 6 to 36 months from that date.

1 … 313 314 315 316 317 318

News

Windows Hello Vulnerability Allows Attackers To Bypass Biometric Authentication Using Spoofed Images

Windows Support Scam Targets Users in a Google Ads Malvertising Campaign

Winnti Malware Rampages Through Major International Companies

With Enhanced Facial Recognition Technology Protections, the New Washington Privacy Act Would Be the Strongest U.S. Privacy Bill

WK Kellogg Confirms Data Breach from Cleo Managed File Transfer System Attributed to Clop Ransomware

Workday’s Client Information Leaked in Apparent Salesforce CRM System Data Breach

Working From Home Brings New Cybersecurity Challenges as Workers Commonly Bypass Inconvenient Measures

World’s Biggest Cybercrime Gangs Change Mind About Retirement, Form Supergroup Instead

World’s First Comprehensive AI Law Passes EU Parliament, But Many Terms Will Not Be in Force Immediately

Security flaw in Microsoft’s Analytics Platform Titan Exposes 17 Trillion Records

Meta Muse AI Assistant’s Zero-Day Vulnerability Could Enable Attackers to Inject Malware

New Disclosure of “Meddling” OpenAI Agents Includes Attacks on UN and US Government Websites

ShinyHunters Hacks the FBI in a Security Breach Exposing Personal Information of 38,000 People