A to Z

News

Latest news on data protection, privacy and cybersecurity regulatory developments, data breaches and enforcement actions happening around the world.

Trainer giving training to soldiers showing third party breach affecting UK armed forces

Cyber Security News

Chinese State-Backed Hackers Suspected in Third Party Breach Impacting UK Armed Forces

May 10, 2024

For the most part the exposure appears to have been limited to names and bank details for both active members of the UK armed forces and veterans. The UK government has named SSCL, a business services provider, as the source of the third party breach.

Apple flagship store in Hangzhou showing Chinese tech companies circumventing Apple's privacy rules

Data Privacy News

Chinese Tech Companies Look To Bypass Apple Privacy Rules With an Independent Tracking Number

March 24, 2021

Though circumventing Apple’s new privacy rules with fingerprinting techniques can get one banned from the app store, major Chinese tech companies appear to be discussing just that out in the open.

Hacker stealing data from laptop showing data breach at auction house

Cyber Security News

Christie’s Auction House Confirms Data Breach after Ransomware Group Threatens to Leak Stolen Info

June 4, 2024

Auction house Christie’s is currently notifying customers of a significant data breach after the RansomHub ransomware group threatened to leak the stolen sensitive personal information.

Silhouette of a spy sitting in front of a monitor showing mass surveillance and data collection

Data Privacy News

CIA “Deep Dive” Studies Demonstrate Mass Surveillance, Say Senators; Bulk Domestic Data Collection Conducted for Years Without Oversight

February 21, 2022

New insight into a domestic data collection program run by the CIA indicates even more mass surveillance may have taken place, and some senators are demanding answers.

Man holding mobile phone in front of laptop with login screen showing bad cybersecurity practices with single factor authentication

Cyber Security News

CISA Adds Single-Factor Authentication to the List of Bad Cybersecurity Practices

September 13, 2021

CISA added single-factor authentication to bad cybersecurity practices, adding that it was extremely risky for remote and administrative access to critical infrastructure.

Military tactical helmet with American flag showing APT groups hacked defense organization

Cyber Security News

CISA Alert: APT Groups Had “Long-Term Access” to a Defense Organization, Exfiltrated Sensitive Data

October 13, 2022

The FBI, CISA, and NSA issued a joint cybersecurity advisory about multiple APT groups that comprised a defense organization and exfiltrated sensitive data over a significant period.

Hacker using laptop with padlock network showing Lockbit ransomware

Cyber Security News

CISA Alert: LockBit Ransomware Extorted $91 Million from US Organizations

June 23, 2023

A joint advisory detailing LockBit ransomware’s tactics and mitigations disclosed that the cybercrime gang extorted $91 million from US companies since 2020 after 1,700 attacks.

Hacker exploit vulnerability Log4Shell on VMware servers

Cyber Security News

CISA and Coast Guard Cyber Command Warn About Hackers Leveraging Log4Shell Vulnerability on VMware Servers

July 1, 2022

Threat actors exploited Log4Shell vulnerability on unpatched VMware servers to gain access, move laterally, deploy malware, and exfiltrate sensitive information.

China flag depicted on screen with the program code showing Chinese hackers exploiting Microsoft Exchange mail server

Cyber Security News

CISA and Microsoft Warn of Chinese Hackers Exploiting Several Microsoft Exchange Mail Server Zero-Day Vulnerabilities

March 11, 2021

Microsoft says state-sponsored Chinese hackers exploited four Microsoft Exchange mail server zero-day vulnerabilities. CISA warned of potential widespread exploitation.

Digital locks showing vulnerability disclosure

Cyber Security News

CISA and NSA Release “Best Practices” Guidance for Coordinated Vulnerability Disclosure Programs

July 21, 2026

Recent guidance establishes best practices for development of coordinated vulnerability disclosure (CVD) programs. This comes as both public and private organizations are grappling with the prospect of near-term "machine speed" discovery of vulnerabilities by attackers wielding AI tools, and looking at potential major overhauls to their remediation and reporting processes.

1 … 50 51 52 53 54 … 314

News

Chinese State-Backed Hackers Suspected in Third Party Breach Impacting UK Armed Forces

Chinese Tech Companies Look To Bypass Apple Privacy Rules With an Independent Tracking Number

Christie’s Auction House Confirms Data Breach after Ransomware Group Threatens to Leak Stolen Info

CIA “Deep Dive” Studies Demonstrate Mass Surveillance, Say Senators; Bulk Domestic Data Collection Conducted for Years Without Oversight

CISA Adds Single-Factor Authentication to the List of Bad Cybersecurity Practices

CISA Alert: APT Groups Had “Long-Term Access” to a Defense Organization, Exfiltrated Sensitive Data

CISA Alert: LockBit Ransomware Extorted $91 Million from US Organizations

CISA and Coast Guard Cyber Command Warn About Hackers Leveraging Log4Shell Vulnerability on VMware Servers

CISA and Microsoft Warn of Chinese Hackers Exploiting Several Microsoft Exchange Mail Server Zero-Day Vulnerabilities

CISA and NSA Release “Best Practices” Guidance for Coordinated Vulnerability Disclosure Programs

Self-Propagating Malware ChainDrop Hits Over 400 NPM Packages in Massive Supply Chain Attack

Russian Hackers Exploit Hotel Wi-Fi Networks to Compromise Microsoft 365 Accounts

Claude’s Great Escape: Anthropic AI Models Join OpenAI Agents in Hacking Their Way Out of Sandboxes

Leak of Microsoft Meeting Documents Indicates Company Is Struggling to Keep Up With Security Vulnerabilities Uncovered by Mythos