The Open Worldwide Application Security Project (OWASP) suffered a data breach stemming from a server misconfiguration that leaked members' personal information.
The CSRB found that the security breach was preventable, and that a "a corporate culture that deprioritized enterprise security investments and rigorous risk management" ended up leaving open doors for the Chinese hackers.
Online shopping platform Pandabuy confirms a data breach that impacted over 1.3 million customers after an apparent cover-up when data surfaced on BreachForums.
A new development in an old data breach has seen 73 million AT&T customer passcodes published to an underground forum. The data leak now appears to be as bad as originally advertised with customer contact information attached to weakly encrypted passcodes that are easily deciphered.
The settlement would impact all Incognito Mode data collected from June 1, 2016 to before the start of 2024. Google says that it would delete most of this browsing data, but in some cases would "de-identify" records instead.
The Inc Ransom cyber gang has published part of NHS Scotland's stolen data and threatened to release the entire trove of 3 terabytes online unless a ransom is paid.
Two of the biggest components of the new AI rules are the implementation of mandatory AI safeguards by federal agencies, such as those used in healthcare and financial benefit systems, and expanded transparency requirements.
State-sponsored Russian hackers are targeting German political parties with fake dinner invites to deploy WINELOADER backdoors, establish persistence, and exfiltrate data.
TikTok has already faced several actions involving the privacy and security of children, who have always been one of the biggest demographic groups on the platform. A new FTC investigation has raised the issue again.
The DOJ argues that consumers are being shortchanged on privacy and security as a result of a monopoly, even though these are two of Apple's primary marketing points. One specific criticism is that the company has intentionally stifled cross-platform messaging.
