Fortinet warned customers to immediately patch an authentication bypass critical vulnerability in FortiSwitch Manager, FortiGate, and FortiProxy which are being actively exploited in the wild.
Spain's statement on privacy concerns notes that the election tools gather the name, IP address, age and gender of Facebook and Instagram users, without an indication that this much personal data could be tied to what political content voters view and interact with.
State of Threat Hunting report says half of organizations suffered cyber attacks from repeat hackers after failing to resolve a previous compromise or defend against new attacks.
Johnson & Johnson’s IT service provider IBM has notified over 1 million Janssen CarePath customers of a data breach that leaked personal and medical information.
As with many of these recent attempts at a comprehensive federal privacy law, the bill has bipartisan support. But its fate is just as uncertain as any of its predecessors during a Congressional period in which data privacy has been kept in the backseat.
The Oracle Cloud attack is on pace to be one of 2025's biggest data breaches, possibly on the scale of the MOVEit breach if enough clients turn out to be impacted. However, Oracle has yet to publicly acknowledge it.
Law enforcement is able to issue keyword warrants for specific Google searches, potentially sweeping up the queries of hundreds or thousands of unrelated individuals, something obviously of concern as abortion laws change.
51 top CEOs from companies such as Amazon, IBM, Dell and JP Morgan Chase are pushing for new federal privacy legislation to establish a stable privacy policy environment.
Rogue Meta employees and contractors abused an internal tool called "Oops," which is primarily intended for in-house account recovery for employees and business partners. There were some cases of account hijacking for money.
Medical data leaks are among the fastest-growing segments of cyber crime, and for good reason. Health care systems tend to operate on outdated systems that have inadequate security elements.
