A Microsoft whistleblower says that the Active Directory security flaw that led to the SolarWinds breach was ignored because, at the time, the company was preparing a major bid for the government's cloud computing business.
The South Korean government is set to implement mandatory KYC verification for cryptocurrency exchanges in March, but the new requirements may be in violation of existing privacy laws.
EU’s lead privacy regulator, Irish DPC, is announcing their GDPR decision if Twitter is in violation of article 33 after more than one year of investigation on the data breach incidents.
While only 14,500 accounts were compromised in the relatively small credential stuffing attack that successfully hit the Canadian government, highly sensitive financial and personal information were exposed.
The Trump administration has proposed a $707 million cut to CISA’s operating budget, citing waste, weaponization, and redundancy concerns, as nation-state cyber threats increase.
Privacy advocates went into overdrive, challenging the fairness and adequacy of the Facebook settlement after FTC announced that the social media giant is off the hook with a $5 billion penalty.
Europol, Latvian, and Lithuanian police arrested 108 suspects involved in an international investment scam operation in 3 call centers located in Riga and Vilnius. Operation makes €3 million in profit per month.
A recent confirmed T-Mobile hack has been attributed to Salt Typhoon, the Chinese cyber espionage team that also breached Verizon and AT&T earlier in the year. That means the hackers were able to penetrate all three of the country's major mobile carriers in 2024.
New Zero-Day RCE Vulnerability in Spring Java Framework; Could “Spring4Shell” Be the Next Log4Shell?
A new zero-day remote code execution (RCE) vulnerability in the Spring Java Framework is drawing comparisons to Log4Shell. It can be exploited by simply sending a crafted HTTP request to a target system.
France will be the first in Europe to roll out a nationwide facial recognition ID program. Citizens will have a single digital identity tied to their face instead of using different user names and passwords.
