China has announced new requirements for companies that might pose a "national security" threat, chiefly those that have large stockpiles of personal data that might wind up being transferred overseas.
Study of password managers finds security vulnerabilities in the way master passwords are stored. While password managers are still widely considered to be a best security practice, it's important to keep in mind that no system is perfect or without vulnerabilities.
In at least two of the attacks, those on Co-op and Marks and Spencer, the DragonForce group is confirmed to have used very similar social engineering approaches to convince the IT help desks to have an employee password reset.
The UN’s aviation agency, the International Civil Aviation Organization (ICAO), suffered a data breach that leaked the personal information of nearly 12,000 job applicants.
Recent security breach at password manager LastPass does not appear to be an immediate threat to the encrypted vaults that customers use to store their passwords, but the hackers may have made off with source code and proprietary information.
Italian supercar maker Ferrari disclosed a data breach impacting an unknown amount of customer data after a hacker demanded ransom, a request that the company turned down.
The District of Columbia Board of Elections data breach claimed by a Russian ransomware gang leaked the entire voter roll, including personal information and voting records.
CISA is warning high-risk chemical facilities of potential data theft after a threat actor breached the agency's Chemical Security Assessment Tool (CSAT) via Ivanti Connect security flaws.
Report from the Internet Society, in partnership with Consumers International, shows continuing concerns with IoT security and privacy, where 53% of consumers distrust connected devices to protect their privacy and handle information in a responsible manner.
The fourth draft data protection bill looks to be no less contentious, as it adds vital protections but also exempts the country's government from all of its terms and appears to give tech platforms a fairly free hand in sending citizen data overseas.
