A third-party data breach at the online DIY platform ManoMano has affected nearly 38 million customers after attackers breached its subcontractor’s Zendesk instance.
Microsoft Power Apps appears to list all data types as public unless the default settings are changed. The data leak exposed several coronavirus tracing and vaccination portals, as well as at least one job applicant database that contained social security numbers.
Stellar Cyber, innovator of Open XDR onboarded cybersecurity star Barmak Meftah in a new, exciting advisory role.
Cloud-based data management subsidiary of Toyota exposed the information of 2.15 million customers in a decade-long data leak. The Toyota Connected service reminds owners to service their vehicles and links the car to entertainment services, and can assist during emergencies by calling for help and locating a car that’s been stolen.
How do security measures stack up against the total cost of data breaches? A new Ponemon study offers some useful data on the savings from security automation and incident response.
The Biden administration is examining the possible national security risks of having thousands of Chinese smart cars on US roadways. One possibility is that all of these cars could be remotely disabled at once, but there are also data privacy concerns.
Canon services suffered an outage caused by Maze ransomware attack affecting internal applications, email servers, Microsoft Teams, and the U.S. website for six days.
Washington is the latest state in which Google has settled a location tracking lawsuit, adding to a list that has cost it a little over half a billion dollars to date. Lawsuits date back to a 2018 probe that found Google apps and services were continuing to track and log data even after users had changed privacy settings.
The campaign was conducted by malicious hackers who sold the stolen credentials off, with much of the info being put to use in spam and phishing campaigns. The attack simply made use of open-source tools to scan IP ranges for potentially vulnerable Git config files.
Australia’s Privacy Act 1988 has been under review since 2020 as lawmakers seek to modernize it. Google and Meta have weighed in with arguments for the benefits of ad-supported apps and cloud services.
