Latest

News

Latest news on data protection, privacy and cybersecurity regulatory developments, data breaches and enforcement actions happening around the world.

Airplane at dusk departure with control tower showing ransomware group data breach

Cyber Security News

BianLian Ransomware Group Threatens Air Canada After Data Breach Involving 210 GB of Data

October 19, 2023

BianLian ransomware group disputed Air Canada's claim that data breach impacted only limited personal information of some employees and certain records. Ransomware group claims to have stolen 210 GB of technical and operational data spanning from 2008 to 2023.

Hacker in glasses breaking code showing MOVEit data breach

Cyber Security News

Flagstar Bank Suffers a MOVEit Data Breach Impacting Over 800,000 Customers

October 18, 2023

Flagstar Bank suffered a MOVEit data breach via a third-party payment processor and mobile banking services provider, impacting over 800,000 customers in the US.

Global world network and telecommunication showing DDoS attack using zero-day vulnerability

Cyber Security News

Cloudflare: Zero-Day Vulnerability at the Root of Record-Setting DDoS Attack

October 17, 2023

Cloudflare reports attackers using the HTTP/2 protocol zero-day vulnerability to conduct over 1,100 DDoS attacks at over 10 million requests per second since August, and 184 broke the previous record of 71 million requests. At its peak, 200 million requests per second was observed.

California State Capitol building showing data brokers and personal data

Data Protection News

New California Personal Data Bill Grants State Citizens the Right to Have PII Deleted by Data Brokers

October 17, 2023

The Delete Act (SB 362) expands an existing right under California state law to have personal data deleted, but streamlines the process so that one request will be sent to all data brokers.

Binary code on monitor showing software supply chain attacks and open source

Cyber Security News

Open Source Software Supply Chain Attacks Have Tripled, But Nearly All Vulnerabilities Are Avoidable by Updating

October 17, 2023

Software supply chain attacks have spiked significantly year-over-year. Sonatype logged over 245,032 malicious packages in open source projects available to public download in 2023, double the number seen from 2019 to 2022. In total, one in eight open source downloads poses a risk.

Hooded hacker in cyber war showing cyber attacks in Israel-Hamas conflict

Cyber Security News

Hacker Groups Contributing Cyber Attacks to Israel-Hamas Conflict

October 16, 2023

Israel-Hamas conflict draws in an international coalition of hackers conducting cyber attacks in support of both sides. Report finds that there are about 100 hacker groups that have involved themselves thus far, and that the number skews heavily to Palestine supporters (at 77).

Hand holding phone with Snapchat on the screen showing children's privacy concerns with AI chatbot

Data Protection News

Snap AI Chatbot Facing Potential Enforcement Action After Investigation of Children’s Privacy Complaints

October 16, 2023

The UK ICO has wrapped up a preliminary investigation into Snap's AI chatbot, and has indicated that it is failing to adequately address children's privacy risks. There are numerous concerns about AI chatbots that are not yet resolved, but children's privacy seems to have driven much of the early action from regulators.

Man pretends to peek through a hole with his hands showing workplace monitoring guidelines from UK ICO

Data Protection News

“Business Interests Must Never Be Prioritized Over Worker Privacy,” According to Workplace Monitoring Guidelines From UK ICO

October 13, 2023

The UK ICO guidelines specify that workplace monitoring must be disclosed to employees (along with its 'clearly defined' purpose), and the 'least intrusive' method must be used to accomplish the stated purpose.

Woman use smartphone at night showing cyber attack caused service disruptions

Cyber Security News

Lyca Mobile Customers Experience Service Disruption After a Cyber Attack

October 13, 2023

Lyca Mobile said the service disruption caused by the cyber attack “impacted some national and international calling” in all 60 countries in which it operated except for the United States, Australia, Ukraine and Tunisia.

System warning sign showing Sony MOVEit data breach

Cyber Security News

Sony Confirms MOVEit Data Breach Leaking Personal Information for Thousands

October 12, 2023

Sony Interactive Entertainment has confirmed a MOVEit data breach that leaked the personal information of current and former employees and their family members.

1 … 84 85 86 87 88 … 314

News

BianLian Ransomware Group Threatens Air Canada After Data Breach Involving 210 GB of Data

Flagstar Bank Suffers a MOVEit Data Breach Impacting Over 800,000 Customers

Cloudflare: Zero-Day Vulnerability at the Root of Record-Setting DDoS Attack

New California Personal Data Bill Grants State Citizens the Right to Have PII Deleted by Data Brokers

Open Source Software Supply Chain Attacks Have Tripled, But Nearly All Vulnerabilities Are Avoidable by Updating

Hacker Groups Contributing Cyber Attacks to Israel-Hamas Conflict

Snap AI Chatbot Facing Potential Enforcement Action After Investigation of Children’s Privacy Complaints

“Business Interests Must Never Be Prioritized Over Worker Privacy,” According to Workplace Monitoring Guidelines From UK ICO

Lyca Mobile Customers Experience Service Disruption After a Cyber Attack

Sony Confirms MOVEit Data Breach Leaking Personal Information for Thousands

AI Agents Turn to Hacking and Deception in AISI Security Tests

Self-Propagating Malware ChainDrop Hits Over 400 NPM Packages in Massive Supply Chain Attack

Russian Hackers Exploit Hotel Wi-Fi Networks to Compromise Microsoft 365 Accounts

Claude’s Great Escape: Anthropic AI Models Join OpenAI Agents in Hacking Their Way Out of Sandboxes