Random

News

Latest news on data protection, privacy and cybersecurity regulatory developments, data breaches and enforcement actions happening around the world.

Hands typing on keyboard showing fake tax refunds by scammers

Cyber Security News

Canada Revenue Agency Admits Paying Out $190 Million to Scammers, Fake Tax Refunds

November 5, 2024

CRA has lost about $190 million in payments made to scammers since 2020, with the highlight item being a $40 million tax refunds scam in which the perpetrator simply logged into an account and requested the astounding sum of money using false T4A income reporting slips.

Aerial view of factory tower showing ransomware attack on natural gas supplier

Cyber Security News

Natural Gas Supplier Superior Plus Suffers a Ransomware Attack Similar to Colonial Pipeline’s

December 27, 2021

Natural gas supplier Superior Plus suffered a ransomware attack that knocked its systems offline although customer safety and security and personal data were not affected.

Developer working on CI/CD platform showing security breach result in need to rotate secrets

Cyber Security News

Major Security Breach at Widely Used CI/CD Platform Prompts Developers To Rotate Secrets

January 10, 2023

The CircleCI security breach leaves most of its CI/CD platform clients with a pile of time-consuming cleanup of assorted keys, tokens and variables as they are forced to immediately rotate secrets.

Hacker working on computer showing security breach affected customer data

Cyber Security News

Red Hat Confirms Security Breach in Self-Hosted GitLab Instance, Customer Data Exposed

October 7, 2025

Open-source software company Red Hat has confirmed a security breach on one of its GitLab instances after a threat actor claimed to have stolen nearly 570 GB of data from across various repositories.

Red open padlock showing third party breach

Cyber Security News

Third-Party Breach Hits Salesforce via Gainsight App Integrations, Impacting Over 200 Organizations

December 1, 2025

Salesforce has confirmed another third-party breach affecting Gainsight applications integrated with customer instances, enabling attackers to exfiltrate customer data.

Digital shields over U.S. map showing implementation plan for cybersecurity strategy

Cyber Security News

White House Cybersecurity Strategy Implementation Plan Released: 65 Mandatory Initiatives, Increased Public-Private Partnerships

July 18, 2023

The National Cybersecurity Strategy Implementation Plan (NCSIP) establishes 65 high-impact initiatives that agencies will be required to meet within set timelines for each. A greater degree of public-private partnership is also being promoted.

Hacker typing on keyboard showing cybercriminals and social engineering

Cyber Security News

Microsoft: “Octo Tempest” Represents New Breed of Cybercriminals Making Use of Social Engineering and Threats

October 30, 2023

Octo Tempest has gradually stepped up from data theft, to data extortion, and now to ransomware as of this summer (becoming an affiliate of the ALPHV/BlackCat group). The cybercriminals are entirely financially motivated and nearly always leads with either a phishing email/message or a social engineering call. It also looks to execute SIM swap attacks.

Hacker hands on keyboard showing cyber attack on online ordering systems

Cyber Security News

Doughnut Chain Krispy Kreme Suffers a Play Ransomware Cyber Attack Disrupting Online Ordering Systems

December 31, 2024

Krispy Kreme has disclosed that the December 2024 disruption to its online ordering systems resulted from a cyber attack later claimed by the Play ransomware group.

Close-up of Apple iPhone showing ruling on copyright violation giving security researchers a win

Cyber Security News

In a Major Victory for Security Researchers, Federal Court Rules That Virtual iOS Devices Are Not a Copyright Violation

January 4, 2021

Apple argued that Corellium's use of its software constituted a copyright violation; a federal judge has disagreed, throwing the case out on the basis of the company's software being a tool for security researchers.

Data Protection News

TikTok’s New Data Center in Dublin Goes Live as Part of “Project Clover” EU Privacy Program

September 12, 2023

The opening of the Irish data center is part of the final stage of a EU privacy plan TikTok kicked off in mid-2021, seeking to address user data security concerns and the legal status of its international data transfers.

1 … 87 88 89 90 91 … 318

News

Canada Revenue Agency Admits Paying Out $190 Million to Scammers, Fake Tax Refunds

Natural Gas Supplier Superior Plus Suffers a Ransomware Attack Similar to Colonial Pipeline’s

Major Security Breach at Widely Used CI/CD Platform Prompts Developers To Rotate Secrets

Red Hat Confirms Security Breach in Self-Hosted GitLab Instance, Customer Data Exposed

Third-Party Breach Hits Salesforce via Gainsight App Integrations, Impacting Over 200 Organizations

White House Cybersecurity Strategy Implementation Plan Released: 65 Mandatory Initiatives, Increased Public-Private Partnerships

Doughnut Chain Krispy Kreme Suffers a Play Ransomware Cyber Attack Disrupting Online Ordering Systems

In a Major Victory for Security Researchers, Federal Court Rules That Virtual iOS Devices Are Not a Copyright Violation

TikTok’s New Data Center in Dublin Goes Live as Part of “Project Clover” EU Privacy Program

Data Breach Impacts Times Car Ride-Sharing Service as Ransomware Attack Hits Railway Operator Keio

Security flaw in Microsoft’s Analytics Platform Titan Exposes 17 Trillion Records

Meta Muse AI Assistant’s Zero-Day Vulnerability Could Enable Attackers to Inject Malware

New Disclosure of “Meddling” OpenAI Agents Includes Attacks on UN and US Government Websites