Latest

News

Latest news on data protection, privacy and cybersecurity regulatory developments, data breaches and enforcement actions happening around the world.

TikTok app on screen showing GDPR fine in children's privacy case

Data Protection News

TikTok Receives €345 Million GDPR Fine in Years-Old Children’s Privacy Case

September 25, 2023

A children's privacy complaint that dates back to 2021 has resulted in a major GDPR fine for TikTok. The issue largely centers on the "Family Pairing" feature introduced in 2020 which had no real verification process ensuring that the linked parent account actually belonged to a parent.

Crypto exchange charts showing data breach

Cyber Security News

$70 Million Loss After Data Breach of CoinEx Crypto Exchange, Services Temporarily Suspended

September 25, 2023

Hack of crypto exchange CoinEx's hot wallets has led to a loss of about $70 million in assorted asset types. The data breach was reportedly caused by compromised private keys suspected to be stolen by North Korea's Lazarus group.

Police car siren flashing blue in the night showing third-party data breach

Cyber Security News

Greater Manchester Police Investigating a Third-Party Data Breach From a Ransomware Attack

September 21, 2023

A third-party data breach has exposed the personal data of UK’s Greater Manchester Police (GMP) officers and staff. Company that produces GMP’s staff ID cards was affected by a ransomware attack.

Locks on laptop screen showing Iranian hackers target defense organizations with password spraying attacks

Cyber Security News

Iranian Hackers Use Password Spray Attacks to Compromise Defense Organizations, Pharmaceutical Firms

September 21, 2023

A recent campaign by Iranian hackers has been very successful in using password spray attacks to breach high-value targets, with a particular focus on defense organizations and satellites as well as pharmaceutical company research.

Jet engine from Airbus showing data breach involving compromised account

Cyber Security News

Airbus Data Breach from a Partner Airline’s Compromised Account Leaks Confidential Information

September 20, 2023

Airbus has confirmed a data breach that exposed confidential business information via a partner airline’s compromised account. Threat actors compromised a Turkish Airlines employee account using the Redline info-stealer malware in August 2023.

Hammer on table showing FTC order and privacy and security review

Data Privacy News

Investigation Finds Elon Musk May Have Violated FTC Order With Failure to Conduct Required Privacy and Security Review for “Twitter Blue”

September 20, 2023

A government investigation of Elon Musk's tenure as leader of Twitter has determined that there may be violations of a 2022 FTC order that required certain privacy and security measures be implemented.

Woman holding phone with Facebook on the screen showing Facebook Messenger phishing campaign

Cyber Security News

Facebook Messenger Phishing Campaign Targets Millions of Business Accounts Locking Out Owners

September 19, 2023

Facebook Messenger phishing campaign targeted millions of business accounts using fake and hijacked personal accounts to trick business owners into installing an infostealer that harvests passwords and cookies before locking them out.

Data Privacy News

Mozilla: Connected Cars Perform Dismally on Privacy Tests, Every Brand Collecting Excessive Personal Information

September 19, 2023

Privacy tests have found that every connected car brand collects more personal data than it needs to, and employs it for non-essential purposes. The vast majority are sharing or selling customer data.

Slot machines in the casino showing ransom payment for cyber attack

Cyber Security News

Caesars Entertainment Discloses Cyber Attack, Ransom Payment Made Weeks Before MGM Heist

September 19, 2023

Caesars Entertainment quietly disclosed its own recent cyber attack in a SEC filing. Unlike MGM, Caesars appears to have skated through their own incident by making a $15 million ransom payment to the hackers.

Close up of hacker's hand over device showing Apple zero-click zero-day used by Pegasus spyware

Cyber Security News

New Pegasus Spyware Zero-Click Patched Out by Apple in Ongoing Battle Against Commercial Zero-Days

September 18, 2023

Citizen Lab reports that the new Pegasus spyware zero-click zero-day impacts the most recent version of iOS (16.6) and likely prior versions dating back to the iPhone 8. As with the prior Pegasus attack vector, victims only need to receive a iMessage to be compromised; they do not need to open the message or interact with it.

1 … 92 93 94 95 96 … 318

News

$70 Million Loss After Data Breach of CoinEx Crypto Exchange, Services Temporarily Suspended

Greater Manchester Police Investigating a Third-Party Data Breach From a Ransomware Attack

Iranian Hackers Use Password Spray Attacks to Compromise Defense Organizations, Pharmaceutical Firms

Airbus Data Breach from a Partner Airline’s Compromised Account Leaks Confidential Information

Investigation Finds Elon Musk May Have Violated FTC Order With Failure to Conduct Required Privacy and Security Review for “Twitter Blue”

Facebook Messenger Phishing Campaign Targets Millions of Business Accounts Locking Out Owners

Mozilla: Connected Cars Perform Dismally on Privacy Tests, Every Brand Collecting Excessive Personal Information

Caesars Entertainment Discloses Cyber Attack, Ransom Payment Made Weeks Before MGM Heist

New Pegasus Spyware Zero-Click Patched Out by Apple in Ongoing Battle Against Commercial Zero-Days

Security flaw in Microsoft’s Analytics Platform Titan Exposes 17 Trillion Records

Meta Muse AI Assistant’s Zero-Day Vulnerability Could Enable Attackers to Inject Malware

New Disclosure of “Meddling” OpenAI Agents Includes Attacks on UN and US Government Websites

ShinyHunters Hacks the FBI in a Security Breach Exposing Personal Information of 38,000 People