The damage tally from the massive MOVEit data breach continues to go up, as a US government contractor is reporting that 8 to 11 million records of health data have been exposed.
WhatsApp accounts could be deactivated simply by sending a request from any email address, so long as the attacker knew the associated phone number. Going forward, the account deactivation process now involves a follow-up message that requests verification of ownership of the associated phone number.
After being pulled into an early July meeting with regulators over uncompetitive savings rates, some UK banks are now blaming data protection laws for consumer financial woes, claiming that rules forbid them from communicating better options to customers.
NATO is investigating an alleged data theft by a hacktivist group SiegedSec. 845 MB of compressed data was leaked and found to contain unclassified information and 8,000 employee records from 31 nations.
Average cost of data breach has once again hit a new record to $4.45 million, up 15.3% just from 2020. Yet only 51% of organizations that have suffered a breach plan to increase security spending.
New rules voted in by the SEC last week require all publicly traded companies to report any cybersecurity breaches that could cause a material impact within four days. Timer doesn't start until the company determines that the breach could be material.
Over 200,000 OpenAI credentials are listed for sale on dark web marketplaces as interest in the generative AI chatbot peaks within the black hat community.
Previously unknown data breach that became public knowledge on July 18 impacted approximately 4,000 accounts of individuals who attended the Roblox Developer Conference between 2017 and 2020. Data had remained within “niche cheating communities within Roblox.”
For every day that Meta remains out of compliance during the 90-day period, it will be assessed the equivalent of $100,000. The fine period would run until the end of October, and should Meta be out of compliance for the full duration it would end up paying a total of $9 million.
U.S. Cyber Trust Mark, a labeling program intended to make the relative security level of smart devices more apparent to consumers, is based on a NIST standard first put forward in a February 2022 white paper, addressing a longstanding problem with shortcomings in IoT security.
