On-chain investigator links North Korean hackers to the Alphopo crypto theft and discovers an additional $37 million, raising the amount stolen to $60 million.
Meta is facing a total of $20 million in fines in Australia due to misleading consumers about personal data usage. Facebook Israel and VPN service Onavo Protect promised to keep user data private and safe, but were sharing collected personal information with Meta for use in its targeted advertising systems.
A dozen Norwegian government ministries suffered a cyber attack exploiting a zero-day vulnerability in Ivanti Endpoint Manager Mobile (EPMM), the Norwegian National Security Authority (NSM) has disclosed.
The lone strong biometric privacy law in the United States has struck again, this time taking $68.5 million from Instagram in a settlement for a class action first filed nearly three years ago.
The damage tally from the massive MOVEit data breach continues to go up, as a US government contractor is reporting that 8 to 11 million records of health data have been exposed.
WhatsApp accounts could be deactivated simply by sending a request from any email address, so long as the attacker knew the associated phone number. Going forward, the account deactivation process now involves a follow-up message that requests verification of ownership of the associated phone number.
After being pulled into an early July meeting with regulators over uncompetitive savings rates, some UK banks are now blaming data protection laws for consumer financial woes, claiming that rules forbid them from communicating better options to customers.
NATO is investigating an alleged data theft by a hacktivist group SiegedSec. 845 MB of compressed data was leaked and found to contain unclassified information and 8,000 employee records from 31 nations.
Average cost of data breach has once again hit a new record to $4.45 million, up 15.3% just from 2020. Yet only 51% of organizations that have suffered a breach plan to increase security spending.
New rules voted in by the SEC last week require all publicly traded companies to report any cybersecurity breaches that could cause a material impact within four days. Timer doesn't start until the company determines that the breach could be material.
