Recent Security News

  • Thought GDPR Compliance Was Hard? Buckle Up

    November 29, 2023 at 02:09PM Since GDPR’s inception, global privacy laws have expanded significantly, creating challenges for businesses in managing consent and compliance. Many firms struggle with enforcing effective consent despite using consent banners, as global data protection laws vary in requirements. Constant updates and adaptable consent management technology are crucial for businesses to navigate…

    Read More

  • Black Basta ransomware made over $100 million from extortion

    November 29, 2023 at 01:20PM Since April 2022, Black Basta, a Russia-linked ransomware gang, has obtained over $100 million from double extortion attacks on over 329 entities worldwide. Around 35% of its 90+ victims have paid ransoms, including multi-million dollar settlements. The group may originate from the disbanded Conti gang or have FIN7 ties. **Meeting…

    Read More

  • Hackers breach US water facility via exposed Unitronics PLCs

    November 29, 2023 at 01:13PM CISA alerts of a cyber intrusion at a U.S. water facility via internet-exposed Unitronics PLCs, without harming drinking water. The agency advises replacing default passwords, using MFA, disconnecting PLCs from the internet, using firewalls, backing up systems, changing ports, and updating firmware to bolster security. Key Takeaways from Meeting Notes:…

    Read More

  • Japanese Space Agency JAXA hacked in summer cyberattack

    November 29, 2023 at 12:09PM JAXA was hacked, risking sensitive space-tech data. The breach involved the agency’s Active Directory server, and the extent of damage is under investigation. JAXA was previously targeted by Chinese hackers, Tick. Concerns arise as Japan-US agencies warn of ongoing Chinese cyberattacks on networks. (50 words) Meeting Takeaways: 1. The Japan…

    Read More

  • Google Chrome emergency update fixes 6th zero-day exploited in 2023

    November 29, 2023 at 12:09PM Google released an emergency security update for Chrome, patching the sixth zero-day vulnerability of the year, CVE-2023-6345, amid active exploits. Available globally, the update fixes an integer overflow in Skia graphics library. Google restricts exploit details to curb further misuse, especially for unpatched third-party software. Meeting Takeaways: 1. Google released…

    Read More