Europol confirms incident following alleged auction of staff data

May 13, 2024 at 07:55AM Europol is investigating a cybercriminal’s claim of stealing confidential data from its sources. The Europol Platform for Experts is confirmed as the main subject, but no operational data has been compromised. The cybercriminal, operating as IntelBroker, has also targeted Zscaler and the European Parliament’s PEOPLE app. Europol is assessing the … Read more

Dell API abused to steal 49 million customer records in data breach

May 10, 2024 at 03:33PM Dell recently suffered a data breach compromising 49 million customer records, including personal data and hardware details, which were subsequently offered for sale on the Breach hacking forum. A threat actor named Menelik admitted to exploiting a partner portal to access and scrape the information, claiming ease of registration and … Read more

New TunnelVision Attack Allows Hijacking of VPN Traffic via DHCP Manipulation

May 9, 2024 at 02:46PM TunnelVision is a newly detailed VPN bypass method, assigned CVE identifier CVE-2024-3661, impacting operating systems with DHCP client support. This decloaking technique enables attackers to reroute and potentially inspect VPN traffic. With significant implications for various OSs and VPN tools, mitigating measures include implementing DHCP snooping and ARP protections. The … Read more

Dell customer order database of ’49M records’ stolen, now up for sale on dark web

May 9, 2024 at 02:07PM Dell confirmed a data breach on one of its portals, with information stolen from 49 million records now for sale on the dark web. The stolen data includes customer names, addresses, and Dell equipment details, but not payment info. Dell is undertaking an investigation and taking steps to protect customer … Read more

Dell Says Customer Names, Addresses Stolen in Database Breach

May 9, 2024 at 01:09PM Millions of Dell Technologies customers have been notified about a security incident that resulted in the theft of customer data, including full names and addresses. Dell confirmed the breach involved a database with limited customer information, primarily related to purchases from the company. The stolen data did not include sensitive … Read more

BetterHelp Customers Begin Receiving Refund Notices From $7.8M Data Privacy Settlement, FTC Says

May 9, 2024 at 08:57AM BetterHelp customers are now able to claim refunds from a $7.8 million settlement after the U.S. Federal Trade Commission accused the company of sharing sensitive health data with advertisers. Around 800,000 individuals are eligible for refunds of approximately $10 each, covering services used between August 2017 and December 2020. Notifications … Read more

Stack Overflow suspends user for editing posts in OpenAI protest

May 8, 2024 at 04:04PM OpenAI’s partnership with Stack Overflow has raised concerns among users, who fear unauthorized use of their data and potential inaccuracies from OpenAI’s language models. Users attempted to delete their posts in protest, but faced resistance from Stack Overflow, citing the collective effort of community contributions. GDPR regulations also complicate the … Read more

TikTok sues America to undo divest-or-die law

May 7, 2024 at 03:09PM TikTok and its parent company, ByteDance, filed a lawsuit against the US government over the forced sale or shutdown of the video-sharing app. The lawsuit challenges the constitutionality of the law, which requires ByteDance to sell TikTok to a US-approved owner or cease operations. The law stems from concerns about … Read more

BetterHelp to pay $7.8 million to 800,000 in health data sharing settlement

May 7, 2024 at 12:50PM BetterHelp has agreed to a $7.8 million settlement with the FTC over misuse of consumer health data for advertising. The platform, founded in 2013, offers mental health counseling through various channels. The FTC investigation revealed data collection without consent and sharing with several platforms. Refunds for eligible consumers will be … Read more

Niobium Raises $5.5M for Zero Trust Computing Hardware Acceleration

May 7, 2024 at 12:03PM Niobium raised $5.5 million in seed funding for its hardware accelerator focused on zero trust computing. The company’s technology, based on fully homomorphic encryption (FHE), aims to process encrypted data without access to actual data. Niobium’s SoC-based PCIe card significantly accelerates FHE software solutions and plans to target various industries … Read more