White House to Issue Executive Order on Personal Information Protection

February 28, 2024 at 10:51AM The White House is preparing a new Executive Order to safeguard personal information by preventing mass transfer of sensitive data to countries of concern. It aims to protect against surveillance, scams, and privacy violations. The order also focuses on safeguarding sensitive government-related data and commercial means of accessing Americans’ data. … Read more

Converging State Privacy Laws and the Emerging AI Challenge

February 28, 2024 at 10:05AM In 2023, 8 US states passed data privacy laws, with 4 more set to take effect in 2024, including Oregon, Montana, Texas, and Florida. While laws share similarities, they exhibit state-specific nuances, such as different thresholds and varied personal information definitions. Additionally, GenAI is attracting attention, prompting the need for … Read more

Building Your Privacy-Compliant Customer Data Platform (CDP) with First-Party Data

February 28, 2024 at 07:34AM In the digital age, data privacy is a crucial consumer demand. Businesses must navigate privacy regulations while using customer data for personalized experiences. Twilio Segment’s webinar will discuss the importance of a privacy-compliant Customer Data Platform (CDP), showcasing strategies, customer insights, and engagement methodologies for ethical data use within a … Read more

LoanDepot Ransomware Attack Exposed 16.9 Million Individuals

February 26, 2024 at 10:21AM Lending firm LoanDepot suffered a ransomware attack, leading to the theft of personal data from over 16.9 million individuals. Unauthorized access to systems occurred between January 3rd and 5th, compromising sensitive information such as names, addresses, Social Security numbers, and financial account details. Free identity protection and credit monitoring services … Read more

Avast to Pay $16.5M Fine For Selling Consumer Browsing Data

February 23, 2024 at 12:15PM The FTC fined Avast $16.5 million for allegedly selling consumer browsing data to third parties through its subsidiaries, despite claiming to protect users’ privacy. The FTC accused Avast of collecting and storing browsing data without consent, then selling it to over 100 third parties. Avast is now required to compensate … Read more

Alarm Over GenAI Risk Fuels Security Spending in Middle East & Africa

February 23, 2024 at 10:20AM The fast adoption of Generative Artificial Intelligence (GenAI) in the Middle East and Africa is prompting organizations to increase data privacy and cloud security measures. Concerns about GenAI are driving a 24% and 17% increase in budgets for data privacy and cloud security, respectively, according to Gartner. However, the potential … Read more

Apple Shortcuts Vulnerability Exposes Sensitive Information

February 23, 2024 at 09:27AM A high-severity vulnerability, tracked as CVE-2024-23204, in Apple Shortcuts allowed attackers to access sensitive user information and system resources without user prompting. Cybersecurity firm Bitdefender discovered the issue, which bypassed Apple’s framework governing access permissions. The vulnerability was addressed with the release of iOS 17.3, iPadOS 17.3, and macOS Sonoma … Read more

230k Individuals Impacted by Data Breach at Australian Telco Tangerine

February 23, 2024 at 07:33AM Telecommunications provider Tangerine revealed a recent cyberattack where the personal information of 230,000 individuals was stolen from a legacy customer database. The compromised data includes names, addresses, dates of birth, and contact details, but not credit card or banking information. The company is taking steps to prevent similar incidents and … Read more

Researchers Detail Apple’s Recent Zero-Click Shortcuts Vulnerability

February 23, 2024 at 01:09AM A high-severity security flaw in Apple’s Shortcuts app, CVE-2024-23204, was patched on January 22, 2024. The flaw allowed shortcuts to access sensitive data without user consent. Bitdefender researcher discovered the bug, stating it could bypass TCC policies and exfiltrate data to a malicious server. The vulnerability was fixed in iOS … Read more

Avast shells out $17M to shoo away claims it peddled people’s personal data

February 22, 2024 at 08:04PM Avast has agreed to pay $16.5 million after the FTC accused the antivirus vendor of selling customer data to third parties. The company must destroy web browsing data transferred to its subsidiary, Jumpshot, and obtain express consent for data licensing from users. Avast disputes the allegations but has settled with … Read more