EasyPark discloses data breach that may impact millions of users

December 28, 2023 at 02:40PM Parking app developer EasyPark reported a data breach on its website, impacting an unknown number of its millions of users. The breach involves compromised customer data such as names, phone numbers, addresses, and partial credit card information. Cybercriminals could use this for phishing attacks, but no unauthorized transactions have occurred. … Read more

Google Cloud Resolves Privilege Escalation Flaw Impacting Kubernetes Service

December 28, 2023 at 08:54AM Google Cloud addressed a medium-severity security flaw that could allow escalation of privileges for attackers with access to a Kubernetes cluster. Palo Alto Networks Unit 42 discovered the vulnerability, which could lead to data theft and disruption of cluster operations. The issue has been fixed in specific versions of Google … Read more

Saudi Arabia Strengthens Its Cybersecurity Posture

December 28, 2023 at 07:03AM Saudi Arabia is making significant strides in cybersecurity, propelled by the National Cybersecurity Authority (NCA). The NCA has released various regulations and tools, contributing to the Kingdom’s improved cybersecurity landscape. Efforts include workforce development, global recognition, and hosting industry events. However, the country still faces cyber threats and a shortage … Read more

Mint Mobile discloses new data breach exposing customer data

December 22, 2023 at 08:35PM Mint Mobile, a subsidiary of T-Mobile, has confirmed a data breach exposing customer information. The breach notification assured customers that credit card numbers and passwords were not affected, but disclosed that names, phone numbers, email addresses, and other account details were compromised. The company has resolved the breach and is … Read more

As Namibians Rush to Register SIMs, Major Telco Hoards Biometric Data

December 21, 2023 at 09:40AM Namibia’s SIM registration campaign faces challenges as half the population risks losing phone service in 10 days. Citizens handed biometric data to maintain service with the dominant telecommunications provider, MTC. Amid low registration rates, the government initiated a 3-month suspension period starting Jan. 1. Concerns arise over MTC’s collection and … Read more

FTC Proposes Strengthening Children’s Online Privacy Rules to Address Tracking, Push Notifications

December 21, 2023 at 07:33AM The Federal Trade Commission is proposing changes to the Children’s Online Privacy Protection Act (COPPA) to enhance online safety for kids. These changes include implementing an opt-in requirement for targeted ads, limiting push notifications to children, and establishing rules for data retention. The proposed updates aim to protect children’s privacy … Read more

Data loss prevention isn’t rocket science, but NASA hasn’t made it work in Microsoft 365

December 20, 2023 at 11:33PM NASA’s Inspector General praises the agency’s privacy program but identifies areas for improvement. The audit highlights a need for enhanced protection of personal information, including the implementation of data loss protection in Microsoft 365. It also raises concerns about unclear breach response procedures and incomplete privacy reporting. NASA agrees to … Read more

Halcyon Raises $40 Million for Anti-Ransomware Platform

December 19, 2023 at 09:39AM Halcyon, an Austin, Texas-based anti-ransomware company, has raised $40 million in a Series B funding led by Bain Capital Ventures. This brings their total investment this year to $90 million, facilitating an expansion of their engineering, R&D, and sales functions. The company is aggressively marketing its platform to enterprises, focusing … Read more

Safeguarding Our Children’s Digital Future: A Call to Action

December 14, 2023 at 10:15AM Schools are increasingly targeted by cybercriminals, leading to grave consequences for students and the education sector. The reasons behind this vulnerability include aging IT infrastructure, inadequate cybersecurity expertise, and the increased use of technology by students without proper cybersecurity education. Urgent solutions include improving teacher salaries, reforming credit monitoring, and … Read more

Dell Urges Customers to Patch Vulnerabilities in PowerProtect Products

December 14, 2023 at 07:18AM Several serious vulnerabilities have been found in Dell’s PowerProtect products, impacting various appliances and potentially allowing attackers to execute malicious code, steal information, and gain control of systems. Dell is urging customers to review and implement security measures outlined in the DSA-2023-412 advisory and emphasizes the importance of product security … Read more