Not-so-OpenAI allegedly never bothered to report 2023 data breach

July 7, 2024 at 09:52PM OpenAI faced backlash this week, following revelations of a 2023 system breach and privacy issues with its ChatGPT app for macOS. Moreover, the departure of key personnel raised concerns about its safety culture. The International Automobile Federation also reported a data breach, and a new ransomware group, Volcano Demon, was … Read more

Bloom Health Centers Provides Notice of Data Security Incident

July 2, 2024 at 01:55PM Bloom Health Centers, a mental health service provider, reported a data security incident involving potential exposure of personal and health information. Patient data such as name, address, health insurance, and medical details may have been affected, with some individuals’ Social Security, payment card, or driver’s license numbers possibly involved. Bloom … Read more

Signal Foundation Warns Against EU’s Plan to Scan Private Messages for CSAM

June 18, 2024 at 12:30PM The European Union’s proposal for mass scanning of private messages to detect child sexual abuse material (CSAM) is strongly opposed by Signal Foundation’s president, Meredith Whittaker. The proposal poses threats to end-to-end encryption (E2EE) and has sparked a debate about balancing privacy and combating serious crimes. Apple’s previous plan for … Read more

Defiant Microsoft pushes ahead with controversial Recall – but as an opt-in

June 7, 2024 at 03:50PM Microsoft’s controversial Windows Recall, which takes snapshots of a user’s screen, uploads the images on the device, and analyzes them using OCR, has raised security concerns. After criticism, Microsoft will now offer Recall as an opt-in service, beef up data security, and require Windows Hello enrollment and presence proof for … Read more

Crooks threaten to leak 3B personal records ‘stolen from background check firm’

June 3, 2024 at 03:40PM Personal information of billions of US, Canadian, and British citizens may be dumped online after being allegedly obtained from a Florida firm. A criminal gang aims to sell the database for $3.5 million, which includes sensitive details like full names, addresses, social security numbers, and family information. The pilfered data … Read more

India’s Android Users Hit by Malware-as-a-Service Campaign

March 20, 2024 at 02:12PM Hackers are targeting user devices to access sensitive personal data like banking information and SMS messages. Based on the meeting notes, it appears that hackers are specifically targeting sensitive personal information on user devices, such as banking data and SMS messages. This highlights a significant security concern that may require … Read more

Tracking Everything on the Dark Web Is Mission Critical

March 18, 2024 at 10:05AM The Dark Web poses a threat with stolen secrets, but having context on your side can be beneficial in navigating this environment. It seems like the focus of the meeting was on recognizing that on the Dark Web, stolen secrets are considered the enemy while emphasizing that context is considered … Read more

IP address X-posure now a feature on Musk’s social media platform

March 5, 2024 at 11:27AM Audio and video calling features initially for X Premium users on Elon Musk’s Twitter are now available to all users, but concerns about IP exposure have emerged. Enabling the features could potentially expose users to trolls and make tracking easier. Enhanced call privacy is disabled by default, and users are … Read more

Cops visit school of ‘wrong person’s child,’ mix up victims and suspects in epic data fail

March 1, 2024 at 07:52AM The Information Commissioner’s Office reprimanded West Midlands Police for repeatedly mixing up two individuals’ personal data, breaching data protection law. The errors led to mistaken identity, inaccurate personal data processing, and inappropriate actions, impacting the individuals involved. The force compensated one individual, implemented a Data Quality Policy and a “Think … Read more

Privacy Beats Ransomware as Top Insurance Concern

February 23, 2024 at 12:29PM Corporate directors and security teams are under pressure to comply with the SEC’s new cybersecurity regulations. Woodruff Sawyer’s David Anderson warns that mishandling PII could lead to costly claims, potentially rivaling ransomware attacks. Privacy issues, including pixel-tracking claims and GDPR violations, are becoming a top concern for cyber insurance underwriters. … Read more