France Fines Yahoo 10 Mn Euros Over Cookie Abuses

January 22, 2024 at 06:12AM France’s data protection authority fined Yahoo 10 million euros for disregarding users’ rejection of internet-tracking cookies and implying loss of access to email accounts if they refused. Investigations revealed visitors who rejected cookies still had digital trackers deposited and Yahoo Mail users were warned about losing access to services if … Read more

ICO fines spam slinging financial services biz

January 22, 2024 at 06:09AM LADH Limited, a financial services company, was fined £50,000 by the UK’s data regulator for illegally sending over 31,000 spam text messages without consent. The company failed to offer recipients the chance to opt out, and claimed to have received consent from a third party without written confirmation. The ICO … Read more

Safeguarding against the global ransomware threat

January 22, 2024 at 04:57AM Ransomware poses a severe threat to businesses, governments, and organizations worldwide, with potentially irreversible data loss and devastating economic and operational consequences. Data Resilience Strategist at Object First, Sterling Wilson, emphasizes the need for proactive cybersecurity measures, advocating for immutable backup storage solutions like Ootbi to protect valuable data from … Read more

FTC Bans InMarket for Selling Precise User Location Without Consent

January 22, 2024 at 03:03AM The U.S. FTC has banned InMarket Media from selling precise location data without consumer consent and ordered it to destroy collected data subject to user approval. InMarket and Outlogic faced bans for allegations of improper location data use. InMarket allegedly harvested location data from various apps, while a study revealed … Read more

Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

January 21, 2024 at 11:03PM Cybersecurity researchers have observed an increase in threat actor activity exploiting a vulnerability in Apache ActiveMQ by delivering the Godzilla web shell. The web shells are concealed within an unknown binary format to evade security measures. This vulnerability has been actively exploited to deploy ransomware, rootkits, cryptocurrency miners, and DDoS … Read more

BreachForums admin ‘Pompourin’ sentenced to 20 years of supervised release

January 21, 2024 at 09:37PM “Pompourin,” former admin of BreachForums, sentenced to 20 years supervised release after pleading guilty to running a site facilitating sales of stolen data, hacking tools, and illegal materials. New UEFI vulnerabilities, PixieFail, impact network booting, involving several vendors. Also critical Chrome and Ivanti Endpoint Manager Mobile vulnerabilities. Researchers discover iOS … Read more

Tietoevry ransomware attack causes outages for Swedish firms, cities

January 21, 2024 at 03:15PM Finnish IT services provider Tietoevry faced a ransomware attack affecting a Swedish data center, impacting its cloud hosting customers. The attack was isolated, but caused widespread outages for multiple Swedish businesses, including the largest cinema chain and government agencies. The ransomware gang Akira is allegedly responsible, with cases of their … Read more

Brave to end ‘Strict’ fingerprinting protection as it breaks websites

January 21, 2024 at 03:15PM Brave Software plans to discontinue the ‘Strict’ fingerprinting protection mode in its privacy-focused Brave Browser due to its negative impact on website functionality. The mode, designed to enhance user privacy, causes issues for roughly 0.5% of users, making them more susceptible to tracking. The change aims to prioritize efficiency and … Read more

Court charges dev with hacking after cybersecurity issue disclosure

January 21, 2024 at 03:15PM A German court fined a programmer €3,000 for unauthorized access to a remote database server while investigating an IT problem for a client. The programmer found a significant data privacy issue, attempted to notify the software vendor, and was subsequently charged with hacking. The programmer plans to appeal the decision. … Read more