Schneier on Security

OCTOBER 3, 2019

Data Collected: 22 Vendors 1,294 Products 4,956 Firmware versions 3,333,411 Binaries analyzed Date range of data: 2003-03-24 to 2019-01-24 (varies by vendor, most up to 2018 releases). [.]. This dataset contains products such as home routers, enterprise equipment, smart cameras, security devices, and more.

IoT 203

IoT Firmware Data collection Architecture 203

CyberSecurity Insiders

AUGUST 26, 2021

It helps in protecting the rights of citizens and offers a plan to companies on what to do and what not to do when it comes to data collection and its security. UK’s Information Commissioner’s Office (ICO) plays a vital role in regulating the GDPR and other data protection rights as per the Data Protection act of 2018.

Information Security 112

Information Security Data privacy Data collection Media 112

SecureWorld News

NOVEMBER 30, 2022

The DPC discussed the inquiry : "The scope of the inquiry concerned an examination and assessment of Facebook Search, Facebook Messenger Contact Importer and Instagram Contact Importer tools in relation to processing carried out by Meta Platforms Ireland Limited ('MPIL') during the period between 25 May 2018 and September 2019.

Data breaches 77

Data breaches Data collection Media Cybersecurity 77

SecureWorld News

AUGUST 16, 2023

Their findings, which spanned data collected between 2018 and 2023, revealed an intriguing reality. This technique, often a precursor to larger cyberattacks such as ransomware, has seen an astonishing 6,000% increase since 2018.

Cybercrime 71

Cybercrime Passwords Data collection Data breaches 71

CyberSecurity Insiders

MAY 2, 2023

It amends the 2018 California Consumer Privacy Act (CCPA) introduced in response to rising consumer data privacy concerns. It has significantly impacted data collection and handling practices, giving consumers more control over how businesses handle their data. On the other hand, the CPRA relies on opt-out consent.

Data collection 52

Data collection Data breaches Password Management Data privacy 52

Security Affairs

AUGUST 11, 2023

The SystemBC platform has been offered for sale on various underground forums at least since 2018 as a “malware as a service,” or MaaS. ” reads the report published by Data collected related to multiple incidents analyzed by Kaspersky suggest the attack was conducted by the Russian-speaking RaaS cybercrime Pistachio Tempest or FIN12.

Malware 83

Malware Data collection Healthcare Cybercrime 83

Hot for Security

FEBRUARY 12, 2021

Vastaamo’s problems first began in 2018, when it discovered that a database of customer details and – most shockingly – notes from therapy sessions had been accessed by hackers. ”

Data collection 145

Data collection Data breaches Ransomware 145

Malwarebytes

DECEMBER 5, 2022

The act, which amended and expanded California's consumer privacy law that was built on the California Consumer Privacy Act (CCPA) of 2018 , is set to take effect on January 1, 2023. The CPRA is sometimes called the " CCPA 2.0 " and will affect the personal data of Californians collected from January 1, 2022 onwards.

Data collection 64

Data collection Mobile Risk Cybersecurity 64

CyberSecurity Insiders

FEBRUARY 23, 2021

million or €50 million penalty in March 2020 by the France data watchdog for failing to provide transparent information to users about its rules and regulations pertaining to data collection related to its products and services. Google was awarded $56.6

Data collection 111

Data collection Marketing Data breaches Cybersecurity 111

eSecurity Planet

DECEMBER 1, 2021

Businesses that have spent the past three-plus years adapting to the European Union’s far-reaching data privacy law now have to decide how they will respond to a similar law in China that has been criticized as being more vague in its wording and harsher in its penalties. Also read: Top GRC Tools & Software for 2021. PIPL vs. GDPR.

Data privacy 121

Data privacy Data collection Accountability Software 121

Security Affairs

DECEMBER 30, 2020

Customer proprietary network information (CPNI) is the data collected by telecommunications companies about a consumer’s telephone calls. The company reported the incident to the authorities and is investigating the incident with the heal of a cybersecurity firm.

Data breaches 125

Data breaches Mobile Telecommunications Wireless 125

Security Affairs

OCTOBER 11, 2020

Data collected by the agency is used by the federal government to allocate over $675 billion in federal funds to tribal, local, and state governments every year. According to the DHS, threat actors will likely interfere with the upcoming 2020 US Presidential election, as well as to compromise the 2020 US Census.

Government 135

Government Advertising Data collection Hacking 135

Malwarebytes

AUGUST 4, 2023

Two complaints from the European Center for Digital Right (NYOB) back in 2018 set the wheels in motion. Additional interest from the European Data Protection Board and decisions made by the Court of Justice of the European Union (CJEU) heaped additional pressure on the now relenting Meta.

Advertising 95

Advertising Data breaches Data collection Marketing 95

Security Affairs

NOVEMBER 15, 2022

The authorities started the investigation into Google collection practice following a 2018 Associated Press article that revealed Google “records your movements even when you explicitly tell it not to.”.

Consumer Protection 80

Consumer Protection Accountability Data collection Advertising 80

Krebs on Security

SEPTEMBER 9, 2019

In July, DHS’s Customs and Border Patrol (CPB) suspended all federal contracts with Perceptics , a contractor which sells license-plate scanners and other border control equipment, after data collected by the company was made available for download on the dark web.

Cybercrime 232

Cybercrime Government Data collection Internet 232

Centraleyes

DECEMBER 4, 2023

On May 25, 2018, Germany entered a new era of data protection. This marked a significant milestone, shaping global data privacy and setting the stage for enhanced regulations within Germany. Landmark cases in the 1990s and the GDPR’s rollout in 2018 shaped Germany’s evolving data protection landscape.

Data privacy 52

Data privacy Risk Telecommunications Big data 52

The Last Watchdog

OCTOBER 17, 2022

billion apps in 2021 alone, up more than 47 percent since 2018. This increased demand for apps also raises the need for improved data protection measures, which Google took steps to address with the new data safety section they launched in July 2022. Greediest data harvesters. In fact, Google Play users downloaded 111.3

Data privacy 141

Data privacy Media Data collection Data breaches 141

Security Affairs

JANUARY 2, 2023

The authorities started the investigation into Google collection practice following a 2018 Associated Press article that revealed Google “records your movements even when you explicitly tell it not to.”.

Consumer Protection 86

Consumer Protection Surveillance Data collection Accountability 86

Security Affairs

DECEMBER 10, 2020

Go versions of the backdoor were used since 2018 , they initially start collecting info on the compromised system, and then sends it to the command and control server. The malware samples analyzed by the researchers were heavily obfuscated, but the analysis of the code allowed the experts to attribute them to the APT28.

Malware 99

Malware Phishing Government Data collection 99

Security Affairs

MAY 18, 2019

Even if in Italy the cells of the popular Anonymous collective are very active , the overall number of hacktivist attacks that caused in quantifiable damage to the victim has declined by 95 percent since 2015. Researchers analyzed data collected by IBM’s X-Force threat intelligence unit between 2015 and 2019.

Advertising 64

Advertising Data collection DDOS Healthcare 64

Security Affairs

SEPTEMBER 3, 2018

— WikiLeaks (@wikileaks) August 31, 2018. — WikiLeaks (@wikileaks) September 2, 2018. — Ancilla (@ncilla) September 3, 2018. @JulianAssange associate and author of "Information Security for Journalists" @ArjenKamphuis has disappeared according to friends ( @ncilla ) and colleagues.

Advertising 52

Advertising Data collection Information Security Mobile 52

Malwarebytes

DECEMBER 16, 2021

The fine covers the period from July 2018, when the “Law on the Processing of Personal Data (Personal Data Act)” was established, until April 2020, when Grindr changed the consent solution. Nevertheless, this is the highest fee to date from the Norwegian Data Protection Authority.

Advertising 104

Advertising Marketing Data collection Mobile 104

Security Affairs

NOVEMBER 17, 2018

link ) was posted on Pastebin , the hacker claims to have compromised user’s email and also accused ProtonMail of sending user’s decrypted data to American servers. AmFearLiathMor also wrote that ProtonMail hasn’t configured the mandatory Subresource Integrity ( SRI ) allowing tampering and data collection.

Scams 95

Scams Hacking Data collection Advertising 95

Security Affairs

APRIL 22, 2019

Data collected by SafeGuard confirm the intensification of the presence of Russian bots on Twitter. In November 2018, Twitter announced to have deleted more than 10,000 accounts managed by bots that were posting messages to influence U.S.

Advertising 68

Advertising Data collection Media Accountability 68

SiteLock

AUGUST 27, 2021

These attacks are increasingly common: in Q2 2018, 43 percent of infected websites had at least one backdoor file , and cryptojacking continues to rise in popularity, doubling from Q1 to Q2 2018. What do I need to secure my website? An SSL certificate.

Small Business 98

Small Business Malware DDOS Engineering 98

Security Affairs

NOVEMBER 16, 2018

Hong Kong, 16.11.2018 – Group-IB, an international company that specializes in preventing cyber attacks, presented the findings of its latest Hi-Tech Crime Trends 2018 report at the FinTech Security Conference in Hong Kong organized by Binary Solutions Limited in partnership with Group-IB. Attacks on Crypto. Group-IB in Asia.

Cybercrime 81

Cybercrime Hacking Banking Phishing 81

Security Affairs

NOVEMBER 19, 2019

CERT-GIB’s report is based on data collected and analyzed by the Threat Detection System (TDS) Polygon as part of operations to prevent and detect threats distributed online in H1 2019 in more than 60 countries. In 2018, their number grew to 3.6%, while in H1 2019 saw an unusual rise of up to 27.8%. The revival of ransomware.

Ransomware 65

Ransomware Antivirus Malware Banking 65

eSecurity Planet

FEBRUARY 16, 2024

Reconnaissance Reconnaissance is the starting point of Volt Typhoon’s cyber campaign, characterized by thorough planning and data collection. LotL emerged in 2018 and became a popular strategy among malicious actors due to its effectiveness in ensuring covert persistence and discovery evasion.

Internet 100

Internet Internet Cybersecurity Network Security 100

Security Affairs

MARCH 14, 2019

In the course of further research it was revealed that GMO JS Sniffer has presumably been collecting customer payment data since November 2018. Typically, after customer data is stolen, it is usually resold on underground cardshops. Group-IB’s Threat Intelligence team discovered that GMO has been active since May 2018.

eCommerce 83

eCommerce Marketing Data breaches Advertising 83

Security Affairs

OCTOBER 10, 2018

Security firm Group-IB has estimated that in H2 2017-H1 2018 cyber attacks caused $49.4 Group-IB, an international company that specializes in preventing cyber attacks, has estimated that in H2 2017-H1 2018 cyber attacks caused $49.4 million (2.96 billion rubles) of damage to Russia’s financial sector. million (2.96 million (2.96

Cyber Attacks 82

Cyber Attacks Banking Cyber threats Phishing 82

eSecurity Planet

SEPTEMBER 24, 2021

Rapid7 combines threat intelligence , security research, data collection, and analytics in its comprehensive Insight platform, but how does its detection and response solution – InsightIDR – compare to other cybersecurity solutions? On Gartner Peer Insights, Rapid7 has nearly 700 reviews in a handful of solution categories.

DNS 107

DNS Technology Cybersecurity Data collection 107

Malwarebytes

JULY 31, 2023

Meta has run into yet another bout of court related issues—two subsidiaries have been ordered to pay $14 million regarding undisclosed data collection. The Australian case, which has rumbled on for the best part of two and a half years, has focused on claims related to a now discontinued Virtual Private Network (VPN).

Data collection 96

Data collection VPN Advertising Mobile 96

Malwarebytes

JANUARY 16, 2024

The IP address was linked to the malware using data collected by CWRU, Malwarebytes, and AT&T.) Following numerous requests by the defense and changes in Durachinsky’s legal representation, he was finally arraigned nearly a year later, on January 19, 2018.

Malware 92

Malware Passwords Identity Theft Data collection 92

Veracode Security

JUNE 25, 2021

The State of Software Security v11: Open Source Edition analyzed the data collected from 13 million scans of more than 86,000 repositories, containing more than 301,000 unique libraries. We also added some color and context to the data this year by surveying our customer base and adding the data from 1,744 responses to the report.

Software 69

Software Data collection 69

Security Affairs

NOVEMBER 17, 2018

Group-IB Threat Intelligence continuously detects and analyses data uploaded to card shops all over the world,” – said Dmitry Shestakov, Head of Group-IB ?ybercrime According to Group-IB’s annual Hi-Tech Crime Trends 2018 report, on average, from June 2017 to August 2018, 1.8 ybercrime research unit.

Banking 88

Banking Cybercrime Advertising Data collection 88

The Last Watchdog

APRIL 9, 2020

Data collected by IoT devices will increasingly get ingested into cloud-centric networks where it will get crunched by virtual servers. trillion by 2026, up from $190 billion in 2018. There’s no stopping the Internet of Things now. And fantastic new IoT-enabled services will spew out of the other end.

Internet 147

Internet Internet IoT Technology 147

Centraleyes

JANUARY 15, 2024

As of 2018, only California had passed a comprehensive privacy law. Consumers can opt out of data processing for sales, targeted advertising, or profiling, and controllers must respond to verified requests within 45 days, with a possible 45-day extension. Why Didn’t the ADPPA Pass?

Data privacy 52

Data privacy Advertising Data collection Government 52