Malwarebytes

OCTOBER 15, 2024

Unlike any other season in America, election season might bring the highest volume of advertisements sent directly to people’s homes, phones, and email accounts—and the accuracy and speed at which they come can feel invasive. Escaping this data collection regime has proven difficult for most people.

Scams 138

Scams Identity Theft Cybercrime Accountability 138

Krebs on Security

MARCH 20, 2023

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device — unless and until you affirmatively opt out of this data collection.

Mobile 314

Mobile Wireless Advertising Accountability 314

Krebs on Security

OCTOBER 31, 2022

Justice Department , FBI agents have identified more than 50 million unique credentials and forms of identification (email addresses, bank accounts, cryptocurrency addresses, credit card numbers, etc.) A selfie pulled from Mark Sokolovsky’s iCloud account. Working with investigators in Italy and The Netherlands, U.S.

Malware 340

Malware Identity Theft Cybercrime Accountability 340

Security Affairs

NOVEMBER 26, 2019

Some third-party apps quietly scraped personal information from people’s accounts from Twitter and Facebook, the social media companies claim. Facebook and Twitter revealed that some third-party apps quietly scraped personal information from people’s accounts without their consent. Pierluigi Paganini.

Accountability 145

Accountability Mobile Advertising Media 145

Troy Hunt

NOVEMBER 13, 2024

Apparently, before a child reaches the age of 13, advertisers will have gathered more 72 million data points on them. I knew I'd seen a metric about this sometime recently, so I went looking for "7,000", which perfectly illustrates how unaware we are of the extent of data collection on all of us.

Data breaches 327

Data breaches Passwords B2B Technology 327

The Last Watchdog

MAY 21, 2020

The idea was that by fingerprinting devices used to connect to the internet we could achieve better accountability. Fingerprinting is considered a necessary practice to fight challenges such as fake accounts and the misuse of internet services. However, online fingerprinting is also being used to track users.

Advertising 290

Advertising Internet Internet Accountability 290

Malwarebytes

APRIL 6, 2023

Now the focus is on data collection , or to be more accurate, data deletion. Google wants people to be able to scrub data associated with an app. This counts for data inside of the application itself, but also out there on the web. A farewell to app data?

Accountability 96

Accountability Data collection Ransomware Mobile 96

Security Affairs

NOVEMBER 28, 2020

A credible threat actor is offering access to the email accounts of hundreds of C-level executives for $100 to $1500 per account. Access to the email accounts of hundreds of C-level executives is available on the Exploit.in for $100 to $1500 per account. Exploit.in ” reported ZDNet. Pierluigi Paganini.

Accountability 117

Accountability Cybercrime Hacking Retail 117

Schneier on Security

SEPTEMBER 15, 2023

Where possible, favor openness and transparency over aggressive data collection or restrictions which erode civil liberties. Privacy Rights – Pervasive monitoring and data collection erode privacy rights and dignity. Focus only on proportional responses. Surveillance creep risks violating autonomy.

Data collection 239

Data collection Risk Surveillance Manufacturing 239

Malwarebytes

AUGUST 20, 2024

We will hold them accountable.” The AG accuses GM of installing technology that allegedly improves the safety, functionality, and operability of its vehicles, but at the same time this technology gathers driving data about the vehicle’s usage. On top of that, GM gathered data through other products like its mobile apps.

Insurance 109

Insurance Accountability Data collection Surveillance 109

Security Affairs

DECEMBER 1, 2024

For example, these campaigns leverage fake social media accounts to post questions and comments about divisive internal issues in the U.S. The data collected through these operations can provide insights into voter demographics, potentially influencing election outcomes.

Artificial Intelligence 134

Artificial Intelligence Phishing Media Cyber threats 134

Krebs on Security

MAY 18, 2022

for “deceptive statements” the company and its founder allegedly made over how they handle facial recognition data collected on behalf of the Internal Revenue Service , which until recently required anyone seeking a new IRS account online to provide a live video selfie to ID.me. would be permanently deleted.

Government 293

Government Accountability Surveillance Data collection 293

Security Affairs

JANUARY 16, 2025

The law firm pointed out that it has no evidence the exposed data has been misused. The law firm recommends individuals to monitor accounts and credit reports for identity theft or fraud. “On December 13, 2023, Wolf Haldenstein detected suspicious activity in its network environment.

Data breaches 97

Data breaches Identity Theft Consumer Protection Data collection 97

Krebs on Security

AUGUST 26, 2020

Ngo’s businesses enabled an entire generation of cybercriminals to commit an estimated $1 billion worth of new account fraud , and to sully the credit histories of countless Americans in the process. “They would discover [my accounts] and fix it, and I would discover a new vulnerability and hack them again.”

Identity Theft 354

Identity Theft Computers and Electronics Hacking Accountability 354

Adam Levin

DECEMBER 3, 2018

The data is thought to have originated from Data&Leads, Inc. A cached version of the company’s website shows that it promised “access to our massive in-house data collection, as well as one of the largest data supplier networks of any data or lead company.”. The takeaway?

Identity Theft 194

Identity Theft Data collection Engineering Passwords 194

Krebs on Security

JULY 18, 2022

Namely, the ability to route one’s malicious traffic through a computer that is geographically close to the consumer whose credit card they’re about to charge at some website, or whose bank account they’re about to empty. Others are fairly opaque about their data collection and retention policies. ”

VPN 356

VPN Computers and Electronics Antivirus Software 356

SecureList

APRIL 29, 2025

We identified an odd authorized SSH key for a user called suporte (in a Portuguese-speaking environment, this is an account typically used for administrative tasks in the operating system). Such accounts are often configured to have the same username as the password, which is a bad practice, making it easy for the attackers to exploit them.

Passwords 98

Passwords Authentication System Administration Malware 98

Security Affairs

DECEMBER 23, 2023

Our investigation indicates that certain information associated with your account was impacted.” ” reads the data breach notification email sent to the impacted customers. “Mint’s data collection policy is one of the most important ways in which we ensure the privacy and security of our subscribers.

Data breaches 137

Data breaches Mobile Wireless Data collection 137

Adam Levin

JUNE 24, 2020

269 gigabytes of potentially sensitive data collected from more than 200 police departments across the country were leaked online last week. Among the hundreds of thousands of documents are police and FBI reports, bulletins, guides and more,” DDoSecrets announced on its Twitter feed (Twitter has since banned the DDoSecrets account).

Data collection 189

Data collection VPN Accountability Risk 189

Schneier on Security

DECEMBER 19, 2023

More importantly, we need to be able to trust companies to honestly and clearly explain what they are doing with our data. How many people cancelled their Dropbox accounts in the last 48 hours? And while Dropbox is not sending your data to OpenAI today, it could do so tomorrow with a simple change of its terms of service.

Government 337

Government Banking Risk Internet 337

Security Affairs

DECEMBER 30, 2020

T-Mobile has disclosed a data breach exposing customers’ account’s information. “We are reaching out to let you know about a security incident we recently identified and quickly shut down that may have impacted some of your T-Mobile account information.”

Data breaches 145

Data breaches Mobile Telecommunications Accountability 145

SecureList

NOVEMBER 29, 2024

CloudSorcerer is a sophisticated cyber-espionage tool used for stealth monitoring, data collection and exfiltration via Microsoft, Yandex and Dropbox cloud infrastructures. The data collected about the targets’ companies and contact information could be used to spy on people of interest and lay the groundwork for future attacks.

Energy and Utilities 105

Energy and Utilities Ransomware Malware Government 105

The Last Watchdog

MAY 26, 2021

Related: Credential stuffing fuels account takeovers. While changing passwords may be inconvenient at times, following this password best practice can help prevent the following data catastrophes: •Giving hackers easy access to your most sensitive accounts (avoid this problem by steering clear of insecure methods such as HTTP or public Wi-F.

Passwords 182

Passwords Password Management Accountability Authentication 182

Krebs on Security

DECEMBER 29, 2022

Internal Revenue Service website for months: Anyone seeking to create an account to view their tax records online would soon be required to provide biometric data to a private company in Virginia — ID.me. banks are stiffing account takeover victims. million user accounts earlier this year. Elizabeth Warren (D-Mass.)

Cryptocurrency 304

Cryptocurrency Cybercrime Computers and Electronics Scams 304

Security Affairs

JULY 12, 2021

For the third time in the past four months, LinkedIn seems to have experienced another massive data scrape conducted by a malicious actor. Once again, an archive of data collected from hundreds of millions of LinkedIn user profiles surfaced on a hacker forum, where it’s currently being sold for an undisclosed sum.

Social Engineering 144

Social Engineering Media Data collection Passwords 144

Security Affairs

NOVEMBER 23, 2022

Researchers discovered that analytics data associated with iPhone include Directory Services Identifier (DSID) that could allow identifying users. Researchers at software company Mysk discovered that analytics data collected by iPhone include the Directory Services Identifier (DSID), which could allow identifying users.

Data collection 145

Data collection Accountability Hacking Software 145

Security Affairs

AUGUST 3, 2024

“According to the complaint, from 2019 to the present, TikTok knowingly permitted children to create regular TikTok accounts and to create, view, and share short-form videos and messages with adults and others on the regular TikTok platform. ” reads the press release published by DoJ.

Accountability 130

Accountability Data collection Risk Hacking 130

Centraleyes

NOVEMBER 9, 2024

The Delaware Personal Data Privacy Act (DPDPA) is a state law created to protect the privacy of Delaware residents by regulating the collection, use, storage, and sharing of personal data by businesses. Who Must Comply With Delaware’s Privacy Act? These disclosures need to be accessible and easy to understand.

Data privacy 52

Data privacy Data collection Risk Accountability 52

Security Boulevard

MARCH 24, 2025

While MFA is primarily a security feature, its primary privacy benefit is adding another layer of security to prevent unauthorized access to information contained in particular important or sensitive accounts. These apps also frequently use Bluetooth data to gather location information and proximity to nearby devices.

Surveillance 75

Surveillance Telecommunications Malware Data breaches 75

Security Affairs

NOVEMBER 3, 2020

The scripts developed by the cyber criminal were used to parse log data collected from botnet and searched for personally identifiable information (PII) and account credentials. In some cases, the man manually chacked the stolen information. ” reads the press release published by the DoJ.

Accountability 122

Accountability Banking Advertising Data collection 122

Joseph Steinberg

APRIL 20, 2021

It is also not uncommon for firms in the healthcare vertical to symbiotically share various types of information with one another; private healthcare-related data is also almost always shared during the M&A process – even before deals have closed.

Healthcare 233

Healthcare Insurance Computers and Electronics Data collection 233

Krebs on Security

AUGUST 14, 2019

Data collected in the course of the investigation also reveals some fascinating details that may help explain why these pump skimmers are so lucrative and ubiquitous. Armed with your PIN and debit card data, skimmer thieves or those who purchase stolen cards can clone your card and pull money out of your account at an ATM.

Banking 269

Banking Computers and Electronics Marketing Mobile 269

Security Affairs

NOVEMBER 27, 2021

Italy’s antitrust regulator has fined both Apple and Google €10 million each for what it calls are “aggressive” data practices and not providing consumers with clear information on commercial uses of their personal data during the account creation phase. ” reads the press release published by the AGCM.

Data collection 114

Data collection Accountability Hacking Information Security 114

The Last Watchdog

JUNE 2, 2021

The amount of data in the world topped an astounding 59 zetabytes in 2020, much of it pooling in data lakes. We’ve barely scratched the surface of applying artificial intelligence and advanced data analytics to the raw data collecting in these gargantuan cloud-storage structures erected by Amazon, Microsoft and Google.

Encryption 176

Encryption Artificial Intelligence IoT Data collection 176

Malwarebytes

JULY 29, 2024

At Malwarebytes, we reported how a team of researchers at Mozilla who reviewed the privacy and data collection policies of various product categories for several years now, named “Privacy Not Included,” found cars to be the worst product category they ever reviewed for privacy.

Insurance 114

Insurance Data collection Data breaches Manufacturing 114

Security Affairs

SEPTEMBER 17, 2024

The report provides insights into factors influencing user consent for data collection and usage and reasons for consumer disengagement. More than half (55%) claimed that reducing unnecessary data collection was an additional factor that would help them gain trust in a company or brand.

Data collection 117

Data collection Data privacy B2B Digital transformation 117

CSO Magazine

NOVEMBER 28, 2022

Customer identity and access management (CIAM), a subset of identity access management (IAM), is used to manage authentication and authorization of account creation and login process for public facing applications. Marketers want to collect data about customers and their devices.

CSO 80

CSO Data collection Marketing Accountability 80