Krebs on Security

MARCH 20, 2023

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device — unless and until you affirmatively opt out of this data collection.

Mobile 274

Mobile Wireless Advertising Telecommunications 274

Security Affairs

DECEMBER 23, 2023

Our investigation indicates that certain information associated with your account was impacted.” ” reads the data breach notification email sent to the impacted customers. “Mint’s data collection policy is one of the most important ways in which we ensure the privacy and security of our subscribers.

Mobile 102

Mobile Data breaches Wireless Data collection 102

Joseph Steinberg

JANUARY 18, 2024

Some such cancellations occurred prior to the retailer sending me any email confirmation of the associated transactions, but, in some cases, the retailer cancelled the associated sale after not only confirming by email the purchase, but also after having charged my credit card and waiting for the associated debit to post to my account.

Data collection 228

Data collection Retail Scams Artificial Intelligence 228

Schneier on Security

SEPTEMBER 15, 2023

Where possible, favor openness and transparency over aggressive data collection or restrictions which erode civil liberties. Privacy Rights – Pervasive monitoring and data collection erode privacy rights and dignity. Focus only on proportional responses. Surveillance creep risks violating autonomy.

Data collection 169

Data collection Risk Surveillance Manufacturing 169

Krebs on Security

OCTOBER 31, 2022

Justice Department , FBI agents have identified more than 50 million unique credentials and forms of identification (email addresses, bank accounts, cryptocurrency addresses, credit card numbers, etc.) A selfie pulled from Mark Sokolovsky’s iCloud account. Working with investigators in Italy and The Netherlands, U.S.

Malware 274

Malware Identity Theft Cybercrime Accountability 274

Schneier on Security

NOVEMBER 9, 2018

The boundaries between research and grey data are blurring, making it more difficult to assess the risks and responsibilities associated with any data collection. Many sets of data, both research and grey, fall outside privacy regulations such as HIPAA, FERPA, and PII.

Data collection 204

Data collection Cyber Risk Risk Government 204

CSO Magazine

NOVEMBER 28, 2022

Customer identity and access management (CIAM), a subset of identity access management (IAM), is used to manage authentication and authorization of account creation and login process for public facing applications. Marketers want to collect data about customers and their devices.

CSO 80

CSO Data collection Marketing Accountability 80

The Last Watchdog

MAY 21, 2020

The idea was that by fingerprinting devices used to connect to the internet we could achieve better accountability. Fingerprinting is considered a necessary practice to fight challenges such as fake accounts and the misuse of internet services. However, online fingerprinting is also being used to track users.

Advertising 288

Advertising Internet Internet Accountability 288

Malwarebytes

OCTOBER 4, 2022

Meta's near-omnipresence wherever you are online enabled it to gather data on users, even those who don't have Facebook accounts—thanks, in part, to the Facebook "Like" button, a piece of code embedded on most websites. Something similar happens to users who are either logged out of Facebook or don't have an account.

Data collection 98

Data collection Advertising Accountability Technology 98

Thales Cloud Protection & Licensing

JULY 3, 2023

madhav Tue, 07/04/2023 - 05:10 As the data trust gap between customers and businesses continue to grow, and as third-party cookies become redundant, there is an urgency to adopt a modernized approach to customer data collection. Progressive profiling introduces a fresher and far more proactive take on data collection.

Data collection 62

Data collection B2C B2B Retail 62

Security Affairs

FEBRUARY 13, 2024

The data collected unearthed a total of 1771 ransomware claims, with 55 recorded incidents in Italy. This report offers an exhaustive account of ransomware threats in the third quarter of 2023, spotlighting activities monitored by the OSINT Ransomfeed platform. Let us now delve into the detailed breakdown of the days.

Ransomware 97

Ransomware Data collection Hacking Cybersecurity 97

Security Affairs

NOVEMBER 23, 2022

Researchers discovered that analytics data associated with iPhone include Directory Services Identifier (DSID) that could allow identifying users. Researchers at software company Mysk discovered that analytics data collected by iPhone include the Directory Services Identifier (DSID), which could allow identifying users.

Data collection 130

Data collection Accountability Hacking Software 130

Centraleyes

MARCH 27, 2024

The standard provides guidelines for governing and managing AI technologies, ensuring accountability, transparency, and data privacy throughout the AI lifecycle. In summary, ISO 42001 compliance fosters responsible and accountable AI management, positioning organizations for long-term success in the AI landscape.

Artificial Intelligence 52

Artificial Intelligence Risk Data collection Technology 52

Security Boulevard

JANUARY 16, 2024

Put into context, it would make little sense to use a privacy-oriented browser and all the features such a browser may have to offer, but continue to reuse passwords across online accounts. It’s also viable to implement this guide and the cybersecurity one at the same time for simultaneous improvement for your privacy and security!

Accountability 109

Accountability Engineering Passwords Internet 109

Malwarebytes

JANUARY 25, 2024

The threat actor is abusing Google advertiser accounts to create malicious ads and pointing them to pages where unsuspecting users will download Remote Administration Trojan (RATs) instead. While we don’t know the threat actor’s true intentions, data collection and spying may be one of their motives.

Malware 106

Malware Advertising Accountability Encryption 106

Cytelligence

DECEMBER 8, 2023

It heightens our awareness of extensive data collection about us, revealing potential uses and instigating concerns about potential misuse. Privacy policies from these tech giants, while intricate, are crucial in understanding the data collected and its uses. The impact of Big Tech on privacy is multifaceted.

Data collection 59

Data collection Ransomware Advertising Risk 59

Security Affairs

DECEMBER 30, 2020

T-Mobile has disclosed a data breach exposing customers’ account’s information. “We are reaching out to let you know about a security incident we recently identified and quickly shut down that may have impacted some of your T-Mobile account information.”

Data breaches 126

Data breaches Mobile Telecommunications Wireless 126

Security Affairs

JULY 12, 2021

For the third time in the past four months, LinkedIn seems to have experienced another massive data scrape conducted by a malicious actor. Once again, an archive of data collected from hundreds of millions of LinkedIn user profiles surfaced on a hacker forum, where it’s currently being sold for an undisclosed sum.

Social Engineering 133

Social Engineering Data collection Media Passwords 133

Malwarebytes

JANUARY 18, 2021

You can also visit the Help Center if you would prefer to delete your account. The key focus of concern around the update, was how data would be shared going forward. Simply by having to explain the differences between forms of messaging, data collection is thrown into sharp relief. But now you do. Decisions, decisions.

Data collection 75

Data collection Encryption Accountability Passwords 75

Adam Levin

JUNE 24, 2020

269 gigabytes of potentially sensitive data collected from more than 200 police departments across the country were leaked online last week. Among the hundreds of thousands of documents are police and FBI reports, bulletins, guides and more,” DDoSecrets announced on its Twitter feed (Twitter has since banned the DDoSecrets account).

Data collection 189

Data collection VPN Accountability Risk 189

Security Affairs

NOVEMBER 15, 2022

“Google misled its users into thinking they had turned off location tracking in their account settings, when, in fact, Google continued to collect their location information. Location data represent the core of the digital advertising business of the IT giant. ” reads the DoJ’s press release. not hidden); and.

Consumer Protection 80

Consumer Protection Accountability Data collection Advertising 80

Adam Levin

DECEMBER 3, 2018

The data is thought to have originated from Data&Leads, Inc. A cached version of the company’s website shows that it promised “access to our massive in-house data collection, as well as one of the largest data supplier networks of any data or lead company.”. The takeaway?

Identity Theft 194

Identity Theft Data collection Engineering Passwords 194

Malwarebytes

JUNE 6, 2023

Microsoft is counting the cost of privacy violations, with $20m in fines related to illegal data collection from children’s Xbox accounts. Microsoft was holding on to that data even in situations where the account didn’t complete the registration process.

Accountability 87

Accountability Advertising Data collection Manufacturing 87

Schneier on Security

DECEMBER 19, 2023

More importantly, we need to be able to trust companies to honestly and clearly explain what they are doing with our data. How many people cancelled their Dropbox accounts in the last 48 hours? And while Dropbox is not sending your data to OpenAI today, it could do so tomorrow with a simple change of its terms of service.

Government 247

Government Banking Risk Internet 247

Thales Cloud Protection & Licensing

MAY 31, 2022

To that effect, TCS, Global leader in cyber security services, and Thales recently announced a partnership offering a one-stop solution for data privacy that organisations leverage to manage this complexity and help reach compliance. Accountability and delegated responsibility. Implementing privacy. Glocal” expertise, global and local.

Data privacy 71

Data privacy Digital transformation Accountability Data collection 71

Security Affairs

NOVEMBER 3, 2020

The scripts developed by the cyber criminal were used to parse log data collected from botnet and searched for personally identifiable information (PII) and account credentials. In some cases, the man manually chacked the stolen information. ” reads the press release published by the DoJ.

Accountability 95

Accountability Banking Advertising Data collection 95

Security Affairs

NOVEMBER 27, 2021

Italy’s antitrust regulator has fined both Apple and Google €10 million each for what it calls are “aggressive” data practices and not providing consumers with clear information on commercial uses of their personal data during the account creation phase. ” reads the press release published by the AGCM.

Data collection 80

Data collection Accountability Hacking Information Security 80

The Last Watchdog

MAY 26, 2021

Related: Credential stuffing fuels account takeovers. While changing passwords may be inconvenient at times, following this password best practice can help prevent the following data catastrophes: •Giving hackers easy access to your most sensitive accounts (avoid this problem by steering clear of insecure methods such as HTTP or public Wi-F.

Passwords 134

Passwords Password Management Accountability Authentication 134

Security Affairs

DECEMBER 29, 2023

Altogether, Meduza makes a great competitor to Azorult , Redline , Racoon , and Vidar Stealer used by cybercriminals for account takeover (ATO), online-banking theft, and financial fraud. The author behind Meduza distributed the following notification about the update on multiple underground communities and Telegram group: Attention!

Password Management 117

Password Management Cryptocurrency Passwords Authentication 117

Hot for Security

MARCH 17, 2021

If you were a victim of the Zynga data breach, you’ve probably changed the password for your account already. But have you considered resetting the passwords for any online accounts with similar login credentials? These data sets may include IP addresses, operating systems, browser type, game time and web page interactions.

Data breaches 105

Data breaches Passwords Accountability Media 105

Malwarebytes

MAY 23, 2023

Practices highlighted included “hard to find” location settings, misleading descriptions of location settings, and “repeated nudging” to enable location settings alongside incomplete disclosures of Google’s location data collection.

Advertising 96

Advertising Accountability Data collection Engineering 96

Identity IQ

FEBRUARY 2, 2022

The CFPB issued orders to BNPL apps Affirm, Afterpay, Klarna, PayPal and Zip to explain how they gather detailed information about consumers´ shopping behavior, fees, loan performance, users´ demographics, data collection and other elements of their business models. The companies have until March 1 to send the information to the CFPB.

Identity Theft 119

Identity Theft Consumer Protection Data collection Accountability 119

Security Affairs

APRIL 6, 2023

User personal data for sale. Crooks offers data collected through phishing campaign to the subscribers. Data includes verified online banking credentials, in some cases phishers also provides info on the account balances. ” continues the analysis. ” Phishing-as-a-Service. .

Phishing 87

Phishing Scams Social Engineering Banking 87

Security Affairs

JANUARY 2, 2023

Google misled its users into thinking they had turned off location tracking in their account settings, when, in fact, Google continued to collect their location information. According to the article, there are two settings responsible for the location data collection, the “Location History” and “Web & App Activity”.

Consumer Protection 86

Consumer Protection Surveillance Data collection Accountability 86

Security Affairs

SEPTEMBER 1, 2023

“In one case, we observed a SapphireStealer sample where the data collected using the previously described process was exfiltrated using the Discord webhook API, a method we previously highlighted here.” The FUD-Loader malware downloader was also published by the same GitHub account. ” continues the report.

Malware 96

Malware Data collection Architecture Hacking 96

Security Affairs

OCTOBER 17, 2023

’ The CERT-UA also reported that the state-sponsored hackers used compromised VPN accounts that weren’t protected by multi-factor authentication. Authentication data collected by POEMGATE can be used for lateral movement and other malicious activities on the compromised networks. “Note (!)

Telecommunications 97

Telecommunications Authentication Data collection Passwords 97

CyberSecurity Insiders

MAY 2, 2023

It amends the 2018 California Consumer Privacy Act (CCPA) introduced in response to rising consumer data privacy concerns. It has significantly impacted data collection and handling practices, giving consumers more control over how businesses handle their data. How does CPRA impact business operations?

Data collection 52

Data collection Data breaches Password Management Data privacy 52