Schneier on Security

DECEMBER 19, 2023

We risk letting companies get away with real misconduct because we incorrectly believed in conspiracy theories. More importantly, we need to be able to trust companies to honestly and clearly explain what they are doing with our data. On a personal level we risk losing out on useful tools.

Government 335

Government Banking Risk Internet 335

Krebs on Security

MAY 18, 2022

for “deceptive statements” the company and its founder allegedly made over how they handle facial recognition data collected on behalf of the Internal Revenue Service , which until recently required anyone seeking a new IRS account online to provide a live video selfie to ID.me. would be permanently deleted.

Government 295

Government Accountability Surveillance Data collection 295

Malwarebytes

AUGUST 20, 2024

We will hold them accountable.” The AG accuses GM of installing technology that allegedly improves the safety, functionality, and operability of its vehicles, but at the same time this technology gathers driving data about the vehicle’s usage. On top of that, GM gathered data through other products like its mobile apps.

Insurance 104

Insurance Accountability Data collection Surveillance 104

Joseph Steinberg

APRIL 20, 2021

In some cases, Voice-over-IP numbers are not acceptable as cellphone numbers either – meaning that registrants must increase their cyber-risk by providing their actual cellphone numbers to a party that has offered no information about how that data will be protected. Provide as little information as possible to vaccinators.

Healthcare 233

Healthcare Insurance Computers and Electronics Data collection 233

Adam Levin

JUNE 24, 2020

269 gigabytes of potentially sensitive data collected from more than 200 police departments across the country were leaked online last week. Among the hundreds of thousands of documents are police and FBI reports, bulletins, guides and more,” DDoSecrets announced on its Twitter feed (Twitter has since banned the DDoSecrets account).

Data collection 189

Data collection VPN Accountability Risk 189

Zero Day

JUNE 22, 2025

Close Home Tech Security 16 billion passwords leaked across Apple, Google, more: What to know and how to protect yourself Wondering if your information is posted online from a data breach? Here's how to check if your accounts are at risk and what to do next. In this scenario, there is not much you can do. 

Passwords 100

Passwords Data breaches Password Management Accountability 100

Krebs on Security

JULY 18, 2022

Highlighting the risk that 911 nodes could pose to internal corporate networks, they observed that “the infection of a node enables the 911.re However there are two cybercriminal identities on the forums that have responded to individual 911 help requests, and who promoted the sale of 911 accounts via their handles. ”

VPN 358

VPN Computers and Electronics Antivirus Software 358

Zero Day

JUNE 20, 2025

Here are the facts and how to protect yourself Wondering if your information is posted online from a data breach? Here's how to check if your accounts are at risk and what to do next. PT Moor Studio/Getty With so much news about data breaches, you have to be careful not to panic each time you hear of a new one.

Passwords 106

Passwords Data breaches Password Management Identity Theft 106

Centraleyes

NOVEMBER 9, 2024

The Delaware Personal Data Privacy Act (DPDPA) is a state law created to protect the privacy of Delaware residents by regulating the collection, use, storage, and sharing of personal data by businesses. These protections extend to sensitive data such as health, financial, and biometric information.

Data privacy 52

Data privacy Data collection Risk Accountability 52

Troy Hunt

NOVEMBER 25, 2020

The vulnerability Context Security discovered meant exposing the Wi-Fi credentials of the network the device was attached to, which is significant because it demonstrates that IoT vulnerabilities can put other devices on the network at risk as well. Are these examples actually risks in IoT?

IoT 363

IoT Firmware Risk Encryption 363

Security Affairs

AUGUST 3, 2024

“According to the complaint, from 2019 to the present, TikTok knowingly permitted children to create regular TikTok accounts and to create, view, and share short-form videos and messages with adults and others on the regular TikTok platform. ” reads the press release published by DoJ.

Accountability 128

Accountability Data collection Risk Hacking 128

Security Affairs

JULY 12, 2021

For the third time in the past four months, LinkedIn seems to have experienced another massive data scrape conducted by a malicious actor. Once again, an archive of data collected from hundreds of millions of LinkedIn user profiles surfaced on a hacker forum, where it’s currently being sold for an undisclosed sum.

Social Engineering 144

Social Engineering Data collection Media Passwords 144

BH Consulting

MARCH 26, 2025

This rapid transformation creates a challenge for boards tasked with balancing emerging risks and strategic opportunities. It introduces accountability measures for large platforms, and strengthens users’ rights. The Data Act enhances access to and use of non-personal data across sectors.

Government 52

Government Artificial Intelligence Risk Digital transformation 52

Troy Hunt

DECEMBER 20, 2017

All I know at this point is that a website is leaking customer data that puts both the customers and the site owners themselves at risk. I looked at their Twitter account and there'd been no action for years so I wasn't going to get any traction there. Now think about this for a moment - what's the outcome we all want?

Data breaches 258

Data breaches Risk Accountability Data collection 258

IT Security Guru

AUGUST 7, 2024

Additionally, by respecting individual preferences and giving them control over their data, businesses can foster better relationships with their users and show their commitment to privacy and data protection. This proactive approach helps mitigate security risks and safeguard sensitive customer data.

Insurance 124

Insurance Data collection Authentication Technology 124

Centraleyes

DECEMBER 11, 2024

These include: Cybersecurity Risk Assessment: Organizations must perform a comprehensive risk assessment to identify potential vulnerabilities in their operations. Awareness and Training: Employees across all levels must be trained on cybersecurity best practices to minimize human-related risks.

Risk 52

Risk Penetration Testing Cybersecurity Digital transformation 52

Centraleyes

APRIL 17, 2025

For example, requiring managerial approval for large transactions or implementing strict system access restrictions ensures that risks are mitigated at the outset. If controls are applied haphazardly, poorly monitored, or lack standardization, financial reporting risks still persist. Where Does COSO Fit In?

Risk 52

Risk Technology Accountability Cybersecurity 52

Thales Cloud Protection & Licensing

APRIL 17, 2024

A Pandora's Box: Unpacking 5 Risks in Generative AI madhav Thu, 04/18/2024 - 05:07 Generative AI (GAI) is becoming increasingly crucial for business leaders due to its ability to fuel innovation, enhance personalization, automate content creation, augment creativity, and help teams explore new possibilities.

Risk 71

Risk Data collection Artificial Intelligence Accountability 71

Security Boulevard

APRIL 17, 2024

A Pandora's Box: Unpacking 5 Risks in Generative AI madhav Thu, 04/18/2024 - 05:07 Generative AI (GAI) is becoming increasingly crucial for business leaders due to its ability to fuel innovation, enhance personalization, automate content creation, augment creativity, and help teams explore new possibilities.

Risk 69

Risk Data collection Artificial Intelligence Accountability 69

CSO Magazine

NOVEMBER 28, 2022

Customer identity and access management (CIAM), a subset of identity access management (IAM), is used to manage authentication and authorization of account creation and login process for public facing applications. Marketers want to collect data about customers and their devices.

CSO 80

CSO Data collection Marketing Accountability 80

Thales Cloud Protection & Licensing

JULY 11, 2019

The GDPR applies to businesses that collect and use personal information from citizens of the EU, regardless of where the business itself is located. The GDPR mandates that a business must inform EU DPAs very quickly (within 72 hours) and thoroughly of any security data breach involving European citizens. Data Mapping Analysis.

Risk 97

Risk Encryption Accountability Government 97

Security Affairs

APRIL 22, 2019

The experts also observed a significant increase in the number of unique bots and trolls (+48%) from the previous day, a circumstance that suggests the involvement of an army of dormant Twitter bot accounts previously created. Data collected by SafeGuard confirm the intensification of the presence of Russian bots on Twitter.

Advertising 103

Advertising Data collection Accountability Media 103

Hot for Security

MARCH 17, 2021

If you were a victim of the Zynga data breach, you’ve probably changed the password for your account already. But have you considered resetting the passwords for any online accounts with similar login credentials? But we can’t always rely on companies to protect our data for various reasons, including human error.

Data breaches 105

Data breaches Passwords Accountability Media 105

SecureWorld News

AUGUST 15, 2024

In what could be one of the largest data breaches in history, personal information of potentially billions of individuals may have been compromised in a hack of National Public Data (NPD), a Florida-based background check company. Use complex, unique passwords for all accounts and consider using a password manager.

Data breaches 109

Data breaches Identity Theft Password Management Data collection 109

Malwarebytes

JULY 29, 2024

At Malwarebytes, we reported how a team of researchers at Mozilla who reviewed the privacy and data collection policies of various product categories for several years now, named “Privacy Not Included,” found cars to be the worst product category they ever reviewed for privacy.

Insurance 111

Insurance Data collection Data breaches Manufacturing 111

Troy Hunt

DECEMBER 17, 2017

This is due to mistakes in the code (usually non-parameterised SQL queries) and to this day, it remains the number one risk in the OWASP Top 10. The Red Cross Blood Service breach gave us our largest ever incident down here in Australia (and it included data on both my wife and I). "god rights").

Data breaches 247

Data breaches Education Penetration Testing Passwords 247

The Last Watchdog

APRIL 22, 2020

PAM governs a hierarchy of privileged accounts all tied together in a Windows Active Directory ( AD ) environment. It didn’t take cyber criminals too long to figure out how to subvert PAM and AD – mainly by stealing or spoofing credentials to log on to privileged accounts. But SSO proved to be a boon for intruders, as well.

Accountability 138

Accountability Authentication Digital transformation Passwords 138

SecureList

OCTOBER 13, 2023

This article delves deep into the settings and privacy policies of LLM-based chatbots to find out how they collect and store conversation histories, and how office workers who use them can protect or compromise company and customer data. The user creates an account and gains access to the bot. Account hacking.

Accountability 138

Accountability B2B Risk Hacking 138

Centraleyes

MAY 27, 2024

By identifying and mitigating security vulnerabilities, implementing robust controls, and preparing for potential threats, this assessment empowers organizations to confidently leverage AI technologies while protecting their data and maintaining trust. What are the requirements for AI Governance?

Government 110

Government Risk Technology Data collection 110

SecureWorld News

JULY 18, 2024

By providing a transparent view of what's inside the software, an SBOM helps organizations manage and mitigate security risks. "As They're like a cybersecurity X-ray, giving us clear visibility into the DNA of our software," said Kip Boyle , vCISO, Cyber Risk Opportunities LLC. dev and this can change what the risk is.

Software 109

Software Risk Artificial Intelligence Accountability 109

Security Affairs

SEPTEMBER 17, 2024

The report provides insights into factors influencing user consent for data collection and usage and reasons for consumer disengagement. Consumers want detailed control over their information and the flexibility to adjust their consent based on various factors, such as the context of the interaction or perceived risks of data misuse.

Data collection 115

Data collection Data privacy B2B Digital transformation 115

NetSpi Executives

NOVEMBER 6, 2024

It’s an aggregator of data – collecting, ingesting, and deduplicating it to deliver a single comprehensive view about assets and their contextual relationships. This data is then used to identify potential exposures and coverage gaps across the entire asset landscape, including risks that relate to their interconnection.

Risk 52

Risk Technology Penetration Testing Cyber threats 52

Malwarebytes

SEPTEMBER 20, 2024

The conclusions seemed to upset the FTC, but we weren’t even mildly surprised: “The amount of data collected by large tech companies is simply staggering. The technology powering this ecosystem took place behind the scenes and out of view to consumers, posing significant privacy risks.

Surveillance 121

Surveillance Media Data collection Advertising 121

BH Consulting

AUGUST 31, 2023

When we think about social media, we think about the nice side of it: staying in touch with friends and family, getting updates about our interests – but the more active we are on it, the more risk we’re exposed to. The more exposed we are in the online space, the more potential there is for risk to a business. More than 4.7

Media 52

Media Accountability Authentication Passwords 52

Krebs on Security

OCTOBER 12, 2018

TS: The government still has regular meetings on supply chain risk management, but there are no easy answers to this problem. The attacker in this case has a risk model, too. The attacker in this case has a risk model, too. Yes, he could put something in the circuitry or design, but his risk of exposure also goes up.

Computers and Electronics 244

Computers and Electronics Internet Internet Technology 244

Malwarebytes

MAY 22, 2024

On Monday, the computing giant unveiled a new line of PCs that integrate Artificial Intelligence (AI) technology to promise faster speeds, enhanced productivity, and a powerful data collection and search tool that screenshots a device’s activity—including password entry—every few seconds.

Artificial Intelligence 111

Artificial Intelligence Passwords Accountability Media 111

Security Affairs

MAY 12, 2021

After the introduction of CCPA and GDPR, much more attention is given to third-party risks, and the privacy terms and conditions users agree to. Global privacy regulations, such as the CCPA and GDPR, were enacted to ensure stricter standards when handling the personal data of consumers. Data Protection.

Data breaches 108

Data breaches Data collection Risk VPN 108