CyberSecurity Insiders

AUGUST 20, 2021

China has made some amendments to the existing laws and passed a new document that discloses several provisions on how automobile companies need to collect their user data as per the stated stipulations.

Manufacturing 142

Manufacturing Data collection Media Risk 142

Schneier on Security

SEPTEMBER 8, 2022

The special master at times seemed in disbelief, as when he questioned the engineers over whether any documentation existed for a particular Facebook subsystem. “Someone must have a diagram that says this is where this data is stored,” he said, according to the transcript. ” […].

Engineering 251

Engineering Software Data collection 251

CyberSecurity Insiders

NOVEMBER 2, 2021

From now on, the Mark Zuckerberg’s led company faced a lawsuit against its facial recognition related data collection early this year. FB made a step forward by offering a settlement of $650 million to a data advocacy group that filed a legal suit against the use of FacioMetrics technology acquired by FB in 2016.

Artificial Intelligence 123

Artificial Intelligence Data collection Media Technology 123

Centraleyes

APRIL 18, 2024

The Vital Role of Audit Evidence Audit evidence is the backbone of any audit process, offering tangible documentation and proof of an organization’s adherence to established cybersecurity measures. The audit includes reviewing risk analysis, data access controls, encryption procedures, and physical security controls.

Risk 52

Risk Penetration Testing Encryption Cybersecurity 52

Centraleyes

MARCH 25, 2024

Centraleyes collects real-time threat intelligence from various sources, providing unparalleled visibility into potential vulnerabilities and gaps. The platform goes beyond data collection by automatically generating actionable remediation tasks with intelligent prioritization and efficient management.

Risk 111

Risk Data collection Architecture Government 111

Krebs on Security

DECEMBER 20, 2022

Those who received higher amounts likely spent more time documenting actual losses and/or explaining how the breach affected them personally. Americans currently have no legal right to opt out of this data collection and trade.

Identity Theft 252

Identity Theft Data breaches Data collection Hacking 252

Security Affairs

DECEMBER 10, 2020

The threat actors used lures consisted of documents about Sinopharm International Corporation, a pharmaceutical company involved in the development of a COVID-19 vaccine and that is currently going through phase three clinical trials. Zebrocy is mainly used against governments and commercial organizations engaged in foreign affairs.

Malware 100

Malware Phishing Government Data collection 100

CyberSecurity Insiders

AUGUST 27, 2022

Nisos analysts actively remove PII through legally protected opt-out procedures on public and private data broker sites, add relevant addresses and phone numbers to do-not-call lists, and remove contact details from mailing lists. Nisos also documents any remaining PII that couldn’t be removed. their needs.

Risk 136

Risk Media Data collection Security Intelligence 136

Schneier on Security

JANUARY 21, 2022

MY2022 is fairly straightforward about the types of data it collects from users in its public-facing documents. However, as the app collects a range of highly sensitive medical information, it is unclear with whom or which organization(s) it shares this information.

Surveillance 330

Surveillance Encryption Wireless Government 330

Security Affairs

FEBRUARY 20, 2022

The Threat Report Portugal: Q4 2021 compiles data collected on the malicious campaigns that occurred from July to September, Q4, of 2021. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 83

Threat Reports Phishing Banking Malware 83

Security Affairs

JULY 22, 2021

The Threat Report Portugal: Q1 2021 compiles data collected on the malicious campaigns that occurred from April to June, Q2, of 2021. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 113

Threat Reports Phishing Malware Banking 113

SecureWorld News

OCTOBER 8, 2020

In addition to a meticulous evaluation of individual work performance, the data collected in this way were used, among other things, to obtain a profile of the employees for measures and decisions in the employment relationship. The company followed suit and submitted a data set of around 60 gigabytes for analysis.

Data collection 86

Data collection Data privacy Retail Education 86

Security Affairs

MAY 2, 2021

The Threat Report Portugal: Q1 2021 compiles data collected on the malicious campaigns that occurred from January to March, Q1, of 2021. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 81

Threat Reports Phishing Malware Data collection 81

Malwarebytes

MARCH 14, 2024

And a former executive at TikTok’s parent company ByteDance claimed in court documents that the Chinese Communist Party (CCP) had access to TikTok data , despite the data being stored in the US. The EFF argues that the bill will not stop the sharing of data but it will reduce online rights in a way that is unconstitutional.

Identity Theft 101

Identity Theft Government Media Data collection 101

Security Affairs

MARCH 1, 2020

The documents also revealed the existence of other spy bases located in secret places identified with codes “TIMPANI”, “GUITAR” and “CLARINET”. The documents mention a clandestine program, coded as RAMPART-A , which was conducted with secret arrangements of other intelligence agencies.

Wireless 123

Wireless Surveillance Telecommunications Advertising 123

Security Affairs

NOVEMBER 14, 2021

The Threat Report Portugal: Q3 2021 compiles data collected on the malicious campaigns that occurred from July to September, Q3, of 2021. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 78

Threat Reports Phishing Malware Banking 78

Security Affairs

JULY 4, 2022

The Threat Report Portugal: Q2 2022 compiles data collected on the malicious campaigns that occurred from March to June, Q2, 2022. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 75

Threat Reports Phishing Banking Malware 75

Krebs on Security

OCTOBER 31, 2022

Authorities soon tracked Sokolvsky’s phone through Germany and eventually to The Netherlands, with his female companion helpfully documenting every step of the trip on her Instagram account. gov — that allows visitors to check whether their email address shows up in the data collected by the Raccoon Stealer service.

Malware 299

Malware Identity Theft Cybercrime Accountability 299

Thales Cloud Protection & Licensing

APRIL 17, 2024

There are several key strategies for organizations to navigate this complex landscape: Secure Model Development and Deployment: Implement robust security measures throughout the AI lifecycle, from data collection and model training to deployment and monitoring. Consent management is also considered critical.

Risk 71

Risk Data collection Artificial Intelligence Accountability 71

Security Affairs

MAY 23, 2024

The messages use specially crafted archives containing LNK files disguised as regular documents. ” The threat actors used both custom malware and off-the-shelf tools to gather sensitive data from victim machines. When clicked, the LNK files would execute malicious commands.

Malware 103

Malware Accountability Phishing Data collection 103

Centraleyes

MAY 5, 2024

The Promise of Automated Risk Assessments Risk management automation uses automated risk assessment tools to orchestrate and automate the data collection process, analysis, and ongoing remediation of cybersecurity controls according to a selected risk framework during a risk assessment.

Risk 52

Risk Data collection Cyber Risk Cybersecurity 52

Schneier on Security

SEPTEMBER 26, 2019

While it's unlikely that China would bother spying on commuters using subway cars, it would be much less surprising if a tech company offered free Internet on subways in exchange for surveillance and data collection. That's an easier, and more fruitful, attack path.

Surveillance 218

Surveillance Wireless Government Internet 218

CyberSecurity Insiders

MAY 2, 2023

It amends the 2018 California Consumer Privacy Act (CCPA) introduced in response to rising consumer data privacy concerns. It has significantly impacted data collection and handling practices, giving consumers more control over how businesses handle their data. How does CPRA impact business operations?

Data collection 52

Data collection Data breaches Password Management Data privacy 52

Security Boulevard

APRIL 17, 2024

There are several key strategies for organizations to navigate this complex landscape: Secure Model Development and Deployment: Implement robust security measures throughout the AI lifecycle, from data collection and model training to deployment and monitoring. Consent management is also considered critical.

Risk 69

Risk Data collection Artificial Intelligence Accountability 69

Centraleyes

MARCH 27, 2024

Leveraging automated risk management platforms can streamline compliance efforts, automating data collection, generating remediation tasks, and providing comprehensive reporting of outcomes to measure progress effectively. Support : Providing resources, competence, awareness, communication, and documented information.

Artificial Intelligence 52

Artificial Intelligence Risk Data collection Technology 52

Security Affairs

JULY 12, 2021

For the third time in the past four months, LinkedIn seems to have experienced another massive data scrape conducted by a malicious actor. Once again, an archive of data collected from hundreds of millions of LinkedIn user profiles surfaced on a hacker forum, where it’s currently being sold for an undisclosed sum.

Social Engineering 136

Social Engineering Data collection Media Passwords 136

eSecurity Planet

JUNE 8, 2022

Rapid7’s online documentation is very thorough, and their knowledge base articles helped us navigate a few configuration hiccups we ran into along the way. Once you are ready to install the collector role, first log into the InsightIDR portal : From the menu on the left side of the screen, click Data Collection.

DNS 107

DNS Data collection Marketing Passwords 107

Security Affairs

AUGUST 14, 2020

The Threat Report Portugal: Q2 2020 compiles data collected on the malicious campaigns that occurred from April to Jun, Q2, of 2020. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 122

Threat Reports Phishing Banking Malware 122

Google Security

MAY 5, 2023

Preliminary, qualitative data collected from user research also indicates that users already perceive this convenience as the key value of passkeys. On average, a user can successfully sign in within 14.9 seconds, while it typically takes twice as long to sign in with passwords (30.4 seconds, as seen in Figure 2 below).

Authentication 118

Authentication Passwords Technology Password Management 118

Security Affairs

OCTOBER 11, 2020

Data collected by the agency is used by the federal government to allocate over $675 billion in federal funds to tribal, local, and state governments every year. The document warns of destructive attacks against U.S. critical infrastructure.

Government 138

Government Advertising Data collection Hacking 138

Malwarebytes

JUNE 8, 2022

In reality, this level of data collection is not as uncommon as is being suggested. The app collects how much data? Despite an FAQ claiming tracking only takes place “with the app open”, reporter James McCleod submits a request under Canada’s Personal Information protection and Electronic Documents Act.

Mobile 103

Mobile Data collection Advertising Marketing 103

Security Affairs

APRIL 6, 2023

The Threat Report Portugal: H2 2022 compiles data collected on the malicious campaigns that occurred from July to December, H2, 2022. The Portuguese Abuse Open Feed 0xSI_f33d is an open-sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 76

Threat Reports Phishing Malware Banking 76

Security Affairs

DECEMBER 19, 2018

Researchers noticed that in all the attacks threat actors used decoy documents that have the same author name Joohn. The delivery documents used in the October and November waves shared a large number of similarities, which allowed us to cluster the activity together. reads the analysis published by Palo Alto Networks.

Malware 85

Malware Advertising Data collection Phishing 85

SecureList

OCTOBER 18, 2023

Each phishing document contains an external link to fetch a remote page containing a CVE-2021-26411 exploit. The attackers continued to send malicious documents via email until the end of September 2022. Overall, the campaign remained active over 6 months, until May 2023.

Malware 104

Malware Phishing Internet Internet 104

Approachable Cyber Threats

AUGUST 2, 2021

Users must be better protected from the outset, and the only way to ensure that is to impose significant restrictions on data collection and usage by companies seeking to monetize or use it to their asymmetric benefit in any way.

Data collection 98

Data collection Media Mobile Identity Theft 98

SecureWorld News

JANUARY 4, 2024

This data can be used to gauge turnover risk, assess the need for new positions, and evaluate employee productivity and workplace engagement. UAM tools also greatly help ensure data security. On the flip side, employees often lack access to the data collected by UAM solutions.

Data collection 100

Data collection Artificial Intelligence Surveillance Risk 100

Security Affairs

JULY 30, 2020

The attackers sent out spear-phishing emails using boobytrapped documents leveraging the fake job offer as bait. “The data collected from the target machine could be useful in classifying the value of the target. ” states the report published by the experts.

Advertising 95

Advertising Data collection Malware Phishing 95