Windscribe Acquitted on Charges of Not Collecting Users’ Data
Schneier on Security
APRIL 28, 2025
The case centred around a Windscribe-owned server in Finland that was allegedly used to breach a system in Greece.
Web 3.0 Requires Data Integrity
Schneier on Security
APRIL 3, 2025
It’s also making sure that data is accurate when it’s collected—that it comes from a trustworthy source, that nothing important is missing, and that it doesn’t change as it moves from format to format. The CIA triad has evolved with the Internet. the Internet of today. This is Web 2.0:
Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Report: Recent 10x Increase in Cyberattacks on Ukraine
Krebs on Security
MARCH 11, 2022
As their cities suffered more intense bombardment by Russian military forces this week, Ukrainian Internet users came under renewed cyberattacks, with one Internet company providing service there saying they blocked ten times the normal number of phishing and malware attacks targeting Ukrainians.
DNS 
338
338 
Poland and Lithuania fear that data collected via FaceApp could be misused
Security Affairs
JULY 19, 2019
Many security experts are warning of the risks of using the popular app, threat actors could be potentially interested in data collected by FaceApp. The post Poland and Lithuania fear that data collected via FaceApp could be misused appeared first on Security Affairs. Pierluigi Paganini.
Data collection 111
111 
Malwarebytes acquires AzireVPN to fuel additional VPN features and functionalities
Malwarebytes
NOVEMBER 7, 2024
They will continue to enjoy our streamlined, integrated user experience, and our no-log service will never track, store, or share any user network data. AzireVPN customers will also continue to enjoy the same privacy-focused VPN service – no logs, no data collection, no bandwidth limitations. I’m so excited about our future.
VPN 139
139 
MY TAKE: ‘Network Detection and Response’ emerges as an Internet of Things security stopgap
The Last Watchdog
APRIL 9, 2020
There’s no stopping the Internet of Things now. Data collected by IoT devices will increasingly get ingested into cloud-centric networks where it will get crunched by virtual servers. Acohido is dedicated to fostering public awareness about how to make the Internet as private and secure as it ought to be. (LW
Internet 195
195 
Differences in App Security/Privacy Based on Country
Schneier on Security
SEPTEMBER 30, 2022
Research paper: “ A Large-scale Investigation into Geodifferences in Mobile Apps “: Abstract : Recent studies on the web ecosystem have been raising alarms on the increasing geodifferences in access to Internet content and services due to Internet censorship and geoblocking.
Mobile 343
343 
Modern Mass Surveillance: Identify, Correlate, Discriminate
Schneier on Security
JANUARY 27, 2020
Once we are identified, the data about who we are and what we are doing can be correlated with other data collected at other times. This might be movement data, which can be used to "follow" us as we move throughout our day. It can be purchasing data, Internet browsing data, or data about who we talk to via email or text.
Surveillance 279
279 
GUEST ESSAY: What everyone should know about the pros and cons of online fingerprinting
The Last Watchdog
MAY 21, 2020
When it was first introduced, device fingerprinting – or online fingerprinting in general – was meant to create a safer, more responsible internet. The idea was that by fingerprinting devices used to connect to the internet we could achieve better accountability. However, online fingerprinting is also being used to track users.
Advertising 290
290 
RSAC Fireside Chat: Jscrambler levels-up JavaScript security, slows GenAI-fueled privacy loss
The Last Watchdog
JUNE 10, 2024
For instance, it helps online tax services prevent leakage of taxpayers’ personal information via pixels, those imperceptible JavaScripts embedded in a web page to collect information about the user’s interactions. For a full drill down, please give the a listen. Acohido Pulitzer Prize-winning business journalist Byron V.
Data collection 261
261 
For months, JusTalk messages were accessible to everyone on the Internet
Malwarebytes
AUGUST 3, 2022
JusTalk, a popular mobile video calling and messaging app with 20 million global users, exposed a massive database of supposedly private messages to the public Internet for months. The open database is a logging database the company, Ningbo Jus Internet Technology , uses to keep track of app bugs and errors.
Internet 100
100 
Why You Should Opt Out of Sharing Data With Your Mobile Provider
Krebs on Security
MARCH 20, 2023
A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device — unless and until you affirmatively opt out of this data collection.
Mobile 316
316 
5G Security
Schneier on Security
JANUARY 14, 2020
Since the internet, especially the "internet of things," is expected to rely heavily on 5G infrastructure, potential Chinese infiltration is a serious national security threat. But keeping untrusted companies like Huawei out of Western infrastructure isn't enough to secure 5G. What's more, U.S.
Data collection 279
279 
A Deep Dive Into the Residential Proxy Service ‘911’
Krebs on Security
JULY 18, 2022
For the past seven years, an online service known as 911 has sold access to hundreds of thousands of Microsoft Windows computers daily, allowing customers to route their Internet traffic through PCs in virtually any country or city around the globe — but predominantly in the United States. THE INTERNET NEVER FORGETS.
VPN 358
358 
Secret Service Investigates Breach at U.S. Govt IT Contractor
Krebs on Security
SEPTEMBER 9, 2019
A review of the screenshots posted to the cybercrime forum as evidence of the unauthorized access revealed several Internet addresses tied to systems at the U.S. Other domains and Internet addresses included in those screenshots pointed to Miracle Systems LLC , an Arlington, Va.
Cybercrime 278
278 
Twitter, Facebook, and Instagram blocked in Turkey as Idlib military crisis escalates
Security Affairs
FEBRUARY 28, 2020
Network data collected by the NetBlocks internet observatory confirm that Turkey has blocked access to social media as Idlib military crisis escalates. The internet censorship measures are the most severe on record there since 2016. ”added Netblocks. It's 5:30 a.m. It's 5:30 a.m.
Media 138
138 
China’s Olympics App Is Horribly Insecure
Schneier on Security
JANUARY 21, 2022
News article : It’s not clear whether the security flaws were intentional or not, but the report speculated that proper encryption might interfere with some of China’s ubiquitous online surveillance tools, especially systems that allow local authorities to snoop on phones using public wireless networks or internet cafes.
Surveillance 360
360 
LLMs and Phishing
Schneier on Security
APRIL 10, 2023
And new mechanisms, from ChatGPT plugins to LangChain , will enable composition of AI with thousands of API-based cloud services and open source tools, allowing LLMs to interact with the internet as humans do. Combine the digital dossiers that data brokers have on all of us with LLMs, and you have a tool tailor-made for personalized scams.
Phishing 339
339 
On Chinese "Spy Trains"
Schneier on Security
SEPTEMBER 26, 2019
Like the United States, China is more likely to try to get data from the US communications infrastructure, or from the large Internet companies that already collect data on our every move as part of their business model. If there's any lesson from all of this, it's that everybody spies using the Internet.
Surveillance 247
247 
Who tracked internet users in 2021–2022
SecureList
NOVEMBER 25, 2022
Certain tech giants recently started adding tools to their ecosystems that are meant to improve the data collection transparency. DNT (disabled by default) is part of Kaspersky Internet Security, Kaspersky Total Security, and Kaspersky Security Cloud. However, not every service provides this kind of warnings.
Internet 100
100 
Browser Guard now flags data breaches and better protects personal data
Malwarebytes
OCTOBER 3, 2024
Two things are true of data online: It will be collected and, just as easily, it will be lost. The notifications will also include direct access to the Malwarebytes Digital Footprint Portal , allowing users to check in real time whether their data was included in any flagged breach.
Data breaches 131
131 
On the 20th Safer Internet Day, what was security like back in 2004?
Malwarebytes
FEBRUARY 6, 2023
Today is the 20th Safer Internet Day. 2004 was a key year for several safety activities, encompassing both Safer Internet Day and the Safer Internet Forum. Was the general state of the Internet at the time so bad that all of these events sprang up almost out of necessity? You may be asking, why 2004?
Internet 90
90 
App cyberattacks jump 137%, with healthcare, manufacturing hit hard, Akamai says
CSO Magazine
APRIL 18, 2023
An analysis of customer data collected by content delivery network and internet services giant Akamai found that attacks targeting web applications rose by 137% over the course of last year, as the healthcare and manufacturing sectors in particular were targeted with an array of API and application-based intrusions.
Manufacturing 125
125 
How to Collect Market Intelligence with Residential Proxies?
Security Affairs
OCTOBER 27, 2023
How residential proxies using real IPs from diverse locations enable businesses to gather comprehensive and accurate data from the web Since the adoption of the first digital tools and connection to the internet, the competitive business environment has revolutionized and transformed the ways modern companies conduct business operations.
Marketing 129
129 
For months, JusTalk messages were accessible to everyone on the Internet
Malwarebytes
AUGUST 3, 2022
JusTalk, a popular mobile video calling and messaging app with 20 million global users, exposed a massive database of supposedly private messages to the public Internet for months. The open database is a logging database the company, Ningbo Jus Internet Technology , uses to keep track of app bugs and errors.
Internet 77
77 
OpenAI Is Not Training on Your Dropbox Documents—Today
Schneier on Security
DECEMBER 19, 2023
There’s a rumor flying around the Internet that OpenAI is training foundation models on your Dropbox documents. Here’s CNBC. Here’s Boing Boing. Some articles are more nuanced , but there’s still a lot of confusion. It seems not to be true. Dropbox isn’t sharing all of your documents with OpenAI.
Government 327
327 
Hiring Kit: Cybersecurity Engineer
Tech Republic Security
OCTOBER 1, 2024
Data collection, whether innocuous machine measurements or sensitive and regulated private information, plays a primary role in practically every business that uses the internet and IT infrastructure for business operations.
Engineering 88
88 
An air fryer, a ring, and a vacuum get brought into a home. What they take out is your data (Lock and Code S05E24)
Malwarebytes
NOVEMBER 18, 2024
While it may be easy to discount the data collection requests of an air fryer app , it is getting harder to buy any type of product today that doesn’t connect to the internet, request your data, or share that data with unknown companies and contractors across the world.
Surveillance 133
133 
Online Tracking: Why Private Browsing Doesn’t Warrant Bulletproof Digital Privacy
Hot for Security
MARCH 25, 2021
It’s not just the big tech giants who gather user data. Online tracking starts whenever you connect to the internet, and your ISP is one of the first entities to collect web traffic once engaged in various activities. Protecting online privacy is a tedious undertaking.
Data collection 116
116 
BrandPost: The state of operational technology and cybersecurity
CSO Magazine
MAY 26, 2023
Today, the convergence of operational technology (OT) and IT networks is accelerating because organizations can use the data collected by physical equipment and Industrial Internet of Things (IIoT) devices to identify issues and increase efficiency.
Technology 103
103 
Shared Intel Q&A: Can risk-informed patching finally align OT security with real-world threats?
The Last Watchdog
JUNE 9, 2025
This is not really a viable option because the amount of manually collected data required to justify not patching is almost impossible to obtain. Our approach lets you develop a mitigation plan,automating the data collection necessary for it. However, I think the standards are long overdue for reform.
Risk 100
100 
Supply Chain Security 101: An Expert’s View
Krebs on Security
OCTOBER 12, 2018
alongside Tony Sager , senior vice president and chief evangelist at the Center for Internet Security and a former bug hunter at the U.S. Tony Sager, senior vice president and chief evangelist at the Center for Internet Security. Earlier this month I spoke at a cybersecurity conference in Albany, N.Y. National Security Agency.
Web Vulnerabilities Up, IoT Flaws Down
Dark Reading
JANUARY 9, 2019
The number of flaws found in WordPress and its associated plugins have tripled since 2017, while Internet of Things vulnerabilities dropped significantly, according to data collected by Imperva.
IoT 83
83 
92% of worldwide Microsoft Exchange IPs are now patched or mitigated
Security Affairs
MARCH 24, 2021
On March 2nd, Microsoft released emergency out-of-band security updates that address four zero-day issues collectively tracked as ProxyLogon (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065) in all supported Microsoft Exchange versions that are actively exploited in the wild.
Data collection 135
135 MY TAKE: Why monetizing data lakes will require applying ‘attribute-based’ access rules to encryption
The Last Watchdog
JUNE 2, 2021
The amount of data in the world topped an astounding 59 zetabytes in 2020, much of it pooling in data lakes. We’ve barely scratched the surface of applying artificial intelligence and advanced data analytics to the raw data collecting in these gargantuan cloud-storage structures erected by Amazon, Microsoft and Google.
Encryption 176
176 
Building a foundation of trust for the Internet of Things
Thales Cloud Protection & Licensing
DECEMBER 13, 2018
Invariably, Internet of Things (IoT) strategies form the backbone of those efforts. Enormous quantities of data can be generated by and collected from a wide variety of IoT devices. Finally, it is difficult to underemphasise the importance of encryption to protect sensitive data collected by IoT devices.
Internet 66
66 
GUEST ESSAY: Privacy risks introduced by the ‘metaverse’ — and how to combat them
The Last Watchdog
OCTOBER 10, 2022
While VR devices have been around in some form since well before the internet, the true ambition of major corporations to turn these devices into massively-connected social “metaverse” platforms has only recently come to light. To test the true extent of data collection in VR, we designed a simple 30-person user study called MetaData.
Risk 222
222 
Confessions of an ID Theft Kingpin, Part I
Krebs on Security
AUGUST 26, 2020
For several years beginning around 2010, a lone teenager in Vietnam named Hieu Minh Ngo ran one of the Internet’s most profitable and popular services for selling “ fullz ,” stolen identity records that included a consumer’s name, date of birth, Social Security number and email and physical address.
Identity Theft 355
355 
Views from California: An Update on Privacy Litigation and Regulatory Enforcement
SecureWorld News
JULY 10, 2024
Specifically, the settlement required that Tilting Point Media pay $500,000 in civil penalties, along with an expansive list of injunctive relief requiring the app developer to take affirmative steps to ensure it properly discloses its data collection, and, more importantly, obtains proper consent—including parental consent when required.
Data collection 108
108 
Podcast: Can we fix IoT security?
Webroot
JUNE 25, 2021
For others, home networks are simply hosting more devices as smart doorbells, thermostats and refrigerators now connect to the internet. Security experts warn that while the internet of things (IoT) isn’t inherently a bad thing, it does present concerns that must be considered.
IoT 111
111 
North Korean APT group Kimsuky allegedly hacked South Korea’s atomic research agency KAERI
Security Affairs
JUNE 19, 2021
The investigation into the intrusion revealed the involvement of 13 internet addresses including one traced to the Kimsuky APt group. On December 2020, KISA (Korean Internet & Security Agency) provided a detailed analysis about the phishing infrastructure and TTPs used by Kimsuky to target South Korea.
Hacking 145
145 
Google collects the following data from its users
CyberSecurity Insiders
FEBRUARY 11, 2021
On Wednesday, Google made an official announcement on the data collection it does and is as follows-. Google collects the following data to track a user- physical address, email address, phone number, identifiers, User ID and device ID along with Internet service provider.
Advertising 96
96 
Hackers Could Cause ‘Fake Earthquakes’ by Exploiting Vulnerable Seismic Equipment, Researchers Warn
Hot for Security
FEBRUARY 16, 2021
Seismic monitoring devices linked to the internet are vulnerable to cyberattacks that could disrupt data collection and processing, according to Michael Samios of the National Observatory of Athens and his fellow colleagues who put together a new study published in Seismological Research Letters.
IoT 128
128 
DNS-over-HTTPS takes another small step towards global domination
Malwarebytes
JULY 12, 2021
Firefox recently announced that it will be rolling out DNS-over-HTTPS (or DoH) soon to one percent of its Canadian users as part of its partnership with CIRA (the Canadian Internet Registration Authority), the Ontario-based organization responsible for managing the.ca top-level domain for Canada and a local DoH provider.
DNS 133
133 
Let's personalize your content