Sat.Sep 16, 2023

article thumbnail

BlackCat ransomware hits Azure Storage with Sphynx encryptor

Bleeping Computer

The BlackCat (ALPHV) ransomware gang now uses stolen Microsoft accounts and the recently spotted Sphynx encryptor to encrypt targets' Azure cloud storage. [.

article thumbnail

TikTok Faces Massive €345 Million Fine Over Child Data Violations in E.U.

The Hacker News

The Irish Data Protection Commission (DPC) slapped TikTok with a €345 million (about $368 million) fine for violating the European Union's General Data Protection Regulation (GDPR) in relation to its handling of children's data.

116
116
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

TikTok fined €345M by Irish DPC for violating children’s privacy

Security Affairs

The Irish Data Protection Commission (DPC) fined TikTok €345 million ($368 million) for violating the privacy of children. The Irish Data Protection Commission (DPC) fined TikTok €345 million for violating children’s privacy. The Irish data regulators discovered that the popular video-sharing app allowed adults to send direct messages to certain teenagers who have no family connection with them.

Hacking 108
article thumbnail

North Korea's Lazarus Group Suspected in $31 Million CoinEx Heist

The Hacker News

The North Korea-affiliated Lazarus Group has stolen nearly $240 million in cryptocurrency since June 2023, marking a significant escalation of its hacks. According to multiple reports from Certik, Elliptic, and ZachXBT, the infamous hacking group is said to be suspected behind the theft of $31 million in digital assets from the CoinEx exchange on September 12, 2023.

article thumbnail

From Complexity to Clarity: Strategies for Effective Compliance and Security Measures

Speaker: Erika R. Bales, Esq.

When we talk about “compliance and security," most companies want to ensure that steps are being taken to protect what they value most – people, data, real or personal property, intellectual property, digital assets, or any other number of other things - and it’s more important than ever that safeguards are in place. Let’s step back and focus on the idea that no matter how complicated the compliance and security regime, it should be able to be distilled down to a checklist.

article thumbnail

Iranian Peach Sandstorm group behind recent password spray attacks

Security Affairs

Iran-linked Peach Sandstorm APT is behind password spray attacks against thousands of organizations globally between February and July 2023. Microsoft researchers observed a series of password spray attacks conducted by Iran nation-state actors as part of a campaign named Peach Sandstorm (aka Holmium , APT33 , Elfin , and Magic Hound ). The APT33 group has been around since at least 2013, since mid-2016, the group targeted the aviation industry and energy companies with connections to petrochem

Passwords 106
article thumbnail

Massive MGM and Caesars Hacks Epitomize a Vicious Ransomware Cycle

WIRED Threat Level

Cyberattacks on casinos grab attention, but a steady stream of less publicized attacks leave vulnerable victims struggling to recover.

Hacking 113

More Trending

article thumbnail

You Need to Update Google Chrome or Whatever Browser You Use

WIRED Threat Level

Plus: Spyware-packing ads, TikTok GDPR violations, Elon Musk investigations, and more.

Spyware 105
article thumbnail

WhatsApp rival Telegram gets Crypto wallet integration

Bleeping Computer

Telegram, the widely used messaging app, has unveiled an integrated crypto wallet feature, allowing users to effortlessly access their cryptocurrency holdings. [.

article thumbnail

2023 OWASP Top-10 Series: API8:2023 Security Misconfiguration

Security Boulevard

Welcome to the 9th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API8:2023 Security Misconfiguration. In this series we are taking an in-depth look at each category – the details, the impact and what you can do [.] The post 2023 OWASP Top-10 Series: API8:2023 Security Misconfiguration appeared first on Wallarm.

62
article thumbnail

Microsoft Edge is losing tablet-friendly "Web Select" feature

Bleeping Computer

Microsoft's Edge browser, known for its innovative features, is now shedding one of its most applauded functions, Web Select.

article thumbnail

Successful Change Management with Enterprise Risk Management

Speaker: William Hord, Vice President of ERM Services

A well-defined change management process is critical to minimizing the impact that change has on your organization. Leveraging the data that your ERM program already contains is an effective way to help create and manage the overall change management process within your organization. Your ERM program generally assesses and maintains detailed information related to strategy, operations, and the remediation plans needed to mitigate the impact on the organization.

article thumbnail

Cyber Week 2023 & The Israel National Cyber Directorate Presents – CSA Israel Event: Deep Dive Into Cloud Security Operations

Security Boulevard

Many thanks to Israel’s Tel Aviv University for publishing their presenter’s tremendous Cyber Week 2023 security content on the Tel Aviv University’s TAUVOD YouTube channel. Permalink The post Cyber Week 2023 & The Israel National Cyber Directorate Presents – CSA Israel Event: Deep Dive Into Cloud Security Operations appeared first on Security Boulevard.