-
China Possibly Hacking US “Lawful Access” Backdoor
The Wall Street Journal is reporting that Chinese hackers (Salt Typhoon) penetrated the networks of US broadband providers, and might have accessed the backdoors that the federal government uses to execute court-authorized wiretap requests. Those backdoors have been mandated by law—CALEA—since 1994. It’s a weird story. The first line of the article is: “A cyberattack…
-
Cyber Fraud Cost up to $37bn in Southeast Asia Last Year
A UN report found that organized crime groups in the region have rapidly integrated malware, generative AI and deepfakes to enhance their fraud activities Read More
-
Global Police Track Human Traffickers in Online Crackdown
Europol claims its EMPACT operation has revealed dozens of human trafficking victims and suspects Read More
-
MoneyGram Reveals Data Breach After Incident Downed Services
MoneyGram has issued a data breach notification to customers following a security incident Read More
-
Universal Music Group Admits Data Breach
UMG, a major music corporation, reported a July 2024 data breach affecting 680 US residents Read More
-
Your robot vacuum cleaner might be spying on you
When Sean Kelly bought a top-of-the-line vacuum cleaner, he imagined he was making a safe purchase. Little did he know that the cleaning machine scuttling about his family’s feet contained a security flaw that could let anyone see and hear their every move. Read more in my article on the Hot for Security blog. Read…
-
Advanced Threat Group GoldenJackal Exploits Air-Gapped Systems
GoldenJackal targeted air-gapped government systems from May 2022 to March 2024, ESET found Read More
-
Board-CISO Mismatch on Cyber Responsibility, NCSC Research Finds
The UK NCSC found that there is a lot of confusion between board members and security leaders of who is responsible for cybersecurity within their organizations Read More
-
ICO Releases New Data Protection Audit Framework
The UK’s ICO said the framework is designed to help businesses build trust and encourage a positive data protection culture Read More
-
EU Urged to Harmonize Incident Reporting Requirements
Risk managers association FERMA has warned that new EU cyber legislation means there is an inconsistent approach to incident reporting requirements Read More