News

  • Why buy now, pay later is the next big fraud risk for retailers

    Retailers are offering customers more buy now, pay later (BNPL) finance purchasing options to drive sales across a wide range of products. Shoppers can get instant credit at the point of sale (POS) and then delay or spread payments (often at no extra cost) instead of paying outright at the time of purchase. This can…

    Read More

  • Target releases web skimming detection tool Merry Maker as open source

    Web skimming has been a major scourge for online shops over the past several years with attacks ranging from simple script injections into payment forms to sophisticated compromises of legitimate third-party scripts and services. Sometimes referred to as Magecart attacks, they have become the leading cause of card-not-present (CNP) fraud and have impacted small and…

    Read More

  • Home Improvement Firm Fined £200k for Nuisance Calls

    Home Improvement Firm Fined £200k for Nuisance Calls A Welsh home improvement firm has been fined £200,000 by the UK’s privacy watchdog after making more than half a million nuisance phone calls. Home2Sense Ltd of Lampeter made 675,478 nuisance calls between June 2020 and March 2021 to offer individuals insulation services, according to the Information Commissioner’s…

    Read More

  • Online Thieves Steal $320m from Crypto Firm Wormhole

    Online Thieves Steal $320m from Crypto Firm Wormhole Yet another cryptocurrency firm is offering a multimillion-dollar ‘bug bounty’ reward to those who hacked it after suffering a cyber-heist worth an estimated $322m. Wormhole operates what’s known as a cross-blockchain bridge, enabling holders of certain cryptocurrencies to transfer tokens, data and other assets between siloed blockchains. It…

    Read More

  • Privacy in Practice: Securing Your Data in 2022 and Beyond

    Every year we can count on new technology to make our lives easier. Right? As beneficial and convenient as tech can be, it can also pose risks to our online safety and privacy—risks that we should be prepared to handle. Increasingly, we’re seeing governments around the world implementing stricter privacy laws. And even major players…

    Read More

  • Orange County Launches Cybercrime Initiative

    Orange County Launches Cybercrime Initiative Authorities in California’s Orange County have launched a new initiative to help the public identify and report cyber-threats. SafeOC is a localized version of the national ‘If You See Something, Say Something’ anti-terrorism public awareness campaign that emphasizes the importance of reporting suspicious items and behaviors to law enforcement. A…

    Read More

  • Fake Influencer Flags Hacking Tactics

    Fake Influencer Flags Hacking Tactics A Swiss secure storage company has launched a creative cybersecurity awareness campaign to show how hackers gather personal data from social media. The campaign by pCloud uses a fake influencer account on Instagram (@thealiceadams) to highlight how users unintentionally give away pieces of sensitive data through their bios and the content they post.  “Through…

    Read More

  • Online Ad Association Fined for Privacy Violation

    Online Ad Association Fined for Privacy Violation An association for online advertising companies has been fined hundreds of thousands of dollars for developing an ad-targeting tool that violated European Union data laws.  The Belgian Data Protection Authority (BE DPA) said it was necessary to impose “harsh sanctions” on IAB Europe because the association’s Transparency and Consent Framework (TCF) “could,…

    Read More

  • The Cost of Ignoring the Log4j Vulnerability

     Ignorance is not bliss when it comes to the Log4j vulnerability. In the past month, organizations have been scrambling to understand their exposure to the most recent major cyber threat, called “Log4j.” Read More

    Read More

  • Finding Vulnerabilities in Open Source Projects

    The Open Source Security Foundation announced $10 million in funding from a pool of tech and financial companies, including $5 million from Microsoft and Google, to find vulnerabilities in open source projects: The “Alpha” side will emphasize vulnerability testing by hand in the most popular open-source projects, developing close working relationships with a handful of…

    Read More