Tag: privacy

Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 10:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
ISMG Editors: Who Will Shore Up Trump’s Federal Cyber Cuts?

Apr 4, 2025 9:42 PM

by

Andy Stern

in SecurityNews

Tags: ai, cyber, cybersecurity, data, finance, privacy, ransomware, update

Also: 23andMe’s Privacy Meltdown, Investors’ $500M AI Bet on ReliaQuest. In this week’s update, ISMG editors discussed the Trump administration’s cybersecurity funding cuts and potential impact on state and local ransomware defense. 23andMe’s bankruptcy and the FTC’s stance on genetic data privacy, ReliaQuest’s $500 million raise and what it means for AI-led SecOps. First seen…
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 9:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 8:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 7:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Ensuring Data Privacy and Compliance in the Philippine Insurance Industry

Apr 4, 2025 6:42 PM

by

Andy Stern

in SecurityNews

Tags: compliance, data, insurance, privacy

First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/ensuring-data-privacy-and-compliance-in-the-philippine-insurance-industry
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 6:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Cybersecurity Snapshot: SANS Recommends Six Controls To Secure AI Systems, While NCSC Warns About Outdated API Security Methods

Apr 4, 2025 5:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, api, attack, authentication, best-practice, botnet, business, cisa, cloud, compliance, computer, control, credentials, cryptography, cyber, cyberattack, cybersecurity, data, detection, dns, endpoint, framework, governance, government, incident response, infrastructure, injection, intelligence, Internet, least-privilege, malicious, mitigation, monitoring, network, phishing, privacy, programming, regulation, resilience, risk, risk-management, sans, service, strategy, supply-chain, threat, training, unauthorized, update, zero-trust

Check out the security controls that SANS Institute says are essential for protecting your AI systems. Plus, the U.K. NCSC urges organizations to adopt newer API security techniques. In addition, CISA and other cyber agencies warn that attackers are using “fast flux” techniques to conceal their actions. And much more! Dive into five things that…
Secure Communications Evolve Beyond EndEnd Encryption

Apr 4, 2025 5:42 PM

by

Andy Stern

in SecurityNews

Tags: communications, encryption, privacy

Signal, Wickr, WhatsApp, and Cape all have different approaches to security and privacy, yet most are finding ways to make secure communications more private. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/secure-communications-evolve-beyond-end-to-end-encryption
Windows 11 Forces Microsoft Account Sign In Removes Bypass Trick Option

Apr 4, 2025 11:42 AM

by

Andy Stern

in SecurityNews

Tags: Internet, microsoft, privacy, windows

Microsoft is killing the Windows 11 bypass trick, soon, all setups will require internet and a Microsoft Account, leaving privacy-conscious users with fewer options. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-windows-11-setup-microsoft/
Benefits from privacy investment are greater than the cost

Apr 4, 2025 7:42 AM

by

Andy Stern

in SecurityNews

Tags: cisco, data, privacy

Cisco released its 2025 Data Privacy Benchmark Study. The report looks at global trends in data privacy and how they affect businesses. The study gathered responses from 2,600 … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/04/privacy-investment-benefits/
Navigating Saudi Arabia’s Personal Data Protection Law (PDPL): A Guide to Compliance

Apr 3, 2025 2:42 PM

by

Andy Stern

in SecurityNews

Tags: access, ai, compliance, control, data, GDPR, governance, guide, identity, intelligence, law, monitoring, privacy, service

Navigating Saudi Arabia’s Personal Data Protection Law (PDPL): A Guide to Compliance madhav Thu, 04/03/2025 – 04:30 The Kingdom of Saudi Arabia (KSA) has taken a significant step towards bolstering data protection with its Personal Data Protection Law (PDPL), marking a pivotal moment in the region’s digital landscape. The PDPL, enforced by the Saudi Data…
Verizon Call Filter App Vulnerability Exposed Call Log Data of Customers

Apr 3, 2025 8:42 AM

by

Andy Stern

in SecurityNews

Tags: access, cyber, data, data-breach, flaw, phone, privacy, risk, unauthorized, vulnerability

A vulnerability in Verizon’s Call Filter app for iOS has been discovered, allowing unauthorized access to customer call logs. This flaw allowed any individual with the requisite technical knowledge to retrieve incoming call data”, complete with timestamps”, for any Verizon phone number, posing serious risks to privacy and safety. The Vulnerability Unveiled The Verizon Call…
Genetic data site openSNP to close and delete data over privacy concerns

Apr 2, 2025 11:42 PM

by

Andy Stern

in SecurityNews

Tags: data, privacy, risk

The openSNP project, a platform for sharing genetic and phenotypic data, will shut down on April 30, 2025, and delete all user submissions over privacy concerns and the risk of misuse by authoritarian governments. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/genetic-data-site-opensnp-to-close-and-delete-data-over-privacy-concerns/
FTC chief flags data privacy concerns in 23andMe bankruptcy

Apr 2, 2025 3:55 PM

by

Andy Stern

in SecurityNews

Tags: breach, data, data-breach, finance, privacy

The company filed for bankruptcy after financial challenges over the past few years and;a massive data breach in 2023. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ftc-chief-flags-data-privacy-risks-23andme-bankruptcy/744184/
Oracle faces Texas-sized lawsuit over alleged cloud snafu and radio silence

Apr 2, 2025 1:59 PM

by

Andy Stern

in SecurityNews

Tags: cloud, oracle, privacy

Victims expect to spend considerable time and money over privacy incident, lawyers argue First seen on theregister.com Jump to article: www.theregister.com/2025/04/02/oracle_breach_class_action/
Google Introduces EndEnd Encryption for Gmail Business Users

Apr 2, 2025 11:55 AM

by

Andy Stern

in SecurityNews

Tags: business, cyber, data, email, encryption, google, privacy

Google has unveiled end-to-end encryption (E2EE) capabilities for Gmail enterprise users, simplifying encrypted email communication for businesses of all sizes. This feature, launched in beta today to coincide with Gmail’s birthday, aims to bridge the gap between robust security and user-friendly functionality, allowing organizations to enhance data privacy without the traditional complexity of encryption setups.…
Hackers Exploit JavaScript CSS Tricks to Steal Browsing History

Apr 2, 2025 10:55 AM

by

Andy Stern

in SecurityNews

Tags: cyber, exploit, hacker, privacy

The web browsing history feature, designed to enhance user convenience by styling visited links differently, has inadvertently created a privacy vulnerability. Hackers have exploited this feature, using JavaScript and CSS techniques to deduce users’ online habits, revealing a concerning loophole in digital privacy. Browsers use the:visitedCSS pseudo-class to style visited links differently from unvisited ones,…
FTC: Data privacy policy adherence necessary for 23andMe buyer

Apr 1, 2025 9:55 PM

by

Andy Stern

in SecurityNews

Tags: data, finance, privacy

First seen on scworld.com Jump to article: www.scworld.com/brief/ftc-data-privacy-policy-adherence-necessary-for-23andme-buyer
Salt Security: Focused on Solving Real Business Problems

Apr 1, 2025 9:55 PM

by

Andy Stern

in SecurityNews

Tags: api, attack, best-practice, breach, business, compliance, data, data-breach, detection, exploit, finance, GDPR, governance, government, HIPAA, incident response, infrastructure, mitigation, monitoring, PCI, privacy, programming, risk, service, soc, strategy, threat, tool, unauthorized, vulnerability

In today’s digital landscape, APIs (Application Programming Interfaces) have become integral to business operations, enabling seamless integration and innovation. However, this increased reliance on APIs has also introduced significant security challenges. Salt Security offers a comprehensive solution to these challenges, providing organizations with the tools they need to protect their digital assets effectively. This blog…
Genetic sharing site openSNP to shut down, citing concerns of data privacy and ‘rise in authoritarian governments’

Apr 1, 2025 7:55 PM

by

Andy Stern

in SecurityNews

Tags: data, finance, government, open-source, privacy

tion>
Apple fined Euro150 million over App Tracking Transparency issues

Apr 1, 2025 6:55 PM

by

Andy Stern

in SecurityNews

Tags: apple, framework, mobile, privacy

AutoritÃ© de la concurrence, France’s antitrust watchdog, has fined Apple Euro150 million ($162 million) for using the App Tracking Transparency privacy framework to abuse its dominant market position in mobile app advertising on its devices. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/apple/apple-fined-150-million-over-app-tracking-transparency-issues/
Building a reasonable cyber defense program

Apr 1, 2025 3:55 PM

by

Andy Stern

in SecurityNews

Tags: business, cyber, data, defense, privacy

If you do business in the United States, especially across state lines, you probably know how difficult it is to comply with U.S. state data privacy laws. The federal … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/01/cis-reasonable-cyber-defense-program/
France’s Antitrust Watchdog Fines Apple for Problems With App Tracking Transparency

Apr 1, 2025 12:56 PM

by

Andy Stern

in SecurityNews

Tags: apple, privacy

France’s antitrust watchdog fined Apple 150 million euros ($162 million) over a privacy feature protecting users from apps snooping on them. The post France’s Antitrust Watchdog Fines Apple for Problems With App Tracking Transparency appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/frances-antitrust-watchdog-fines-apple-for-problems-with-app-tracking-transparency/
6 hard-earned tips for leading through a cyberattack, from CSOs who’ve been there

Apr 1, 2025 11:36 AM

by

Andy Stern

in SecurityNews

Tags: attack, awareness, breach, business, cisco, ciso, control, cyber, cyberattack, cybersecurity, data, group, incident response, infosec, infrastructure, lessons-learned, military, open-source, phishing, phone, privacy, programming, ransomware, security-incident, service, skills, software, strategy, threat, training, update

Develop muscle memory, and patience, through simulations: Authority under crisis is meaningless if you can’t establish followership. And this goes beyond the incident response team: CISOs must communicate with the entire organization, a commonly misunderstood imperative, says Pablo Riboldi, CISO of nearshore talent provider BairesDev.”I find that employee involvement tends to be overlooked during cyberattacks.…
7 Wege, Daten (besser) zu verschlüsseln

Apr 1, 2025 11:36 AM

by

Andy Stern

in SecurityNews

Tags: ai, blockchain, business, crypto, dns, encryption, github, healthcare, infrastructure, nist, office, privacy, software, update

Verschlüsseln Sie Ihre Daten zeitgemäß?Das Konzept der Kryptografie existiert schon ein paar Hundert Jahre, wird aber von findigen Wissenschaftlern und Mathematikern immer weiter vorangetrieben. Im Rahmen dieser Entwicklungsarbeit hat sich gezeigt, dass Algorithmen noch viel mehr können, als nur Daten zu schützen: Sie sind auch in der Lage, komplexe Regeln durchzusetzen und die Zusammenarbeit zu…
Privacy Roundup: Week 13 of Year 2025

Apr 1, 2025 11:36 AM

by

Andy Stern

in SecurityNews

Tags: access, ai, android, apple, application-security, breach, browser, cctv, chrome, cloud, cve, cybersecurity, data, detection, exploit, firmware, google, group, leak, linux, malware, microsoft, mobile, phishing, privacy, regulation, router, scam, service, software, technology, threat, tool, update, virus, vpn, vulnerability, zero-day

This is a news item roundup of privacy or privacy-related news items for 23 MAR 2025 – 29 MAR 2025. Information and summaries provided here are as-is for warranty purposes. Note: You may see some traditional “security” content mixed-in here due to the close relationship between online privacy and cybersecurity – many things may overlap;…
Apple Fined Euro150 Million by French Regulator Over Discriminatory ATT Consent Practices

Apr 1, 2025 11:36 AM

by

Andy Stern

in SecurityNews

Tags: apple, finance, mobile, privacy

Apple has been hit with a fine of Euro150 million ($162 million) by France’s competition watchdog over the implementation of its App Tracking Transparency (ATT) privacy framework.The AutoritÃ© de la concurrence said it’s imposing a financial penalty against Apple for abusing its dominant position as a distributor of mobile applications for iOS and iPadOS devices…
FTC: 23andMe’s Buyer Must Uphold Co.’s Data Privacy Pledge

Apr 1, 2025 12:19 AM

by

Andy Stern

in SecurityNews

Tags: data, finance, privacy

Letter to Bankruptcy Trustee Says 23andMe’s Privacy Promises Must Carry Over. The Federal Trade Commission has sent a letter to 23andMe’s bankruptcy trustees saying that any sale of the genetic testing firm or its assets will be subject to the company’s previous pledges to consumers involving the privacy and security of their sensitive information and…
FTC says 23andMe purchaser must uphold existing privacy policy for data handling

Mar 31, 2025 8:19 PM

by

Andy Stern

in SecurityNews

Tags: data, finance, privacy

Federal Trade Commission Chair Andrew Ferguson on Monday sent a letter to Department of Justice bankruptcy regulators warning that any purchaser of 23andMe must adhere to the company’s current privacy policies for protecting consumers’ genetic and other data. First seen on therecord.media Jump to article: therecord.media/ftc-23andme-purchaser-data-privacy