📢 Uber hit with €290m fine for storing European driver data in the US 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The fine marks the latest imposed on Uber by the Dutch data protection authority.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
Uber hit with €290m fine for storing European driver data in the US
The fine marks the latest imposed on Uber by the Dutch data protection authority
📔 Uber Hit With €290m GDPR Fine 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The Dutch data protection regulator has imposed a 290m GDPR fine on Uber for storing driver data in the US without adequate safeguards.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Uber Hit With €290m GDPR Fine
The Dutch data protection regulator has imposed a €290m GDPR fine on Uber for storing driver data in the US without adequate safeguards
🔥1
📢 Teleport partners with TD Synnex to tackle identity-focused cyber attacks 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The new distribution agreement will enable customers to procure secure infrastructure access solutions from a single source.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
channelpro
Teleport partners with TD Synnex to tackle identity-focused cyber attacks
The new distribution agreement will enable customers to procure secure infrastructure access solutions from a single source
📢 North Korean insider attacks are skyrocketing – dozens of US firms didn't spot the hacker in their midst 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
A North Korean threat campaign sneaking hackers into US firms as fake IT workers is just the tip of the iceberg, researchers have warned.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
North Korean insider attacks are skyrocketing – dozens of US firms didn't spot the hacker in their midst
North Korean threat campaigns are sneaking hackers into US firms as fake IT workers - and the trend shows no sign of stopping
🕵️♂️ Why Every Business Should Prioritize Confidential Computing 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Confidential computing safeguards data in use, making it a crucial component of cloud security.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Why Every Business Should Prioritize Confidential Computing
Confidential computing safeguards data in use, making it a crucial component of cloud security.
🦿 The 5 Best Free Endpoint Protection Platforms for 2024 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Discover our top picks for reputable free endpoint protection platforms and compare their features, pros and cons in this indepth guide.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
The 5 Best Free Endpoint Protection Platforms for 2024
Discover our top picks for reputable free endpoint protection platforms and compare their features, pros and cons in this in-depth guide.
🧠 Cost of data breaches: The business case for security AI and automation 🧠
📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
As Yogi Berra said, Its dj vu all over again. If the idea of the global average costs of data breaches rising year over year feels like more of the same, thats because it is. Data protection solutions get better, but so do threat actors. The other broken record is the underuse or misuse of The post Cost of data breaches The business case for security AI and automation appeared first on Security Intelligence.📖 Read more.
🔗 Via "Security Intelligence"
----------
👁️ Seen on @cibsecurity
Security Intelligence
Cost of data breaches: The business case for security AI and automation
IBM's 2024 comprehensive report shows that the use of modern technologies, such as AI automation, reduced breach costs by $2.2 million.
🖋️ CTEM in the Spotlight: How Gartner's New Categories Help to Manage Exposures 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Want to know whats the latest and greatest in SecOps for 2024? Gartners recently released Hype Cycle for Security Operations report takes important steps to organize and mature the domain of Continuous Threat Exposure Management, aka CTEM. Three categories within this domain are included in this years report Threat Exposure Management, Exposure Assessment Platforms EAP, and Adversarial.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 FBI Flawed Data Handling Raises Security Concerns 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
A US Justice Department watchdog has found significant weaknesses in the FBIs physical and online media storage and disposal processes.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
FBI Flawed Data Handling Raises Security Concerns
A US Justice Department watchdog has found “significant weaknesses” in the FBI’s physical and online media storage and disposal processes
📔 Suspected Cyber-Attack Causes Travel Chaos at Seattle Airport 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The Port of Seattle revealed system outages at the citys airport may have been caused by a cyberattack, affecting early Labor Day travel.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Suspected Cyber-Attack Causes Travel Chaos at Seattle Airport
The Port of Seattle revealed system outages at the city’s airport may have been caused by a cyber-attack, affecting early Labor Day travel
❤1
🖋️ Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. and Global IT Sectors 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The Chinanexus cyber espionage group tracked as Volt Typhoon has been attributed with moderate confidence to the zeroday exploitation of a recently disclosed highseverity security flaw impacting Versa Director. The attacks targeted four U.S. victims and one nonU.S. victim in the Internet service provider ISP, managed service provider MSP and information technology IT sectors as early.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🦅 High-Risk CVE-2024-7965 Vulnerability in Chrome’s V8 Engine Requires Quick Fix 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Key Takeaways CISA has included a type of confusion vulnerability affecting Google Chrome and potentially other Chromiumbased browsers in its Known Exploited Vulnerabilities KEV catalog, highlighting its seriousness and potential for exploitation. CVE20247965 affects Chrome's V8 JavaScript engine, allowing attackers to exploit heap corruption through specially crafted HTML pages. Its high CVSS score of 8.8 indicates a severe threat to system confidentiality and integrity. Google has acknowledged that CVE20247965 is actively being exploited. A critical patch has been released in Chrome versions 128.0.6613.84 for Linux and 128.0.6613.84.85 for Windows and Mac. Due to the active exploitation of this vulnerability, it is crucial for all users to update their browsers immediat...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
Urgent Fix Needed For Chrome V8 Engine CVE-2024-7965
CVE-2024-7965 is a critical flaw in Chrome's V8 engine, posing high-risk to browsers. Update now to protect against security threats. Learn more at Cyble.
♟️ New 0-Day Attacks Linked to China’s ‘Volt Typhoon’ ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Malicious hackers are exploiting a zeroday vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on infiltrating critical U.S. networks and laying the groundwork for the ability to disrupt communications between the United States and Asia during any future armed conflict with China.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
New 0-Day Attacks Linked to China’s ‘Volt Typhoon’
Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on infiltrating…
❤1
📔 MOVEit Hack Exposed Personal Data of Half Million TDECU Users 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The Texas Dow Employees Credit Union told the Maine Attorney General the MOVEit data breach compromised information of over 500,000 members.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
MOVEit Hack Exposed Personal Data of Half Million TDECU Users
The Texas Dow Employees Credit Union told the Maine Attorney General the MOVEit data breach compromised information of over 500,000 members
🦅 Cloud Storage Bucket Security: PII Leak Brings Renewed Focus to Storage Bucket Access Controls 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Key Takeaways News of a Google Cloud Storage bucket data leak has once again drawn public attention to the risks of misconfigured cloud storage buckets, one of the most common cloud security issues and causes of data leaks. Alices Table, a former contestant on ABCs Shark Tank, inadvertently leaked the personally identifiable information PII of more than 83,000 customers from a misconfigured Google Cloud Storage bucket. The leak underscores the importance of cloud storage bucket access controls as well as regularly auditing permissions and monitoring for data leaks. Cloud storage bucket leaks are very common Cyble Odin is presently detecting more than 500,000 such exposures between AWS and Google Cloud Storage. We look at best practices for cloud storage bucket access con...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
🔥2
🕵️♂️ PoC Exploit for Zero-Click Vulnerability Made Available to the Masses 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The exploit can be accessed on GitHub and makes it easier for the flaw to be exploited by threat actors.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
PoC Exploit for Zero-Click Vulnerability Made Available to the Masses
The exploit can be accessed on GitHub and makes it easier for the flaw to be exploited by threat actors.
📔 Microsoft 365 Copilot Vulnerability Exposes User Data Risks 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The flaw in Microsoft 365 Copilot allowed data theft using ASCII smuggling and prompt injection.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Microsoft 365 Copilot Vulnerability Exposes User Data Risks
The flaw in Microsoft 365 Copilot allowed data theft using ASCII smuggling and prompt injection
🖋️ macOS Version of HZ RAT Backdoor Targets Chinese Messaging App Users 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Users of Chinese instant messaging apps like DingTalk and WeChat are the target of an Apple macOS version of a backdoor named HZ RAT. The artifacts "almost exactly replicate the functionality of the Windows version of the backdoor and differ only in the payload, which is received in the form of shell scripts from the attackers' server," Kaspersky researcher Sergey Puzan said. HZ RAT was first.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📢 Nozomi Networks unveils new Mandiant-powered security tools 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The Nozomi TI Expansion Pack provides customers with access to both Nozomi and Mandiant threat intelligence capabilities.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
channelpro
Nozomi Networks unveils new Mandiant-powered security tools
The Nozomi TI Expansion Pack provides customers with access to both Nozomi and Mandiant threat intelligence capabilities
📢 Volt Typhoon is wreaking havoc again – this time on US internet providers 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Chinese statebacked hackers are thought to be actively exploiting a zeroday in SDWAN software to infect corporate networks at US internet providers.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ITPro
Volt Typhoon is wreaking havoc again – this time on US internet providers
Chinese state-backed hackers are thought to be actively exploiting a zero-day in SD-WAN software to infect corporate networks at US internet providers
🕵️♂️ Hitachi Energy Vulnerabilities Plague SCADA Power Systems 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
The company has assessed four of the five disclosed vulnerabilities as being of high to critical severity.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Darkreading
Hitachi Energy Vulnerabilities Plague SCADA Power Systems
The company has assessed four of the five disclosed vulnerabilities as being of high to critical severity.