Security Affairs

DECEMBER 27, 2022

Facebook (Meta) has agreed to pay $725 million to settle the class-action lawsuit filed in 2018 over the Cambridge Analytica data leak. Facebook (Meta) has agreed to pay $725 million to settle a class-action lawsuit filed in 2018 over the Cambridge Analytica data leak. data privacy class action. Pierluigi Paganini.

Privacy 96

Privacy Analytics Data Privacy Personal data 96

Security Affairs

MARCH 18, 2024

The International Monetary Fund (IMF) disclosed a security breach, threat actors compromsed 11 email accounts earlier this year. The impacted email accounts were re-secured. ” The agency has already secured the compromised email accounts and added that it is not aware of further compromise beyond them.

Cybersecurity 127

Cybersecurity Security IT Data breaches 127

Security Affairs

JANUARY 20, 2020

Mitsubishi Electric disclosed a security breach that might have exposed personal and confidential corporate information. Mitsubishi Electric disclosed a security breach that might have exposed personal and confidential corporate data. “According to people involved, Chinese hackers Tick may have been involved.

Data breaches 129

Data breaches Computer and Electronics Government Manufacturing 129

Security Affairs

APRIL 15, 2021

April 2021 Security Patch Day includes 14 new security notes and 5 updates to previously released notes, one of them fixes a critical issue in SAP Commerce. SAP Security Note #3040210 , tagged with a CVSS score of 9.9 SAP Security Note #3040210 , tagged with a CVSS score of 9.9

Security 110

Security IT Information Security 110

Security Affairs

MARCH 15, 2023

Original post at [link] The Cybernews research team recently discovered that the French-based multinational aviation company, the eighth largest aerospace supplier worldwide, was leaking sensitive data due to a misconfiguration of its systems. The vulnerability left the company at risk from cyberattacks over an extended period of time.

Manufacturing 94

Manufacturing Access Risk IT 94

Security Affairs

APRIL 21, 2022

Security researchers at Check Point Research have discovered a critical remote code execution that affects the implementation of the Apple Lossless Audio Codec (ALAC) in Android devices running on Qualcomm and MediaTek chipsets. The ALAC is an audio coding format developed by Apple for lossless data compression of digital music.

Access 131

Access Cybersecurity Security IT 131

Hunton Privacy

APRIL 19, 2011

On April 5, 2011, Lisa Sotto , partner and head of the Privacy and Data Security practice at Hunton & Williams LLP, discussed the Epsilon email breach in an interview with Tracy Kitten of Information Security Media Group. Download the podcast now.

Information Security 40

Information Security Security Privacy 40

Hunton Privacy

OCTOBER 11, 2010

On September 28, 2010, the German Federal Office for Information Security , (the Bundesamt für Sicherheit in der Informationstechnik or “BSI”) released a draft framework paper on information security issues related to cloud computing. Service provider security management requirements. ID and rights management.

Information Security 40

Information Security Paper Cloud Security 40

Security Affairs

MAY 29, 2022

A man from New York was sentenced to four years in prison for trading stolen credit card data and assisting the Infraud Organization. The transnational cybercrime ring was engaged in the mass acquisition and sale of fraud-related goods and services, including stolen identities, compromised credit card data, and computer malware.

Sales 135

Sales Personal data Cybersecurity Security 135

Hunton Privacy

JANUARY 17, 2011

On January 14, 2011, the European Network and Information Security Agency (“ENISA”), which was created to enhance information security within the European Union, published a report entitled “ Data breach notifications in the EU ” (the “Report”).

Data breaches 40

Data breaches Information Security Security Privacy 40

Security Affairs

MAY 31, 2020

The EU Agency for Cybersecurity ENISA has published a new report and accompanying repository on measures and information sources that could help security experts and operators of IT and critical infrastructure to proactively detect network security incidents in the EU. 2- Report – Measures and information sources.

Cybersecurity 110

Cybersecurity Security IT Information Security 110

Hunton Privacy

JUNE 14, 2011

On June 7, 2011, the Congress of the Republic of Peru passed the Personal Data Protection Law ( Ley de Protección de Datos Personales, Proyecto de Ley 4079/2009-PE). Require consent for the processing of personal data. Restrict the cross-border transfer of personal data. Restrict the monitoring of communications.

Privacy 40

Privacy Personal data Communications Government 40

Security Affairs

OCTOBER 16, 2021

FinCEN analyzed a data set composed of 2,184 SARs filed between 1 January 2011 and 30 June 2021 and identified 177 CVC (convertible virtual currency) wallets addresses that were used in ransomware operations associated with the above ransomware variants. ” reads the report published by FinCEN. Pierluigi Paganini.

Ransomware 117

Ransomware Security Information Security IT 117

Security Affairs

JULY 19, 2021

US DoJ indicted four members of the China-linked cyberespionage group known as APT40 for hacking various entities between 2011 and 2018. The malware was used to gain an initial foothold in the target network, establish persistence, make lateral movements, and steal sensitive data. Ltd. (????) . ” states DoJ. Pierluigi Paganini.

Government 115

Government Cybersecurity Security Access 115

Security Affairs

DECEMBER 17, 2021

VMware released security patches for a critical server-side request forgery (SSRF) vulnerability in Workspace ONE UEM console. An attacker with network access to UEM could exploit the vulnerability to access sensitive data in the management console. and above 2011 Workspace ONE UEM patch 20.11.0.40 and above. .”

Access 116

Access Authentication Cloud Security 116

Data Matters

JUNE 24, 2021

In the Order, the SEC alleges that First American’s disclosures concerning the vulnerability were deficient because senior executives were not provided all available and relevant information, specifically that First American’s information security personnel had identified and failed to remediate the vulnerability months earlier in January 2019.

Cybersecurity 66

Cybersecurity Financial Services Risk Compliance 66

Security Affairs

APRIL 29, 2022

OpRussia continues, less than a week after my last update Anonymous has hacked other Russian companies and leaked their data via DDoSecrets. The #OpRussia launched by Anonymous on Russia after the criminal invasion of Ukraine continues, the collective claims to have published more than 6 TB of Russian data via DDoSecrets.

ECM 101

ECM Archiving Government Cybersecurity 101

Hunton Privacy

DECEMBER 8, 2016

Hunton & Williams LLP is proud to announce our Privacy & Information Security Law Blog has been named the top Cybersecurity and Information Privacy blog by The Expert Institute and #2 overall Best AmLaw Blog of 2016. Judges noted that the “privacy blog influences global privacy and data security developments.”.

Privacy 45

Privacy Information Security Cybersecurity Security 45

Security Affairs

APRIL 28, 2023

CryptBot malware is active since at least 2019, it allows operators to steal sensitive data from the Google Chrome of the infected systems. The malware allows operators to steal login credentials from popular services such as social media platforms and cryptocurrency wallets, then stolen data is sold on cybercrime forums by the operators.

Blockchain 97

Blockchain Mining Education IT 97

Security Affairs

FEBRUARY 13, 2020

The hacktivists claim that once hacked the universities did not disclose the data breach and attempted to hide the incident, violating the European Privacy Law GDPR. If the concept of security does not start from our schools, how can we have a better ruling class than the current one? Pierluigi Paganini.

Data breaches 137

Data breaches GDPR Education Passwords 137

Security Affairs

NOVEMBER 17, 2019

With the advent of this year’s holiday shopping season are cybercriminals are using carding bots to test stolen payment card data before using them. Cybercriminals need to test the validity of the stolen card data before carrying out fraudulent transactions or selling them during the holiday shopping season. Pierluigi Paganini.

Retail 77

Retail Cloud Access IT 77

Hunton Privacy

NOVEMBER 16, 2022

million will be for attorney fees, and delete certain “wrongfully collected” data. This settlement brings an end to litigation going back to 2011. Under the order granting plaintiffs’ motion for final approval of the class action settlement and attorney fees, Facebook must pay $90 million dollars in settlements, of which $26.1

Privacy 55

Privacy Information Security Security 55

Security Affairs

SEPTEMBER 5, 2019

The data was found by Sanyam Jain, a security researcher and member of the GDI Foundation, who contacted TechCrunch because he was able to contact the owner of the archive. . Data were contained in multiple databases stored on an unsecured server exposed online. SecurityAffairs – privacy, data leak). Pierluigi Paganini.

Privacy 102

Privacy Archiving Passwords Access 102

Security Affairs

JUNE 29, 2022

Once gained access to the YouTube studio, the malware grabs information about the user’s channels, including the channel name, the number of subscribers, their creation date, its verification status and if it is monetized. Aparat is an Iranian video-sharing site that was founded in 2011. All the results were under the domain aparat[.]com.

Authentication 98

Authentication Libraries Encryption Marketing 98

Hunton Privacy

NOVEMBER 11, 2016

Hunton & Williams LLP is proud to announce our Privacy & Information Security Law Blog has been nominated in The Expert Institute’s 2016 Best Legal Blog Contest for Best AmLaw Blog of 2016. It was noted that the “privacy blog influences global privacy and data security developments.”. Only Three Days Left to Vote!

Privacy 45

Privacy Information Security Security IT 45

Security Affairs

DECEMBER 7, 2021

The blockchain-enabled botnet has been active since at least 2011, researchers estimate that the Glupteba botnet is currently composed of more than 1 million Windows PCs around the world. The post Google disrupts the Glupteba botnet appeared first on Security Affairs. ” reads the post published by Google. Pierluigi Paganini.

Blockchain 119

Blockchain Mining Cloud Access 119

Security Affairs

JANUARY 28, 2023

Once they have access, they use a variety of tools and techniques to move laterally throughout the network, compromising systems and stealing sensitive data. Once an environment is infected, the victim is sent to the gang payment site managed by the ransomware developers who threaten to leak the victim’s data to extort further payments.

Ransomware 95

Ransomware Phishing Encryption Access 95

Security Affairs

JANUARY 25, 2020

This week, Mitsubishi Electric disclosed a security breach that might have exposed personal and confidential corporate data. According to the company, attackers did not obtain sensitive information about defense contracts. ” reads the security advisory published by Trend Micro in October 2019. reported the Nikkei.

Manufacturing 134

Manufacturing Data breaches Sales Access 134

The Last Watchdog

JUNE 21, 2020

Numerous strains of this destructive code have been the front-page news in global computer security chronicles for almost a decade now, with jaw-dropping ups and dramatic downs accompanying its progress. They added data theft to the classic encryption scenario. To top it off, some of them have created special websites for data dumps.

Ransomware 243

Ransomware Encryption Privacy Security awareness 243

Hunton Privacy

JULY 25, 2017

We hope you will continue to show your support for Hunton & Williams’ Privacy & Information Security Law blog by nominating the blog for this award. One commentator noted that the Hunton “privacy blog influences global privacy and data security developments.”.

Privacy 40

Privacy Information Security Cybersecurity Access 40

Hunton Privacy

OCTOBER 27, 2016

Hunton & Williams LLP is proud to announce our Privacy & Information Security Law Blog has been nominated in The Expert Institute’s 2016 Best Legal Blog Contest for Best AmLaw Blog of 2016. It was noted that the “privacy blog influences global privacy and data security developments.”. Click to vote.

Privacy 40

Privacy Information Security Security IT 40

Security Affairs

MAY 6, 2024

Alexander Vinnik , a Russian national, pleaded guilty to conspiracy to commit money laundering for his involvement in operating the cryptocurrency exchange BTC-e from 2011 to 2017. BTC-e collected virtually no customer data at all, which made the exchange attractive to those who desired to conceal criminal proceeds from law enforcement.”

Computer and Electronics 107

Computer and Electronics Ransomware Marketing IT 107

Security Affairs

JULY 17, 2020

Researchers at IBM X-Force Incident Response Intelligence Services (IRIS) discovered an unsecured server belonging to Iran-linked APT35 group (aka ITG18, Charming Kitten , Phosphorous, and NewsBeef ) containing data for many domains managed by the threat actor. Some of the videos were showing how to exfiltrate data (i.e.

Military 98

Military Authentication Cloud IT 98

Security Affairs

DECEMBER 19, 2022

The blockchain-enabled botnet has been active since at least 2011, researchers estimated that the Glupteba botnet was composed of more than 1 million Windows PCs around the world as of December 2021. The post Glupteba botnet is back after Google disrupted it in December 2021 appeared first on Security Affairs. Pierluigi Paganini.

Blockchain 104

Blockchain IT Mining Security 104

IT Governance

APRIL 5, 2018

While most organisations believe that their information security systems are secure, often the reality is that they are not. Faced with these increasing information security threats, organisations have an urgent need to adopt IT governance best practice strategies. What is IT governance?

Government 51

Government IT Compliance Information Security 51

Security Affairs

DECEMBER 15, 2020

AridViper is an Arabic speaking APT group that is active in the Middle East since at least 2011. ’ PyMICROPSIA uses Python libraries to implements multiple operations, including data theft, Windows process and systems interaction. ” Pierluigi Paganini. SecurityAffairs – hacking, Arid Viper).

Communications 144

Communications Libraries IT Security 144

Security Affairs

OCTOBER 14, 2020

Since 2011 it was employed in attacks aimed at Human Rights Defenders (HRDs) in many countries, including Bahrain, Ethiopia, UAE, and more. It allows to use the users’ devices as a spying tool, it can control both webcam and microphone, to spy on communications and exfiltrate data stored on the infected systems. Pierluigi Paganini.

Sales 117

Sales Communications Privacy IT 117