2021, Information Security, Manufacturing and Privacy

BlackCat gang claims they stole data of 2.5 million patients of McLaren Health Care

Security Affairs

OCTOBER 1, 2023

Protecting the privacy and interests of your customers is nothing more than lip service. Maclaren Your security is at an all-time low, and we’ve proven it to you. The cyber security researcher Dominic Alvieri reported that ALPHV BlackCat Ransomware has breached 15 more US hospitals & 2 HMOs. million of their patients.

Ransomware

Ransomware Manufacturing Privacy Security

NHTSA Publishes Final Cybersecurity Best Practices

Hunton Privacy

SEPTEMBER 26, 2022

The 2022 Best Practices reflect the agency’s final, non-binding vehicle cybersecurity guidance following its release of draft guidance in January 2021. The 2022 Best Practices also is an update to NHTSA’s first cybersecurity best practices document, which was issued in 2016. .

Cybersecurity

Cybersecurity Manufacturing Risk Information Security

SEC Sanctions Public Company for Misleading Disclosures About Data Breach

Hunton Privacy

AUGUST 31, 2021

On August 16, 2021, the U.S. In September 2018, the software manufacturer put Pearson on notice of the vulnerability, but the SEC’s order alleges that Pearson did not patch the vulnerability until after it learned of the attack in March 2019 even though a patch was available in September 2018.

Data breaches

Data breaches Manufacturing Passwords Data Privacy

Top GRC Tools & Software for 2021

eSecurity Planet

JANUARY 21, 2021

Data privacy regulations like the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) can be hard to navigate for businesses of any size, but GRC tools can simplify and streamline compliance with all of the requirements. Privacy governance and management. Riskonnect. Back to top.

Compliance

Compliance Risk Government Retail

Toyota Italy accidentally leaked sensitive data

Security Affairs

MARCH 28, 2023

Threat actors could abuse this information to gain access to Toyota clients’ phone numbers and email addresses and abuse them to launch phishing attacks. Cybernews has reached out to the car manufacturer, and, at the time of writing, the dataset has been secured. env) hosted on the official Toyota Italy website.

Manufacturing

Manufacturing Marketing Phishing Cloud

McLaren Health Care revealed that a data breach impacted 2.2 million people

Security Affairs

NOVEMBER 10, 2023

Protecting the privacy and interests of your customers is nothing more than lip service. Maclaren Your security is at an all-time low, and we’ve proven it to you. The cyber security researcher Dominic Alvieri reported that ALPHV BlackCat Ransomware has breached 15 more US hospitals & 2 HMOs. million of their patients.

Data breaches

Data breaches Ransomware Insurance Manufacturing

Security Affairs newsletter Round 392

Security Affairs

NOVEMBER 6, 2022

Cisco addressed several high-severity flaws in its products LockBit ransomware gang claims the hack of Continental automotive group 250+ U.S. Cisco addressed several high-severity flaws in its products LockBit ransomware gang claims the hack of Continental automotive group 250+ U.S. Follow me on Twitter: @securityaffairs and Facebook.

Security

Security Ransomware Military Manufacturing

U.S. Commerce Department Proposes Expansion of Information and Communications Technology and Services Review Process

Data Matters

DECEMBER 9, 2021

On November 26, 2021, the U.S. The Proposed Rule would bring “connected software applications” into the scope of Commerce’s authority to review certain transactions involving information and communications technology and services (ICTS) in the U.S. national security. The exemptions include acquisitions of ICTS items by a U.S.

Communications

Communications Manufacturing Data collection Risk

An RCE in Annke video surveillance product allows hacking the device

Security Affairs

AUGUST 27, 2021

Researchers at industrial and IoT cybersecurity firm Nozomi Networks have discovered a critical flaw affecting a video surveillance product made by Annke, a popular manufacturer of surveillance systems and solutions. ” reads the security advisory published by Nozomi Networks Labs. ” continues the advisory.

Cybersecurity

Cybersecurity IoT Access Manufacturing

A component in Huawei network appliances could be used to take down Germany’s telecoms networks

Security Affairs

APRIL 26, 2023

. “We have not been informed about a risk related to an energy management component by any authority,” Patrick Berger, Huawei’s head of media affairs told POLITICO. “Cybersecurity and privacy protection are Huawei’s highest priority.” The activity will be completed in the coming months.

Government

Government Communications Risk Cybersecurity

U.S. Commerce Department Issues Interim Regulations Establishing Review Process for Information and Communications Technology and Services Supply Chains

Data Matters

JANUARY 28, 2021

On January 19, 2021, the U.S. The new review mechanism focuses on transactions involving any acquisition, importation, transfer, installation, dealing in, or use of ICTS that has been designed, developed, manufactured, or supplied by parties owned by, controlled by, or subject to the jurisdiction or direction of “foreign adversaries.”.

Communications

Communications Artificial Intelligence Risk Manufacturing

List of data breaches and cyber attacks in February 2022 – 5.1 million records breached

IT Governance

MARCH 1, 2022

In the midst of all this, organisations across Europe have reported delays as a result of alleged state-sponsored attacks – including Toyota’s Japanese plants and a kettle manufacturer in the Isle of Man.

Data breaches

Data breaches Ransomware Government Blockchain

Data security: Why a proactive stance is best

IBM Big Data Hub

JULY 7, 2023

Thirty percent of those incidents occurred in manufacturing organizations. But the loss of personal information in a data breach can also have significant consequences on an individual, including financial loss, identity theft, other fraud, emotional distress and even damage to reputation.

Security

Security Data breaches Data Privacy Compliance

China: Navigating China episode 18: Increased scrutiny over connected car and automobile industry data from Chinese regulators, including push towards data localisation

DLA Piper Privacy Matters

JUNE 4, 2021

The Draft Provisions apply across the industry, not just to vehicle designers and manufacturers, but also parts and software providers, dealers, maintenance and repair agencies, online car hailing organisations and insurance companies. deletion of sensitive personal information within two weeks when requested by the driver, etc.

Big data

Big data Compliance Personal data Insurance

Majority of CCPA Amendment Bills Passed by California Legislature

Hunton Privacy

SEPTEMBER 16, 2019

California marked the end of the 2019 legislative session this past Friday, September 13, by passing five out of six pending bills to amend the California Consumer Privacy Act of 2018 (“CCPA”). Adds a one-year sunset clause, specifying that 1798.145(g) would become inoperative beginning January 1, 2021. and the vehicle’s manufacturer.

Sales

Sales B2B Communications Data breaches

The Hacker Mind Podcast: Hacking Teslas

ForAllSecure

JUNE 8, 2022

Even so, the car manufacturers carved out large groups of codes. Since then, car manufacturers have improved on this. And the coffee spur was an attempt to show manufacturers of hands free sets that pre-programmed pin that cannot be changed by the user would not be the ideal way to handle security in this respect.

Manufacturing

Manufacturing Encryption IT Security

IoT and Cybersecurity: What’s the Future?

Security Affairs

MAY 2, 2022

In March 2021, hackers gained access to a security company’s surveillance cameras and live-streamed those video feeds from hospitals, jails, schools, police stations, gyms, and even Tesla. The first is the very well-known lack of device security. Start Asking Questions About Data Privacy and Security.

IoT

IoT Cybersecurity Data breaches Passwords

DJI drone tracking data exposed in the US

Security Affairs

OCTOBER 14, 2022

Over 80,000 drone IDs were exposed in the leak of a database containing information from airspace monitoring devices manufactured by DJI. Enhanced security institutions use devices to monitor drone movement, posing a privacy risk to its owner. Original post at CyberNews: [link].

Military

Military Manufacturing Marketing Risk

Researcher released PoC exploit code for 3 iOS zero-day issues

Security Affairs

SEPTEMBER 24, 2021

but Apple decided to cover it up” [link] — Kosta Eleftheriou (@keleftheriou) September 24, 2021. Can confirm the exploit also works on iOS 15.0 – it's able to silently pull a *trove* of personal information without _any_ kind of user prompt. — Kosta Eleftheriou (@keleftheriou) September 24, 2021.

Analytics

Analytics Manufacturing Privacy IT

NIST Holds a Two-Day Public Workshop on Cybersecurity Labeling Programs for Internet of Things Devices and Software

Hunton Privacy

SEPTEMBER 27, 2021

In May 2021 , NIST released a draft white paper that summarized its review of the currently available confidence mechanisms for the security of consumer IoT devices and in August 2021 , NIST released a draft white paper that detailed draft baseline security criteria for consumer IoT devices.

Cybersecurity

Cybersecurity IoT Manufacturing Paper

White House Issues Executive Order on Protecting Americans’ Sensitive Data from Foreign Adversaries

Hunton Privacy

JUNE 11, 2021

On June 9, 2021, President Biden signed an Executive Order on Protecting Americans’ Sensitive Data from Foreign Adversaries (the “EO” or “Biden EO”). The Biden EO elaborates on measures to address the national emergency regarding the information technology supply chain declared in 2019 by the Trump administration in Executive Order 13873.

Risk

Risk Military Manufacturing Sales

Information Management Today

BlackCat gang claims they stole data of 2.5 million patients of McLaren Health Care

NHTSA Publishes Final Cybersecurity Best Practices

Trending Sources

SEC Sanctions Public Company for Misleading Disclosures About Data Breach

Top GRC Tools & Software for 2021

Toyota Italy accidentally leaked sensitive data

McLaren Health Care revealed that a data breach impacted 2.2 million people

Security Affairs newsletter Round 392

U.S. Commerce Department Proposes Expansion of Information and Communications Technology and Services Review Process

An RCE in Annke video surveillance product allows hacking the device

A component in Huawei network appliances could be used to take down Germany’s telecoms networks

U.S. Commerce Department Issues Interim Regulations Establishing Review Process for Information and Communications Technology and Services Supply Chains

List of data breaches and cyber attacks in February 2022 – 5.1 million records breached

Data security: Why a proactive stance is best

China: Navigating China episode 18: Increased scrutiny over connected car and automobile industry data from Chinese regulators, including push towards data localisation

Majority of CCPA Amendment Bills Passed by California Legislature

The Hacker Mind Podcast: Hacking Teslas

IoT and Cybersecurity: What’s the Future?

DJI drone tracking data exposed in the US

Researcher released PoC exploit code for 3 iOS zero-day issues

NIST Holds a Two-Day Public Workshop on Cybersecurity Labeling Programs for Internet of Things Devices and Software

White House Issues Executive Order on Protecting Americans’ Sensitive Data from Foreign Adversaries

Stay Connected