IT Governance

APRIL 5, 2023

It can do this by attaching itself to programs, script files, documents and cross-site scripting vulnerabilities in web apps. IT Governance Podcast 2023-7: Capita, ChatGPT and TikTok (yet again) 5th April 2023 How to Prevent Malware Attacks: 8 Tips for 2023 5th April 2023 List of Data Breaches and Cyber Attacks in March 2023 – 41.9

Encryption 126

Encryption Data breaches Phishing Government 126

IT Governance

AUGUST 1, 2023

IT Governance found 87 publicly disclosed security incidents in June 2023, accounting for 146,290,598 breached records. You can find the full list below, divided into four categories: cyber attacks, ransomware, data breaches, and malicious insiders and miscellaneous incidents.

Data breaches 94

Data breaches Ransomware Insurance Education 94

IT Governance

MARCH 1, 2023

Welcome to our February 2023 list of data breaches and cyber attacks. It follows a mammoth start to the year, with more than 277 million breached records in January , and brings the running total for the year to over 300 million pieces of compromised personal data.

Data breaches 130

Data breaches Ransomware e-Delivery Government 130

IT Governance

SEPTEMBER 15, 2023

Welcome to our September 2023 catches of the month feature, which examines recent phishing scams and the tactics criminals use to trick people into compromising their data. The ZIP file, titled “Changes to the vacation schedule”, contains a malicious link masquerading as a PDF document hosted on a SharePoint site.

Phishing 110

Phishing Mining Education Passwords 110

IT Governance

OCTOBER 31, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks France says Russian state hackers breached numerous critical networks Date of breach: From second half of 2021 (reported 26 October 2023).

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

IT Governance

APRIL 3, 2023

Welcome to our March 2023 list of data breaches and cyber attacks. You can find the full list of data breaches and cyber attacks below, including our new feature in which we delve into the month’s biggest incidents in a little more detail.

Data breaches 119

Data breaches Ransomware Phishing Government 119

Security Affairs

AUGUST 8, 2023

Microsoft Patch Tuesday security updates for August 2023 addressed 74 vulnerabilities, including two actively exploited flaws. Microsoft has released an Office Defense in Depth update ( ADV230003 ) to address a patch bypass of the actively exploited RCE vulnerability CVE-2023-36884. reads the advisory published by Microsoft.

Phishing 91

Phishing Security Government IT 91

Collibra

MAY 5, 2022

This requires every company to perform gap analysis to determine what is required and then update their systems, processes, workflows and data management strategy accordingly to ensure compliance. EMA expects pharmaceuticals to submit product data in IDMP format with a mandatory effective date of Q1 2023.

Compliance 91

Compliance Government Healthcare Cloud 91

Security Affairs

JULY 12, 2023

The issue, tracked as CVE-2023-36884 , was exploited by nation-state actors and cybercriminals to gain remote code execution via malicious Office documents. The company revealed that it is aware of high-targeted attacks that attempt to exploit these issues through specially-crafted Office documents. ” reads the post.

Phishing 90

Phishing Security Government IT 90

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: more than 59 million data records. BianLian claims to have exfiltrated 5 TB of data, comprising millions of sensitive documents. Akumin Inc.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

IT Governance

MAY 2, 2023

Welcome to our April 2023 list of data breaches and cyber attacks. You can find the full list of data breaches and cyber attacks below, along with our rundown of the biggest incidents of the month. Biggest data breaches of April 2023 1. million people.

Data breaches 105

Data breaches Ransomware Personal data Access 105

IT Governance

NOVEMBER 20, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Date of breach: 26 October 2023 Breached organisation: Homeland, Inc., to its leak site.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

IBM Big Data Hub

SEPTEMBER 12, 2023

The UK government’s Ecosystem of Trust is a potential future border model for frictionless trade, which the UK government committed to pilot testing from October 2022 to March 2023. The consortium ran a pilot that provided the government with additional supply chain data for 700,000 consignments.

Government 84

Government Data collection Analytics Risk 84

Security Affairs

JANUARY 22, 2024

Resecurity has detected a noticeable increase in data leaks from consumer-focused platforms in Thailand, confirming that threat actors are actively targeting the personal data of citizens now at the beginning of 2024. But as we step into 2024, this trend might see a change.

Data breaches 115

Data breaches Personal data Communications Government 115

Collibra

JULY 13, 2023

Whenever I speak with data scientists, the words “model” and “data” pop up all the time. When I challenge these smart model builders about the importance of good data assets, they wholeheartedly agree. They say, “Of course, data is very important.” Data is their responsibility.” AI is dead! Long live AI!

Government 72

Government Data science Artificial Intelligence Analytics 72

Security Affairs

MARCH 27, 2024

The INC Ransom extortion group hacked the National Health Service (NHS) of Scotland and is threatening to leak three terabytes of alleged stolen data. The cybercrime group claims to have stolen three terabytes of data and is threatening to leak them. “3 terabytes of data will be published soon.

Government 101

Government IT Security Data breaches 101

Security Affairs

OCTOBER 18, 2023

Experts reported that the vulnerability CVE-2023-4966 in Citrix NetScaler ADC/Gateway devices has been exploited in attacks since late August. On October 10, Citrix published a security bulletin related to a critical vulnerability, tracked as CVE-2023-4966, in Citrix NetScaler ADC/Gateway devices. ” reported Citrix.

Authentication 95

Authentication Access Cloud Risk 95

IT Governance

JULY 6, 2023

Welcome to our July 2023 catches of the month feature, in which we explore the latest phishing scams and the tactics that cyber criminals use to trick people into handing over personal data. They soon learned that each document contained Chinese text and a QR code. Fortra’s PhishLabs team found that 23.6%

Phishing 98

Phishing Education Government Personal data 98

Everteam

APRIL 11, 2023

Archiving , Data Management , Digital bulk , Document Management Documation 2023: summary of our conferences Anne-Claire Girard 11 April 2023 Here is what you should know: Summary of Everteam Documation 2023 conferences “When do we talk about digital Bulk? With what governance rules?”

Archiving 52

Archiving Marketing Paper Compliance 52

IBM Big Data Hub

MAY 28, 2024

Virtually every organization recognizes the power of data to enhance customer and employee experiences and drive better business decisions. Yet, as data becomes more valuable, it’s also becoming harder to protect. What is a data protection strategy?

Data breaches 83

Data breaches GDPR Compliance Encryption 83

IT Governance

JUNE 8, 2023

We’ve looked at sources such as IBM’s Cost of a Data Breach Report , Verizon’s 2023 DBIR (Data Breaches and Investigations Report) and Proofpoint’s The State of Phishing report , and found 50 essential stats to reveal the threat that phishing plays – plus we have an extra statistic to explain how you can prevent attacks.

Phishing 111

Phishing Data breaches Communications Government 111

IT Governance

AUGUST 7, 2023

Welcome to our August 2023 catches of the month feature, in which we explore the latest phishing scams and the tactics that cyber criminals use to trick people into handing over personal data. One of the ways it does that is by warning people about security threats when they enter their Windows password into websites and documents.

Phishing 98

Phishing Passwords Education Personal data 98

IT Governance

MAY 25, 2023

However, the Meta decision illustrates the ongoing difficult of applying a consistent approach to GDPR enforcement, particularly when it comes to cross-border and international data transfers. Our EU–US Data Transfer Assessment and Action Plan will help you ensure you stay on the right side of the law.

GDPR 96

GDPR Compliance Personal data Data Privacy 96

IT Governance

JANUARY 11, 2023

Welcome to our January 2023 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over personal data. Malware campaign uses stolen bank data for phishing. This means that the attacker has gotten access to customers’ data,” Qualys said.

Phishing 105

Phishing Education Access Personal data 105

Collibra

NOVEMBER 10, 2023

Discussions surrounding AI governance, regulation, and ethics have taken center stage. The United States government, along with many other countries, has recognized the need to establish a framework for responsible AI development and deployment. Personal data should be handled with care.

Artificial Intelligence 84

Artificial Intelligence Government Security Data Privacy 84

Data Protection Report

APRIL 30, 2024

The claims related to the company’s sharing personal data without consumer consent and making it very difficult for consumers to cancel their subscriptions to this telehealth service. The order also requires that the company destroy personal data for which it had not received consent and to create a document retention and destruction policy.

Personal data 85

Personal data Privacy Information governance Compliance 85

Security Affairs

JANUARY 15, 2023

TB of data stolen from Cellebrite, a digital intelligence company that provides tools for law enforcement, were leaked online. One of the most popular services provided by the company is the UFED ( Universal Foresenic Extraction Device ) which is used by law enforcement and intelligence agencies to unlock and access data on mobile devices.

Archiving 98

Archiving Government IT Access 98

IT Governance

MARCH 20, 2024

However, the 2023 edition of that study found that this had dropped to 44% in the UK, whereas the global average had climbed to 73%. The UK government’s Cyber Security Breaches Survey 2023 confirms this trend. billion records breached in 2023. This is a false economy. Our research found 8.2 billion records breached.

Security 116

Security Data breaches Government Insurance 116

Data Protection Report

FEBRUARY 27, 2024

On 1 and 2 February 2024, at the fourth 4 th ASEAN Digital Ministers Meeting ( ADGMIN ) in Singapore, ASEAN [1] unveiled: the updated Joint Guide to ASEAN Model Contractual Clauses and EU Standard Contractual Clauses ( Joint MCC – SCC Guide ); and the ASEAN Guide on AI Governance and Ethics ( ASEAN AI Governance Guide ).

Government 59

Government Personal data Compliance Risk 59

DLA Piper Privacy Matters

AUGUST 22, 2023

To add to the compliance burden, new mandatory, periodic and detailed data protection compliance audits have now been proposed in China, with measures beyond the usual governance/compliance audit compliance steps expected under other data protection frameworks, and a duty to report the audit results to the China data authorities.

Compliance 75

Compliance Personal data Government Access 75

ARMA International

AUGUST 7, 2023

In 2023, we see six significant trends that considerably impact the legal industry. These include artificial intelligence (AI), hybrid and remote work collaboration, cloud, workflow automation and customization, mail processing and digitization, and security and data privacy. AI can be a valuable tool. It’s easy to understand why.

Artificial Intelligence 52

Artificial Intelligence Cloud Data Privacy Privacy 52

Krebs on Security

AUGUST 29, 2023

government today announced a coordinated crackdown against QakBot , a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. Dutch authorities inside a data center with servers tied to the botnet. government has used court orders to remotely disinfect systems compromised with malware.

Ransomware 262

Ransomware Government Military Access 262

The Last Watchdog

SEPTEMBER 25, 2023

million in 2023, according to IBM’s Cost of a Data Breach Report, and over 700,000 small businesses were targeted in cybersecurity attacks in 2020, according to the Small Business Association. Also consider creating a policy for which employees can access which types of data. The average cost of a cybersecurity breach was $4.45

Cybersecurity 222

Cybersecurity Data breaches Compliance Phishing 222

Krebs on Security

JANUARY 19, 2023

T-Mobile today disclosed a data breach affecting tens of millions of customer accounts, its second major data exposure in as many years. In a filing with federal regulators, T-Mobile said an investigation determined that someone abused its systems to harvest subscriber data tied to approximately 37 million current customer accounts.

Data breaches 307

Data breaches Cybersecurity Passwords Phishing 307

Security Affairs

NOVEMBER 27, 2023

. “The Defence Intelligence of Ukraine informs that as a result of a successful complex special operation in cyberspace, a large volume of confidential documents of the structural subdivision of the Russian Ministry of Transport – the Federal Air Transport Agency (Rosaviatsia) – is now acquired.”

Military 111

Military Manufacturing Government Authentication 111

ARMA International

APRIL 18, 2022

It is essential that your organization’s records retention schedule is compliant with the data protection requirements in the jurisdictions where your organization operates. The records retention schedule is the foundational document for a records management program. Introduction to Data Protection Laws.

Personal data 100

Personal data GDPR Privacy Records Management 100

Hunton Privacy

NOVEMBER 15, 2023

Patrick Gunning from King & Wood Mallesons reports that, on November 2, 2023, the Australian Information Commissioner filed proceedings in the Federal Court of Australia against Australian Clinical Labs Limited seeking a civil penalty ( i.e. , a fine) in connection with the company’s response to a data breach that occurred in February 2022.

Data breaches 128

Data breaches Privacy Risk Information Security 128