article thumbnail

National Safety Council data leak: Credentials of NASA, Tesla, DoJ, Verizon, and 2K others leaked by workplace safety organization

Security Affairs

On its digital platform, NSC provides online resources for its nearly 55,000 members spread across different businesses, agencies, and educational institutions. The Cybernews research team discovered public access to the web directories that exposed thousands of credentials.

Passwords 130
article thumbnail

Hundreds of organisations breached patient data rules, reveals BMJ

The Guardian Data Protection

Drug firms, private healthcare providers and universities among those that may be failing to protect confidentiality, says report Hundreds of organisations, including drug companies, private healthcare providers and universities, have breached patient data sharing agreements but not had their access to patient data withdrawn, a report reveals.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

China-linked APT41 group exploits Citrix, Cisco, Zoho flaws

Security Affairs

The group hit entities in several industries, including the gaming, healthcare, high-tech, higher education, telecommunications, and travel services industries. The vulnerability could be exploited by attackers to access company networks.

article thumbnail

Security Affairs newsletter Round 292

Security Affairs

A critical flaw in industrial automation systems opens to remote hack Crooks stole 800,000€ from ATMs in Italy with Black Box attack Operators behind Dark Caracal are still alive and operational Sopra Steria estimates financial Impact of ransomware attack could reach €50 Million Delaware County, Pennsylvania, opted to pay 500K ransom to DoppelPaymer (..)

article thumbnail

Connecting the Bots – Hancitor fuels Cuba Ransomware Operations

Security Affairs

Hancitor became another commodity malware which partnered with ransomware gangs to help them gain initial access to target networks – the increasing trend outlined by Group-IB researchers in the recent Ransomware Uncovered 2020/2021 report. The exfiltrated data is published on a dedicated Cuba DLS (Data Leak Site).

article thumbnail

Virginia’s new Consumer Data Protection Act

Data Protection Report

institution of higher education. It also requires that controllers must “establish, implement, and maintain reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of personal data. The new law also uses the GDPR concepts of “controller” and “processor.”

article thumbnail

List of Data Breaches and Cyber Attacks in April 2023 – 4.3 Million Records Breached

IT Governance

Reports emerged near the end of the month that a cyber criminal had gained unauthorised access to the organisation’s systems and had stolen the personal data of 2.3 What is apparent is that the crook accessed credit card data for consumers’ Bank of America past-due accounts. million people.