Security Affairs

DECEMBER 17, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 81

Security Data breaches Ransomware Artificial Intelligence 81

IT Governance

FEBRUARY 5, 2024

29,530,829,012 known records breached so far in 4,645 publicly disclosed incidents Welcome to our 2024 data breaches and cyber attacks page, where you can find an overview of the year’s top security incidents, the most breached sectors of 2024, month-on-month trends, links to our monthly reports, and much more. Where ‘up to’, etc.

Data breaches 107

Data breaches Security Government Personal data 107

eSecurity Planet

JUNE 7, 2023

IT security buyers are consolidating vendors at an overwhelming rate, according to a speaker at this week’s Gartner Security & Risk Management Summit. ” Security Products Merge Into Platforms As part of that trend, security products are consolidating too, MacDonald said.

Security 98

Security Cloud Workplace security Cybersecurity 98

IT Governance

APRIL 4, 2024

IT Governance’s research found the following for March 2024: 3,478 publicly disclosed security incidents. To minimise data skewing, we’ve accounted for this by providing two Data Breach Dashboards this month: one including and one excluding the above events. This blog provides further analysis of the data we’ve collected.

Data breaches 99

Data breaches Passwords Security Cloud 99

OpenText Information Management

JUNE 7, 2024

The concept of security posture, as defined by the National Institute of Standards and Technology (NIST), refers to an organization's overall cybersecurity strength—including its defenses and adaptability to evolving threats. And it is worth noting that eight of the top 10 data breaches of 2023 were related to application attack surfaces.

Cybersecurity 62

Cybersecurity Risk Data breaches Analytics 62

IT Governance

JANUARY 9, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Hathaway breached, 41.5 The compromised data allegedly includes names, email addresses and phone numbers.

Data Privacy 63

Data Privacy Privacy Manufacturing Data breaches 63

Hunton Privacy

NOVEMBER 15, 2023

Patrick Gunning from King & Wood Mallesons reports that, on November 2, 2023, the Australian Information Commissioner filed proceedings in the Federal Court of Australia against Australian Clinical Labs Limited seeking a civil penalty ( i.e. , a fine) in connection with the company’s response to a data breach that occurred in February 2022.

Data breaches 128

Data breaches Privacy Risk Information Security 128

Security Affairs

NOVEMBER 22, 2023

Citrix urges admins to kill NetScaler user sessions after patching their appliances against the CVE-2023-4966 Citrix Bleed vulnerability. Citrix is providing additional measures to admins who are patching their NetScaler appliances against the CVE-2023-4966 ‘ Citrix Bleed ‘ vulnerability. reported Citrix. states Mandiant.

Authentication 94

Authentication Cybersecurity Access Ransomware 94

Security Affairs

NOVEMBER 27, 2023

“The data obtained as a result of hacking and penetration of enemy information systems includes a list of daily reports of Rosaviatsiya for the entire Russian Federation for more than a year and a half.” ” Rosaviatsia is the government agency responsible for the oversight and regulation of civil aviation in Russia.

Military 112

Military Manufacturing Government Authentication 112

IT Governance

DECEMBER 21, 2023

To find out, we looked at the ICO’s (Information Commissioner’s Office) public data set , specifically looking into four data breach types caused by human error: Data emailed to incorrect recipient. Data posted or faxed to incorrect recipient. At the time of writing, the data set starts in Q2 2019 and goes up to Q2 2023.

Data breaches 52

Data breaches Personal data Government GDPR 52

IT Governance

FEBRUARY 14, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Financial information, medical data, health reimbursements, postal addresses, telephone numbers and emails are not thought to have been compromised.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Hunton Privacy

AUGUST 22, 2023

reports that in early August 2023, the Indian Parliament passed the Digital Personal Data Protection Act (the “Act”), bringing to a close a 5-year process to enact an omnibus data privacy law in India. The Act was ratified by the President of India and will come into effect once notified by the Government.

Personal data 90

Personal data Data breaches GDPR Government 90

eSecurity Planet

FEBRUARY 10, 2023

The LookingGlass scoutPrime threat intelligence platform (TIP) integrates enterprise-grade external security threat information with information on internal architecture and security information to create actionable, prioritized risk scores for threats. Security Qualifications STIX & TAXII 2.0

Energy and Utilities 104

Energy and Utilities Risk Marketing Cloud 104

Krebs on Security

MARCH 20, 2024

It’s not unusual for the data brokers behind people-search websites to use pseudonyms in their day-to-day lives (you would, too). Some of these personal data purveyors even try to reinvent their online identities in a bid to hide their conflicts of interest. Cocofinder[.]com com is a people-search service that launched in Sept.

Marketing 261

Marketing Cloud Privacy Data Privacy 261

Data Protection Report

MAY 24, 2024

Background – white paper response on the UK’s approach to AI regulation In February 2024, the UK Department for Science, Innovation, and Technology (DSIT) set out the government’s proposed approach to AI regulation. These principles (the Principles) are: Safety, security and robustness. Accountability and governance.

Government 45

Government Risk Marketing Paper 45

IBM Big Data Hub

JANUARY 24, 2024

To mitigate and prepare for such risks, penetration testing is a necessary step in finding security vulnerabilities that an attacker might use. A penetration test , or “pen test,” is a security test that is run to mock a cyberattack in action. These attacks are often performed by red teams, or offensive security team.

Risk 73

Risk Data breaches Authentication Cybersecurity 73

IBM Big Data Hub

FEBRUARY 20, 2024

According to the European Union climate monitor Copernicus, 2023 was the warmest year on record—nearly 1.48 The IPCC projects that water available for human use will continue to decline in North America, while water security will be at risk in Africa, Asia and South America. degrees Celsius (2.66

Energy and Utilities 114

Energy and Utilities Artificial Intelligence Agriculture Risk 114

Security Affairs

NOVEMBER 9, 2023

Then the APT group deployed a new variant of the CADDYWIPER data wiper in the target’s IT environment to destroy its operations and remove forensic artifacts. On October 10, the threat actors leveraged an optical disc (ISO) image named “a.iso” to execute a native MicroSCADA binary to issue commands to switch off substations.

Ransomware 109

Ransomware Access IT Government 109

IBM Big Data Hub

SEPTEMBER 15, 2023

Securities and Exchange Commission (SEC) is in the process of finalizing climate related disclosure requirements. These disclosures will need to be filed as part of the company annual 10-K statements, potentially as soon as the 2024 fiscal year if the final ruling is published by October 2023 as currently expected.

Analytics 73

Analytics Risk Government IT 73

IBM Big Data Hub

MAY 26, 2023

Cloud computing offers the potential to redefine and personalize customer relationships, transform and optimize operations, improve governance and transparency, and expand business agility and capability. In 2017, 94% of hospitals used electronic clinical data from their EHR.

Cybersecurity 73

Cybersecurity Cloud Compliance Computer and Electronics 73

IT Governance

MARCH 11, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 36 million records. Cybernews’s research team discovered the MongoDB server in December 2023 and contacted Glosbe. Data breached: 6.9

Data Privacy 79

Data Privacy Privacy Security Data breaches 79

Data Matters

SEPTEMBER 7, 2022

The Privacy Working Group expects to expose a draft of the new model by the NAIC’s Fall 2022 National Meeting (Fall 2022 Meeting), with final adoption by the Privacy Working Group expected to occur by the NAIC’s Summer 2023 National Meeting. 43R — Loan-Backed and Structured Securities (SSAP No. 26R — Bonds (SSAP No. 26R) and SSAP No.

Insurance 78

Insurance Paper Privacy Risk 78

eSecurity Planet

FEBRUARY 10, 2023

It is a cloud-native security platform with security and compliance coverage for users, applications, data, and the cloud technology stack. Twistlock was featured on our list of the top container and Kubernetes security vendors , where Prisma Cloud now takes its place.

Cloud 76

Cloud Security Compliance Risk 76

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Researchers from the German cyber security company Aplite discovered 3,806 servers from 111 countries accessible on the Internet. Data breached: 5 TB. Akumin Inc.

Data Privacy 98

Data Privacy Energy and Utilities Privacy Manufacturing 98

The Last Watchdog

MARCH 21, 2022

Data has become critical to your organization’s success. At the same time – in fact, as a direct result of data’s central importance – more adversaries are working harder and finding more nefarious ways to steal or otherwise compromise your data. One-half of corporate data is now stored in the cloud.

Encryption 214

Encryption Cloud Privacy GDPR 214

Information is Currency

NOVEMBER 8, 2018

InfoBOK is the Information Body of Knowledge which is an abridged version of Information (and over 100 pages shorter) and does not contain the analysis that is included in Information. The analysis in Information makes it worth the price as it adds a layer of richness to the text. Information consist of two sections.

Records Management 40

Records Management Risk Paper Archiving 40

Collibra

AUGUST 29, 2023

Our summer release is here with new capabilities to help you improve time to value, expand visibility across your complex data landscape and reduce costs. Accelerate time to insight with parallel profiling Get the information you need about your data with faster profiling enabled by parallel processing on Edge.

Cloud 52

Cloud Metadata Access Security 52

eSecurity Planet

JULY 19, 2023

The open source security tool, Nmap, originally focused on port scanning, but a robust community continues to add features and capabilities to make Nmap a formidable penetration testing tool. Network Packet Manipulation To gather network information, Nmap has developed abilities to manipulate the data packets transmitted across the network.

Communications 52

Communications Access Security Manufacturing 52

IT Governance

JANUARY 23, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data set is a collection of 1 billion credentials sourced from stealer logs and hosted on the illicit.services website. Data breached: 70,840,771 email addresses.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Security Affairs

FEBRUARY 11, 2024

Every week the best security articles from Security Affairs are free for you in your email box. Cybersecurity Announcement of a Visa Restriction Policy to Promote Accountability for the Misuse of Commercial Spyware Critical Security Issue Affecting TeamCity On-Premises (CVE-2024-23917) – Update to 2023.11.3

Security 94

Security Ransomware Sales Cybersecurity 94

IT Governance

JANUARY 30, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data is more than mere credentials, too – according to Cybernews, most of the exposed data is sensitive. Data breached: more than 26 billion records.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

eSecurity Planet

NOVEMBER 30, 2021

These accounts give admins control over data, applications, infrastructure and other critical assets that average system users don’t have permission to access or change. PAM focuses on larger actions such as the bulk download or alteration of databases that might give sysadmins access to a large number of accounts or critical data.

Access 137

Access Analytics Passwords Cloud 137

IBM Big Data Hub

FEBRUARY 15, 2024

ESG (environmental, social and governance) factors may not be the first thing that pops up when you search “what’s trending?” Prominent examples include the Sustainable Finance Disclosure Regulation (SFDR), the CSRD, and the Security and Exchange Commission’s (SEC) proposal to mandate ESG reporting.

Risk 79

Risk IT Government Compliance 79

ForAllSecure

MAY 17, 2023

Or even basic low level threat analysis. A lot of SMBs do not have security operations centers or SOCs. They have IT contractors who can provision laptops and maintain a certain level of compliance and security. They can provide that additional security, remotely. They have those security capabilities.

Insurance 40

Insurance Privacy Ransomware GDPR 40

Thales Cloud Protection & Licensing

JANUARY 24, 2024

Protecting Against the Risks and Managing the Complexities of a Quantum World with Thales and IBM Consulting madhav Thu, 01/25/2024 - 11:03 Contributors: Ollie Omotosho - Director, Strategir Partnerships, Thales Antti Ropponen, Head of Data & Application Security Services, IBM Consulting In the world of business, data security is paramount.

Risk 87

Risk Encryption Blockchain Authentication 87

IT Governance

FEBRUARY 6, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Eye4Fraud database allegedly leaked – 14.9 Data breached: 14,900,000 lines.

Data Privacy 77

Data Privacy Privacy Insurance Security 77

eSecurity Planet

DECEMBER 7, 2023

Encryption scrambles data to make it unreadable to those without decryption keys. Encryption algorithm types will provide an overview of the mathematical algorithms used to encrypt data (AES, RSA, etc.), Stream ciphers process data as it passes through the algorithm and is used in communication.

Encryption 109

Encryption Passwords Authentication Communications 109