DataBreaches cannot read “Lower Merion School District” without recalling the “Webcamgate” scandal of 2010, when the district was discovered monitoring students remotely in their bedrooms on district-issued MacBooks. At the time, they initially denied any misuse of remote access that was part of a security feature. Now the district is back in local news in…
Matilda Battersby reports: A housing association’s broker has been found liable for “breach of duty” in a landmark High Court judgment. Watford Community Housing (WCH) brought a professional negligence claim against Arthur J Gallagher Insurance Brokers for failing to make “timely notifications” of a data breach to one of three of its insurers. Deputy High…
In 2024, cyber threats targeting SaaS surged, with 7,000 password attacks blocked per second (just in Entra ID)—a 75% increase from last year—and phishing attempts up by 58%, causing $3.5 billion in losses (source: Microsoft Digital Defense Report 2024). SaaS attacks are increasing, with hackers often evading detection through legitimate usage patterns. The cyber threat…
Stacey Saldanha-Olson reports: Two undisclosed patients filed a lawsuit April 15 after a Lawrence physical therapist breached more than 400 people’s medical data to target women who’d had breast augmentation surgery and other plastic surgery, according to documents filed in the U.S. District Court of Kansas. The undisclosed patients are suing through a class action…
Threat actors are exploiting a recent GFI KerioControl firewall vulnerability that leads to remote code execution. The post GFI KerioControl Firewall Vulnerability Exploited in the Wild appeared first on SecurityWeek.
Google has revealed the various safety measures that are being incorporated into its generative artificial intelligence (AI) systems to mitigate emerging attack vectors like indirect prompt injections and improve the overall security posture for agentic AI systems. “Unlike direct prompt injections, where an attacker directly inputs malicious commands into a prompt, indirect prompt injections
Can a harmless click really lead to a full-blown cyberattack? Surprisingly, yes — and that’s exactly what we saw in last week’s activity. Hackers are getting better at hiding inside everyday actions: opening a file, running a project, or logging in like normal. No loud alerts. No obvious red flags. Just quiet entry through small…
