DataBreaches is generally a great fan of state attorneys general taking enforcement action stemming from data breaches where the security was really subpar or the entity did not notify those affected in a reasonable amount of time. But two enforcement actions in New York have me wondering if the state has been a bit unfair…
Cybersecurity researchers have shed light on a new campaign that has likely targeted the Russian automobile and e-commerce sectors with a previously undocumented .NET malware dubbed CAPI Backdoor. According to Seqrite Labs, the attack chain involves distributing phishing emails containing a ZIP archive as a way to trigger the infection. The cybersecurity company’s analysis is…
Oleh Pavliuk and Yevhen Kizilov report: Slovak Prime Minister Robert Fico has said that Slovakia’s national insurance company has suffered a “massive cyberattack” and claimed, without any evidence, that Ukraine was involved. Source: European Pravda with reference to Dennik N Details: At an emergency press conference on Friday, 24 January, Fico said the cyberattack had started at noon…
New research from the Citizen Lab has found signs that Kenyan authorities used a commercial forensic extraction tool manufactured by Israeli company Cellebrite to break into a prominent dissident’s phone, making it the latest case of abuse of the technology targeting civil society. The interdisciplinary research unit at the University of Toronto’s Munk School of…
John Beauge reports an update to the previously reported case of a former Nuance Communications employee who compromised the protected health information of more than 1.3 million Geisinger Health patients two days after Nuance had terminated his employment for unrelated reasons. Two counts of false statement have been added to the charge against a California……
Divya reports: A security vulnerability has been discovered in the popular 7-Zip file compression utility that could allow attackers to write arbitrary files to victim systems and potentially execute malicious code. The flaw, tracked as CVE-2025-55188, affects all versions of 7-Zip prior to the recently released version 25.01 and stems from improper handling of symbolic links……
Meta Platforms on Wednesday announced that it’s adding support for passkeys, the next-generation password standard, on Facebook. “Passkeys are a new way to verify your identity and login to your account that’s easier and more secure than traditional passwords,” the tech giant said in a post. Support for passkeys is expected to be available “soon”…
