In spite of an absolute load of criticism from many different quarters, the UN’s cybercrime convention is moving forward and is now likely to see nations ratifying it in the coming months.
The breach of National Public Data was a major mainstream news item recently. While 2.9 billion records are included in the data breach, but deep dives by Troy Hunt (of HaveIBeenPwned) and others indicate that a great deal of this is duplicate information.
The Texas Attorney General’s office has already taken aim at Google and Meta, and it appears General Motors (GM) is the next company in its crosshairs. A consumer privacy lawsuit will test the boundaries of what the AG’s office calls “surveillance devices on wheels” as GM is being taken to task for surreptitiously collecting driver data and selling it to third parties.
The NIST post-quantum encryption project has been a global effort, and these new standards are very likely to see global adoption going forward. The agency has encouraged organizations to immediately begin adopting the primary standards as there is no expectation that they will be replaced by “something better” down the line.
It is still not completely clear who hacked the Trump campaign, but strong signs from several different sources are pointing to an Iranian election interference campaign that has also targeted the Biden and Harris campaigns since at least June.
The Azure outage that took out numerous services on July 30 has been confirmed to be due to a DDoS attack. The twist to the story is that a failure in Microsoft’s defense implementation seems to have actually helped the attackers, making the situation worse than it normally would have been.
The average cost of data breach spiked 10% to $4.88 million, and that number jumps to $5.17 million when stolen data was found in public cloud storage.
US federal grand jury has indicted Rim Jong Hyok of North Korea in connection with a 2022 campaign that saw the North Korean Hacker first conduct ransomware attacks against hospitals for profit, then turn those funds to conduct data theft attacks against the US Air Force, NASA and assorted defense contractors.
The MediSecure data breach does include potentially sensitive details of pharmacy prescriptions, but an apparent lack of structure to the stolen database means that these health details might not be directly linked with the leaked names.
Chunks of Disney’s internal Slack messaging are being released to the public via BitTorrent, and surprisingly the Russia-based hacking group behind the data leak does not seem interested in a ransom.