At one critical infrastructure organization, CISA’s red team got in and kept going. It compromised multiple workstations, elevated its privileges over the domain and began moving laterally into other systems and resources. The security operations center never detected it.
Uber’s software could cut a driver off from the platform for suspected fraud or poor customer ratings. What it did not necessarily do first was ask a person. That has now cost the company €824.99 million.
The Personal Information Protection Commission has opened a public consultation on an overhaul of the country’s privacy protection framework, a review prompted in part by the widening distance between rules built around consent and forms of data processing that have become considerably harder to explain, much less reduce to a series of yes-or-no decisions.
Pokémon Center is notifying customers in the United Kingdom and Germany that personal and order information may have been exposed in a cyberattack on CEVA Logistics, the third-party provider it uses to fulfill and ship orders in those markets.
For a long time, deleting data could feel strangely reckless. Storage was cheap, and information was potentially valuable. The cost of keeping another year of customer records, internal correspondence, transaction histories or old documents was difficult to see, while the cost of deleting the wrong thing was easy to imagine. So companies kept it. Some of it was retained for legal or operational reasons, some because nobody was quite sure whether it could safely be destroyed, and some because of the most durable retention policy in corporate life: we might need it someday.
The Hong Kong Interbank Clearing Limited (HKICL) has identified two fraudulent websites attempting to impersonate its official platform to deceive users. Compliance teams should note that these scams target personal identification and banking details under the guise of "Buyer Online Protection" services.
The Hong Kong Interbank Clearing Limited (HKICL) has identified a fraudulent website attempting to impersonate its official platform by offering fake "Buyer Online Protection" services. Compliance teams should note this as an operational and fraud risk that necessitates heightened vigilance in customer communications and digital security monitoring.
Access Login