Category Security

Secrets are intended to be hidden, or at least known only to a limited number of individuals (or systems). Otherwise they are not real secrets. In your personal life, revealing a secret can negatively affect your relationships, invite social stigma,…

The European Commission has proposed changes to the GDPR aimed at enhancing cooperation between Data Protection Authorities (DPAs) working on cross-border enforcement. The rule is the result of a “list of wishes” sent to the European Commission in October 2022…

July 5, 2023Ravi LakshmananSupply Chain / Software Security The npm registry for the Node.js JavaScript runtime environment is the so-called obvious confusion This attack could allow threat actors to hide malware in project dependencies or execute arbitrary scripts during installation.…

More than half of UK citizens (56%) don’t trust the NHS to use AI to analyze patient data due to security and privacy concerns, according to a VMWare survey. Additionally, a quarter (25%) of the more than 2,000 respondents to…

July 5, 2023Ravi LakshmananPrivacy / Social Media Meta’s upcoming Twitter competitor, Instagram Threads, will not launch in the European Union due to privacy concerns, according to Ireland’s Data Protection Commission (DPC). The development was reported by The Irish Independent, which…

Dozens of leading UK security and privacy experts express grave concern over online safety bill provisions calling for monitoring of end-to-end encrypted messages for child sexual exploitation and abuse (CSEA) content bottom. Section 110 of the bill, which is currently…

Security researcher Pol Till has identified a Mexico-based hacker known as Neo_Net as the mastermind behind a string of cyberattacks targeting global banks. According to Thill’s findings, published by SentinelOne after a malware research challenge in partnership with vx-underground, Neo_Net…

About 69% of FortiGate firewalls affected by the recently discovered FortiOS vulnerability remain unpatched, according to Bishop Fox security researchers. This flaw (CVE-2023-27997) could lead to remote code execution (RCE). Patched by Fortinet in mid-June. For more information about this…

July 4, 2023Ravi LakshmananPrivacy / Online Security Sweden’s data protection watchdog has warned companies against using Google Analytics, citing the risks posed by US government surveillance, following similar moves in Austria, France and Italy last year. The development comes as…

A new report by the Kaspersky Digital Footprint Intelligence team reveals that several companies around the world are grossly unprepared to deal with darknet data breaches. The effort, which took place in 2022, tracked dark web posts that provided access…