Schneier on Security

APRIL 3, 2024

The Incognito splash page will explicitly state that Google collects data from third-party websites “regardless of which browsing or browser mode you use,” and stipulate that “third-party sites and apps that integrate our services may still share information with Google,” among other changes.

Data collection 305

Data collection 305

The Hacker News

JULY 30, 2024

state of Texas over allegations that it illegally collected biometric data of millions of users without their permission, marking one of the largest penalties levied by regulators against the tech giant. Meta, the parent company of Facebook, Instagram, and WhatsApp, agreed to a record $1.4 billion settlement with the U.S.

Data collection 140

Data collection 140

WIRED Threat Level

JUNE 4, 2024

Windows Recall takes a screenshot every five seconds. Cybersecurity researchers say the system is simple to abuse—and one ethical hacker has already built a tool to show how easy it really is.

Data collection 145

Data collection Cybersecurity Hacking 145

Adam Levin

JANUARY 27, 2020

According to the Motherboard article, “multiple Avast users… were not aware Avast sold browsing data, raising questions about how informed that consent is.”. The primary method of Avast’s data collection was initially via web browser plugins distributed through subsidiaries such as AVG.

Data collection 243

Data collection Antivirus Software Malware 243

Schneier on Security

DECEMBER 13, 2023

This is not about mass surveillance of mail , this is about sorts of targeted surveillance the US Postal Inspection Service uses to catch mail thieves : To track down an alleged mail thief, a US postal inspector used license plate reader technology, GPS data collected by a rental car company, and, most damning of all, hid a camera inside one of the (..)

Surveillance 286

Surveillance Data collection Technology 286

Adam Levin

SEPTEMBER 4, 2020

Bush in the wake of the September 11 attacks, but had been phased out by the NSA between 2018 and 2019 after disuse and technical issues had rendered the data collected unusable. . “[T]he

Surveillance 260

Surveillance Data collection Government Cybersecurity 260

Schneier on Security

NOVEMBER 4, 2020

We then comprehensively evaluate[d] both the keystroke/typing detection and text inference frameworks using data collected from a large number of participants.” He says the “text inference framework that uses the keystrokes detected from the video … predict[s] words that were most likely typed by the target user.

Data collection 361

Data collection Software 361

Schneier on Security

JUNE 14, 2021

Reached for comment, TikTok could not confirm what product developments necessitated the addition of biometric data to its list of disclosures about the information it automatically collects from users, but said it would ask for consent in the case such data collection practices began.

Data collection 271

Data collection Media 271

Tech Republic Security

AUGUST 17, 2021

People surveyed by KPMG reported feeling increasingly uneasy about the data collection practices of corporations.

Data privacy 214

Data privacy Data collection 214

Joseph Steinberg

FEBRUARY 2, 2021

While we have become somewhat accustomed to the data collection practices of online retailers seeking to analyze our purchase histories in order to better target their marketing efforts, many people may not realize that even some well-known retailers also use data provided by people whose purchases the retailer itself cancelled.

Retail 219

Retail Data collection Artificial Intelligence Marketing 219

Dark Reading

OCTOBER 2, 2023

Norway wants to permanently ban the owner of Facebook and Instagram from collecting sensitive user data across Europe, saying its current policies violate GDPR rules.

Data collection 105

Data collection 105

Schneier on Security

MARCH 2, 2020

Recently announced Off-Facebook feature comes with similar issues, giving little insight into how advertisers collect your personal data and how to prevent such data collection. Many are surprised at what the companies know about them.

Advertising 252

Advertising Data collection Cybersecurity 252

Schneier on Security

MARCH 20, 2020

With that in mind, the EFF has some good thinking on how to balance public safety with civil liberties: Thus, any data collection and digital monitoring of potential carriers of COVID-19 should take into consideration and commit to these principles: Privacy intrusions must be necessary and proportionate.

Surveillance 261

Surveillance Big data Data collection Government 261

Schneier on Security

NOVEMBER 9, 2018

The boundaries between research and grey data are blurring, making it more difficult to assess the risks and responsibilities associated with any data collection. Many sets of data, both research and grey, fall outside privacy regulations such as HIPAA, FERPA, and PII.

Data collection 214

Data collection Cyber Risk Risk Government 214

Tech Republic Security

JANUARY 4, 2023

Meta has violated GDPR with illegal personal data collection practices for targeted ads. Learn about this latest violation and Meta's rocky GDPR history. The post Meta violates GDPR with non-compliant targeted ad practices, earns over $400 million in fines appeared first on TechRepublic.

Data collection 175

Data collection Big data VPN 175

Schneier on Security

JULY 1, 2021

The interventions recommended here are still relatively light, and reflect the fact that cyber insurance is only a potential incentive for managing societal cyber risk.They include: developing guidance for minimum security standards for underwriting; expanding data collection and data sharing; mandating cyber insurance for government suppliers; and (..)

Insurance 303

Insurance Cyber Insurance Ransomware Marketing 303

Schneier on Security

MARCH 30, 2020

Above all, we must make sure that these measures end and that the data collected for these purposes is not re-purposed for either governmental or commercial ends. I worry that in our haste and fear, we will fail to do any of that. More from EFF.

Surveillance 268

Surveillance Data collection Technology 268

WIRED Threat Level

JULY 24, 2024

A former Google engineer has built a search engine, WebXray, that aims to find illicit online data collection and tracking—with the goal of becoming “the Henry Ford of tech lawsuits.”

Data collection 145

Data collection Engineering 145

Anton on Security

JANUARY 12, 2022

Mostly data collection. Data collection sounds conceptually simple, but operationally it is still very difficult for many organizations. land of data collection. Just as early SIM/SEM innovators struggled with collection [and then UEBAs did ], innovators in 2022 struggle with it as well. SHIFT LEFT?

Data collection 243

Data collection Architecture Software Media 243

The Last Watchdog

JUNE 10, 2024

For instance, it helps online tax services prevent leakage of taxpayers’ personal information via pixels, those imperceptible JavaScripts embedded in a web page to collect information about the user’s interactions.

Data collection 261

Data collection Internet Internet Technology 261

Schneier on Security

AUGUST 25, 2020

Wethen find that for users who visited 50 or more distinct do-mains in the two-week data collection period, ~50% can be reidentified using the top 10k sites. Our work replicates the original paper's core findings by identifying 48,919 distinct browsing profiles, of which 99% are unique.

Data collection 230

Data collection Risk 230

The Hacker News

APRIL 24, 2024

A new malware campaign leveraged two zero-day flaws in Cisco networking gear to deliver custom malware and facilitate covert data collection on target environments.

Data collection 144

Data collection Malware 144

WIRED Threat Level

SEPTEMBER 28, 2022

Want to speak up against Big Tech, unjust data collection, and surveillance? Here's how to be an activist in your community and beyond.

Data privacy 145

Data privacy Surveillance Data collection 145

Schneier on Security

OCTOBER 3, 2019

Data Collected: 22 Vendors 1,294 Products 4,956 Firmware versions 3,333,411 Binaries analyzed Date range of data: 2003-03-24 to 2019-01-24 (varies by vendor, most up to 2018 releases). [.]. This dataset contains products such as home routers, enterprise equipment, smart cameras, security devices, and more.

IoT 213

IoT Firmware Data collection Architecture 213

Schneier on Security

DECEMBER 15, 2017

This is a good example of how powerful synthesizing information from disparate data sources can be. We spend too much time worried about individual data collection systems, and not enough about analysis techniques of those systems. It only took 12 turns before the app knew exactly where the car was. Research paper.

Data collection 274

Data collection 274

Zero Day

SEPTEMBER 19, 2024

The world's biggest online platforms collect way more data than previously known and make it very hard for users to opt out.

Data collection 75

Data collection Media 75

We Live Security

MARCH 19, 2024

Given the unhealthy data-collection habits of some mHealth apps, you’re well advised to tread carefully when choosing with whom you share some of your most sensitive data

Data collection 123

Data collection Mobile 123

Security Boulevard

DECEMBER 10, 2024

Auguria today at the Black Hat Europe conference, in addition to providing five additional integrations with other platforms, revealed it has added an explainability graph capability that makes it simple to understand why log data collected is either irrelevant or warrants further investigation.

Data collection 113

Data collection Cybersecurity 113

Schneier on Security

APRIL 24, 2024

As to privacy, consent authorizes and legitimizes a wide range of data collection and processing. As Professor Heidi Hurd aptly said, consent works “moral magic”—it transforms things that would be illegal and immoral into lawful and legitimate activities. There are generally two approaches to consent in privacy law.

Data collection 290

Data collection Risk 290

The Hacker News

AUGUST 5, 2024

Security teams must overcome challenges such as timely detection, comprehensive data collection, and coordinated actions to enhance readiness. Incident response is a structured approach to managing and addressing security breaches or cyber-attacks. Challenges in incident

Data collection 127

Data collection Cyber Attacks 127

Schneier on Security

JANUARY 14, 2020

intelligence agencies like the NSA rely on inadvertent insecurities for their worldwide data collection efforts, and law enforcement agencies like the FBI have even tried to introduce new ones to make their own data collection efforts easier. What's more, U.S.

Data collection 275

Data collection Software Marketing Government 275

Krebs on Security

MARCH 20, 2023

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device — unless and until you affirmatively opt out of this data collection.

Mobile 323

Mobile Wireless Advertising Telecommunications 323

Security Boulevard

NOVEMBER 27, 2024

Exabeam has allied with Wiz to gain access to security data collected from a cloud-native application protection platform (CNAPP). The post Exabeam Allies With Wiz to Integrate CNAPP With SIEM Platform appeared first on Security Boulevard.

Data collection 101

Data collection Cybersecurity 101

Security Boulevard

JANUARY 11, 2022

These were among the findings of Netskope’s latest cloud security report, which is based on anonymized data collected. In 2021, malware downloads originating from cloud apps increased to 66% of all malware downloads when compared to traditional websites, up from 46% at the beginning of 2020.

Malware 136

Malware Data collection Security Awareness Mobile 136

Malwarebytes

OCTOBER 3, 2024

Two things are true of data online: It will be collected and, just as easily, it will be lost. The notifications will also include direct access to the Malwarebytes Digital Footprint Portal , allowing users to check in real time whether their data was included in any flagged breach.

Data breaches 134

Data breaches Data collection Advertising Internet 134

Schneier on Security

SEPTEMBER 15, 2023

Where possible, favor openness and transparency over aggressive data collection or restrictions which erode civil liberties. Privacy Rights – Pervasive monitoring and data collection erode privacy rights and dignity. Focus only on proportional responses. Surveillance creep risks violating autonomy.

Data collection 213

Data collection Risk Surveillance Manufacturing 213

Security Boulevard

JANUARY 28, 2022

Consumers are much more aware of how their personal data is being collected, stored, managed, and shared with any third parties, and many are uncomfortable with the data that companies collect due to unclear data collection practices.

Data privacy 141

Data privacy Surveillance Data collection 141