Schneier on Security

DECEMBER 19, 2023

A society where big companies tell blatant lies about how they are handling our data—­and get away with it without consequences­—is a very unhealthy society. A key role of government is to prevent this from happening. On a personal level we risk losing out on useful tools.

Government 330

Government Banking Risk Internet 330

Schneier on Security

SEPTEMBER 30, 2022

Users in countries not covered by data protection regulations, such as GDPR in the EU and the California Consumer Privacy Act in the U.S., are at higher privacy risk. One hundred and three apps have differences based on country in their privacy policies.

Mobile 341

Mobile Internet Internet VPN 341

Schneier on Security

SEPTEMBER 26, 2019

There is definitely a national security risk in buying computer infrastructure from a country you don't trust. It's also why the United States has blocked the cybersecurity company Kaspersky from selling its Russian-made antivirus products to US government agencies. The risk of discovery is too great, and the payoff would be too low.

Surveillance 257

Surveillance Wireless Government Internet 257

Security Affairs

MARCH 27, 2025

In January, Italys Data Protection Authority Garante asked the AI firm DeepSeek to clarify its data collection, sources, purposes, legal basis, and storage, citing potential risks to user data. Texas and other states banned TikTok on government devices. ” concludes the alert.

Malware 66

Malware Data collection Advertising Media 66

Security Affairs

MARCH 1, 2023

The Canadian government announced it will ban the video app TikTok from all government-issued devices over security concerns. The app will be removed from government devices this week. The app “presents an unacceptable level of risk to privacy and security,” explained Canada’s chief information officer.

Mobile 98

Mobile Government Data collection Data privacy 98

CSO Magazine

AUGUST 15, 2022

have questioned its data collection practices and potential ties to the Chinese state. The concerns have deepened after Buzzfeed published a report saying that data of some American users had been repeatedly accessed from China. Both lawmakers and citizens in the U.S. user traffic to servers operated by Oracle.

Data collection 112

Data collection Risk Government 112

Centraleyes

MARCH 25, 2024

Let’s discuss an acronym reshaping the business world: Vendor Risk Management , or VRM. With supply chains extending across multiple regions and involving numerous third-party vendors, organizations face unprecedented challenges in managing vendor risks effectively. What risks are you facing?

Risk 111

Risk Data collection Architecture Government 111

Security Boulevard

FEBRUARY 23, 2025

Home Office Contractor's Data Collection Sparks Privacy Concerns The Home Office faces scrutiny after revelations that its contractor, Equifax, collected data on British citizens while conducting financial checks on migrants applying for fee waivers.

Cybersecurity 52

Cybersecurity Government Data collection Encryption 52

Security Affairs

NOVEMBER 6, 2024

The Canadian government ordered ByteDance to wind up TikTok Technology Canada, Inc. However, the government pointed out that Canadians can still access and use TikTok by choice, the use of a social media platform is a personal choice. ” reads the statement published by Canadian Government.

Government 116

Government Mobile Media Technology 116

Security Affairs

JUNE 16, 2020

On Friday, the Norwegian Data Protection Authority (Norwegian: Datatilsynet) issued a warning that it would stop the Norwegian Institute of Public Health from handling data collected via Smittestopp contact tracing app. Only 600,000 citizens out of Norway’s 5.4 million inhabitants had been using the contact tracing app.

Data collection 137

Data collection Advertising Government Technology 137

Thales Cloud Protection & Licensing

MARCH 19, 2025

In 2024, 44% of consumers globally trusted banks with their personal data, but by 2025, this figure dropped to 32% for those aged 1624. While insurers benefit from regulatory oversight like the banking sector, persistent friction points like opaque claims processes and intrusive data collection eroded goodwill.

Insurance 71

Insurance Banking Authentication Data privacy 71

Centraleyes

DECEMBER 11, 2024

Governments and regulatory authorities may also mandate compliance with IATA standards to align with broader cybersecurity strategies. These include: Cybersecurity Risk Assessment: Organizations must perform a comprehensive risk assessment to identify potential vulnerabilities in their operations. and the EU Cybersecurity Act.

Risk 52

Risk Cybersecurity Penetration Testing Digital transformation 52

Schneier on Security

MARCH 14, 2023

Consider, for example, a 2013 Massachusetts bill that tried to restrict the commercial use of data collected from K-12 students using services accessed via the internet. Training data is available. Most other jurisdictions provide similar data feeds, and there are even convenient assemblages of that data.

Energy and Utilities 337

Energy and Utilities Artificial Intelligence Technology Government 337

The Last Watchdog

DECEMBER 7, 2021

A digital twin is a virtual duplicate of a physical entity or a process — created by extrapolating data collected from live settings. Digital twins enable simulations to be run without risking harm to the physical entity; they help inform efficiency gains made in factories and assure the reliability of jet engines, for instance.

Engineering 244

Engineering Data collection Artificial Intelligence Technology 244

Security Affairs

MARCH 7, 2025

This article uses differential privacy in healthcare, finance, and government data analytics to explore the mathematical foundation, implementation strategies, and real-world applications of differential privacy. According to Erlingsson (2014), Google’s RAPPOR system collects user data while maintaining anonymity.

Artificial Intelligence 61

Artificial Intelligence Healthcare Data privacy Banking 61

The Last Watchdog

NOVEMBER 21, 2018

These regulations have certainly contributed to the movement towards consumerism and prompted businesses in the United States to rethink data collection and management, considering how violating these regulations could adversely affect their business and brand. For many, the answer is yes. If the U.S.

Data privacy 133

Data privacy Data collection Big data Government 133

Security Boulevard

FEBRUARY 7, 2025

Bipartisan Effort Seeks to Protect National Security Amid Concerns Over Chinese Data Collection WASHINGTONA new bill set to be introduced Thursday was initiated based on an analysis by Ivan Tsarynny , CEO of Feroot Security, which uncovered serious security risks posed by the DeepSeek chatbot application.

Government 52

Government Data collection Risk 52

Thales Cloud Protection & Licensing

APRIL 17, 2024

A Pandora's Box: Unpacking 5 Risks in Generative AI madhav Thu, 04/18/2024 - 05:07 Generative AI (GAI) is becoming increasingly crucial for business leaders due to its ability to fuel innovation, enhance personalization, automate content creation, augment creativity, and help teams explore new possibilities.

Risk 71

Risk Data collection Artificial Intelligence Accountability 71

Security Boulevard

APRIL 17, 2024

A Pandora's Box: Unpacking 5 Risks in Generative AI madhav Thu, 04/18/2024 - 05:07 Generative AI (GAI) is becoming increasingly crucial for business leaders due to its ability to fuel innovation, enhance personalization, automate content creation, augment creativity, and help teams explore new possibilities.

Risk 69

Risk Data collection Artificial Intelligence Accountability 69

The Last Watchdog

SEPTEMBER 20, 2019

Local government agencies remain acutely exposed to being hacked. However, at this moment in history, two particularly worrisome types of cyber attacks are cycling up and hitting local government entities hard: ransomware sieges and election tampering. That’s long been true.

Ransomware 153

Ransomware Government Firewall Cyber Insurance 153

Security Affairs

FEBRUARY 12, 2023

Australia’s Defense Department announced that they will remove surveillance cameras made by Chinese firms linked to the government of Beijing. Australia’s Defense Department is going to replace surveillance cameras made by Chinese firms Hikvision and Dahua, who are linked to the government of Beijing. ” reported The Guardian.

Surveillance 98

Surveillance Government Manufacturing Risk 98

Security Boulevard

APRIL 27, 2023

Why Overthinking Risk Will Turn You into Stone Risk is an enabler of Analysis Paralysis. Organizations invest vast amounts of money, time, and human capital in identifying, analyzing, and reporting potential risks within their domain. Risk exists no matter what an organization is involved in.

Risk 64

Risk Data collection CISO Government 64

IT Security Guru

AUGUST 7, 2024

These regulations stress the fair treatment of customers, transparent sales practices, robust governance and consent. The Legacy Risks Many insurance companies are still bogged down with legacy solutions which hamper innovation and undermine customer trust.

Insurance 125

Insurance Data collection Authentication Technology 125

Security Affairs

JUNE 19, 2021

The security breach took place on on May 14, and the institute discovered it only on May 31, then the research institute reported the incident to the government and launched an investigation. Early this month, researchers from Malwarebytes published a report on the Kimsuky APT’s operations aimed at South Korean government.

Hacking 144

Hacking VPN Internet Internet 144

Krebs on Security

OCTOBER 12, 2018

Tony Sager (TS): The federal government has been worrying about this kind of problem for decades. In the 70s and 80s, the government was more dominant in the technology industry and didn’t have this massive internationalization of the technology supply chain. The attacker in this case has a risk model, too.

Computers and Electronics 228

Computers and Electronics Internet Internet Technology 228

SecureWorld News

JANUARY 17, 2024

Artificial intelligence (AI) promises to transform major sectors like healthcare, transportation, finance, and government over the coming years. As adoption accelerates, so too do emerging cybersecurity risks. Continuous risk assessment and governance throughout the AI system lifecycle remains essential.

Artificial Intelligence 110

Artificial Intelligence Data collection Architecture Healthcare 110

Malwarebytes

MARCH 27, 2025

This week we learned that the US Government uses Signal for communication, after a journalist was accidentally added to a Signal chat. Probably the largest alternative to Signal, WhatsApp is owned by Meta, and has faced criticism for its data-sharing practices. Switching to Signal is justified if privacy is your top priority.

Encryption 54

Encryption Data collection Mobile Authentication 54

Thales Cloud Protection & Licensing

JULY 11, 2019

The GDPR applies to businesses that collect and use personal information from citizens of the EU, regardless of where the business itself is located. The GDPR’s four main areas of focus are: Privacy rights, Data security, Data control and Governance. What you can do as a CISO – A risk-based approach to GDPR is key.

Risk 97

Risk Encryption Accountability Government 97

Security Boulevard

FEBRUARY 10, 2021

Australia: Incidental COVID-19 App Data Collection The Office of the Inspector General of Intelligence and Security conducted a study. They would be right. The post Law Enforcement Eyeing Contact Tracing Apps appeared first on Security Boulevard.

Data collection 122

Data collection Data privacy Risk Government 122

eSecurity Planet

SEPTEMBER 21, 2024

The landscape of cybersecurity laws and regulations today is set to undergo significant changes, impacting businesses, government entities, and individuals alike. Let’s explore what to expect from the upcoming regulations, provide insights into critical federal and state laws, and offer practical compliance and risk management strategies.

Cybersecurity 122

Cybersecurity Computers and Electronics Cyber threats Healthcare 122

SecureWorld News

JUNE 24, 2024

In addition, the risks of monetary and operational damage render it mission critical for enterprises to envision and enact the appropriate People, Process, and Technology safeguards to assure data protection and privacy. Weak access control processes can lead to breaches and data exploitation. is essential.

IoT 107

IoT InfoSec Artificial Intelligence Risk 107

Security Affairs

JUNE 9, 2024

New York Times source code compromised via exposed GitHub token SolarWinds fixed multiple flaws in Serv-U and SolarWinds Platform Pandabuy was extorted twice by the same threat actor UAC-0020 threat actor used the SPECTR Malware to target Ukraine’s defense forces Chinese threat actor exploits old ThinkPHP flaws since October 2023 A new Linux (..)

Data breaches 124

Data breaches Banking Hacking Malware 124

Threatpost

SEPTEMBER 18, 2020

With no hard evidence of abuse, are bans warranted? The real security concerns will likely come after the ban goes into effect, researchers said in our exclusive roundtable.

Risk 117

Risk Data collection Surveillance Mobile 117

CyberSecurity Insiders

FEBRUARY 1, 2022

–( BUSINESS WIRE )–MITRE and DTEX Systems , the Workforce Cyber Intelligence & Security Company , today announced a partnership to elevate insider risk awareness and human-informed cyber defense strategies through behavioral-based research and the launch of the MITRE Inside-R Protect program. . & MCLEAN, Va.–(

Risk 69

Risk Government Data collection Cyber threats 69

Centraleyes

MAY 23, 2024

What is Data Access Governance? 80% of digital organizations will fail because they don’t take a modern approach to data governance. Gartner) Data is widely recognized as the most valuable business asset. Data access governance is a subset of data governance.

Government 52

Government Backups Accountability Data privacy 52

Krebs on Security

JULY 18, 2022

The researchers concluded that 911 is supported by a “mid scale botnet-like infrastructure that operates in several networks, such as corporate, government and critical infrastructure.” Highlighting the risk that 911 nodes could pose to internal corporate networks, they observed that “the infection of a node enables the 911.re

VPN 349

VPN Computers and Electronics Antivirus Software 349

CyberSecurity Insiders

MARCH 22, 2023

Next, each vulnerability needs to be evaluated and prioritized according to its risk to the system and the organization. If there isn’t a solution available, then teams may have to mitigate the risk with additional security measures. Governments have been cracking down on cyber criminals to avoid a catastrophe.

Data breaches 139

Data breaches Cyber threats Government Risk 139