Data privacy, Government and Security Awareness

Navigating the Complexities of Data Privacy: Balancing Innovation and Protection

Security Boulevard

MARCH 27, 2024

As the digital landscape expands exponentially, so do efforts to safeguard personal data, notably through regulations and other actions. The post Navigating the Complexities of Data Privacy: Balancing Innovation and Protection appeared first on Security Boulevard.

Data privacy

Data privacy Security Awareness Mobile Risk

Data Privacy and Remote Work: Three Things Businesses Need to Know

Security Boulevard

NOVEMBER 17, 2022

Due to the COVID-19 pandemic, a large-scale and abrupt shift in employee work habits from in-office to home-based work produced unforeseen dangers to data privacy in addition to logistical and cybersecurity issues for enterprises.

Data privacy

Data privacy Cybersecurity VPN Security Awareness

How Government Regulations Can Aid Cybersecurity Defenses

Security Boulevard

SEPTEMBER 1, 2022

Every entity, whether public or private sector, operates in an ecosystem of partners, suppliers, customers, regulators, governing bodies and everyone in between. The post How Government Regulations Can Aid Cybersecurity Defenses appeared first on Security Boulevard.

Government

Government Cybersecurity Data privacy Security Awareness

The Necessity of Security Best Practices When Implementing Generative AI

Security Boulevard

NOVEMBER 28, 2023

Generative AI can help maintain a competitive advantage, but organizations should be mindful of the security and data privacy challenges of a new deployment. The post The Necessity of Security Best Practices When Implementing Generative AI appeared first on Security Boulevard.

Data privacy

Data privacy Social Engineering Engineering Security Awareness

Sisense Hacked: CISA Warns Customers at Risk

Security Boulevard

APRIL 12, 2024

Government says victims include the “critical infrastructure sector.” The post Sisense Hacked: CISA Warns Customers at Risk appeared first on Security Boulevard. A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure AWS bucket.

Risk

Risk Hacking Government Digital transformation

FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair?

Security Boulevard

APRIL 5, 2024

Fast enough for government work: The Federal Communications Commission is finally minded to do something about decades-old vulnerabilities. appeared first on Security Boulevard. The post FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair?

Government

Government Digital transformation Telecommunications Social Engineering

ADPPA US Privacy Law: Coming Soon in Wake of Roe v. Wade Redo

Security Boulevard

JUNE 27, 2022

But the American Data Privacy and Protection Act wasn’t the only privacy related issue on Capitol Hill last week. The post ADPPA US Privacy Law: Coming Soon in Wake of Roe v. Wade Redo appeared first on Security Boulevard. We could soon have a federal GDPR.

Data privacy

Data privacy Social Engineering IoT Engineering

Malicious AdTech Spies on People as NatSec Targets

Security Boulevard

JANUARY 25, 2024

Targeted ads target targets: Patternz and Nuviad enable potentially hostile governments to track individuals by misusing ad bidding. The post Malicious AdTech Spies on People as NatSec Targets appeared first on Security Boulevard.

Government

Government Social Engineering Advertising Data privacy

PRC State Hacking: ‘Chinese Edward Snowden’ Spills I?Soon Secrets in Huge Dump of TTPs

Security Boulevard

FEBRUARY 22, 2024

Underpaid, overworked and angry: Whistleblower in hacker contractor firm for Chinese government blows lid off tactics, techniques and procedures. The post PRC State Hacking: ‘Chinese Edward Snowden’ Spills I‑Soon Secrets in Huge Dump of TTPs appeared first on Security Boulevard.

Hacking

Hacking Government Digital transformation Social Engineering

Why We Need to Cultivate a Confidential Computing Ecosystem

Security Boulevard

JANUARY 26, 2024

The development of privacy-enhancing technologies (PETs) can resolve the tension between data privacy and utility. The post Why We Need to Cultivate a Confidential Computing Ecosystem appeared first on Security Boulevard.

Data privacy

Data privacy Technology Encryption Security Awareness

More iOS Zero Days, More Mercenary Spyware — This Time: Cytrox Predator

Security Boulevard

SEPTEMBER 25, 2023

Apple Scrambled to Fix 3 More CVEs: Egyptian opposition presidential candidate Ahmed Eltantawy targeted “by the government. The post More iOS Zero Days, More Mercenary Spyware — This Time: Cytrox Predator appeared first on Security Boulevard.

Spyware

Spyware Government Social Engineering Data privacy

Ô! China Hacks Canada too, Says CCCS

Security Boulevard

NOVEMBER 1, 2024

Plus brillants exploits: Canadian Centre for Cyber Security fingers Chinese state sponsored hackers. China Hacks Canada too, Says CCCS appeared first on Security Boulevard. The post Ô!

Hacking

Hacking Social Engineering Cyber Attacks Data privacy

Security Vs. Compliance: Understanding the Difference

Security Boulevard

SEPTEMBER 8, 2022

Security and compliance. With data privacy in the headlines and cyberattacks on the rise, these two simple words have become hot topics across just about every industry. But as conversations about security and compliance continue, it has become clear that not everyone understands the distinction between the two.

Data privacy

Data privacy Security Awareness Government Risk

100 MILLION Americans in UnitedHealth PII Breach

Security Boulevard

OCTOBER 25, 2024

The post 100 MILLION Americans in UnitedHealth PII Breach appeared first on Security Boulevard. Not cute: $UNH’s Change Healthcare unit paid a big ransom—its IT was as weak as a kitten.

Healthcare

Healthcare Social Engineering Authentication Data privacy

Apple Enrages IT — 45-Day Cert Expiration Fury

Security Boulevard

OCTOBER 16, 2024

The post Apple Enrages IT — 45-Day Cert Expiration Fury appeared first on Security Boulevard. CA/B testing: Ludicrous proposal draws ire from “furious” systems administrators.

System Administration

System Administration Social Engineering Data privacy IoT

Colorado’s new law ups need for privacy awareness training

SC Magazine

JULY 12, 2021

We often hear about security awareness training’s role in maintaining proper cyber hygiene, but what about privacy awareness programs? As a significant portion of privacy incidents happen from human error, training is critical to mitigating privacy risk within an organization,” said Berry.

Education

Education Security Awareness Data privacy Social Engineering

Here’s Yet Another D-Link RCE That Won’t be Fixed

Security Boulevard

NOVEMBER 21, 2024

The post Here’s Yet Another D-Link RCE That Won’t be Fixed appeared first on Security Boulevard. D-Licious: Stubborn network device maker digs in heels and tells you to buy new gear.

Internet

Internet Internet IoT Data privacy

FINALLY! FCC Gets Tough on Robocall Fraud

Security Boulevard

FEBRUARY 7, 2025

FCC Gets Tough on Robocall Fraud appeared first on Security Boulevard. KYC isnt a Thing, claims telco: Commissioner Brendan Carr (pictured) wants $4.5 million fine on Telnyx, for enabling illegal robocall scheme. The post FINALLY!

Social Engineering

Social Engineering Data privacy Scams Engineering

Insecure Medical Devices — Illumina DNA Sequencer Illuminates Risks

Security Boulevard

JANUARY 8, 2025

The post Insecure Medical Devices Illumina DNA Sequencer Illuminates Risks appeared first on Security Boulevard. IEI-IEI, Oh: Running an obsolete OS, on obsolete hardware, configured with obsolete settings.

Risk

Risk Social Engineering Internet Internet

Apple Lets Stalkers Find YOU — ‘nRootTag’ Team Breaks AirTag Crypto

Security Boulevard

FEBRUARY 28, 2025

Dumb Design + Crud Code = Privacy Panic: Its been SEVEN MONTHS, but Tims crew is yet to fix the bugs. The post Apple Lets Stalkers Find YOU nRootTag Team Breaks AirTag Crypto appeared first on Security Boulevard.

Social Engineering

Social Engineering Data privacy IoT Engineering

These 20 D-Link Devices Have Critical RCE Bug — but NO Patch NEVER

Security Boulevard

NOVEMBER 13, 2024

The post These 20 D-Link Devices Have Critical RCE Bug — but NO Patch NEVER appeared first on Security Boulevard. ‘Bobby’ flaw flagged WONTFIX: Company doesn’t make storage devices now; has zero interest in fixing this catastrophic vulnerability.

Internet

Internet Internet IoT Data privacy

Key Developments in IoT Security

Thales Cloud Protection & Licensing

JULY 15, 2021

Secure firmware flashing is also a way to enhance assurance of device security, allowing for audit capabilities and controls around these devices. There are also data privacy implications with IoT. Ellen's experience with medical clients gives her a more critical view of the need for data privacy with IoT devices.

IoT

IoT Data privacy Technology Risk

Almost 10% of GenAI Prompts Include Sensitive Data: Study

Security Boulevard

JANUARY 21, 2025

A study by cybersecurity startup Harmonic Security found that 8.5% of prompts entered into generative AI models like ChatGPT, Copilot, and Gemini last year included sensitive information, putting personal and corporate data at risk of being leaked.

Risk

Risk Cybersecurity Data privacy Security Awareness

Allstate Violates Drivers’ Privacy, Texas AG Alleges

Security Boulevard

JANUARY 15, 2025

Dont Mess With Texas Privacy: We will hold all these companies accountable, rants state attorney general Ken Paxton (pictured). The post Allstate Violates Drivers Privacy, Texas AG Alleges appeared first on Security Boulevard.

Accountability

Accountability Insurance Social Engineering Spyware

10 Top Ways: Building an Effective Cybersecurity Awareness Campaign

SecureWorld News

OCTOBER 27, 2021

If these things are true, how do we share information with others in a way that is proven to work and create a culture of security? Security awareness and how you talk about cybersecurity. But you know, if you're not doing it all the time in your security awareness department, roll out a survey.

Cybersecurity

Cybersecurity Cybercrime Security Awareness Education

Cybersecurity Awareness Month Focuses on People

SecureWorld News

SEPTEMBER 29, 2022

Cybersecurity Awareness Month was first declared by President George W. Bush and Congress in 2004 to help individuals protect themselves online as threats to technology and data privacy became more commonplace. This year's theme exemplifies that cybersecurity can be, and is, a complex subject, but it really comes down to people.

Cybersecurity

Cybersecurity Education Security Awareness Password Management

Russian FSB Targets US and UK Politicians in Sneaky Spear-Phish Plan

Security Boulevard

DECEMBER 8, 2023

TA446’s new TTPs: “Star Blizzard” FSB team called out by Five Eyes governments (again). The post Russian FSB Targets US and UK Politicians in Sneaky Spear-Phish Plan appeared first on Security Boulevard.

Phishing

Phishing Government Digital transformation Social Engineering

Ransomware Scum — Out For Blood: NYBCe is Latest Victim

Security Boulevard

JANUARY 31, 2025

The post Ransomware Scum Out For Blood: NYBCe is Latest Victim appeared first on Security Boulevard. Bloody hell: New York Blood Center Enterprises crippled by ransomware scrotes unknown.

Ransomware

Ransomware Social Engineering Healthcare Data privacy

Hackers Intercept USPS Workers' Paychecks in Direct Deposit Scam

SecureWorld News

MAY 22, 2023

On June 8, she will lead a panel discussion on "The Future of Privacy and Cyber: AI, Quantum and Mind Readers," joined by Monique Ferraro, Cyber Counsel, HSB Insurance; Karen Painter Randall, Partner and Chair, Cybersecurity Data Privacy and Incident Response, Connell Foley LLP; and Violet Sullivan, VP of Client Engagement, Redpoint Cyber.

Scams

Scams Password Management Passwords Authentication

Temu is Malware — It Sells Your Info, Accuses Ark. AG

Security Boulevard

JUNE 28, 2024

Chinese fast-fashion-cum-junk retailer “is a data-theft business.” AG appeared first on Security Boulevard. The post Temu is Malware — It Sells Your Info, Accuses Ark.

Malware

Malware Retail Social Engineering Data privacy

Tile/Life360 Breach: ‘Millions’ of Users’ Data at Risk

Security Boulevard

JUNE 13, 2024

The post Tile/Life360 Breach: ‘Millions’ of Users’ Data at Risk appeared first on Security Boulevard. Location tracking service leaks PII, because—incompetence? Seems almost TOO easy.

Risk

Risk Social Engineering Data privacy Engineering

Apple API Allows Wi-Fi AP Location Tracking

Security Boulevard

MAY 23, 2024

Privacy FAIL: Apple location service returns far more data than it should, to people who have no business knowing it, without your permission. The post Apple API Allows Wi-Fi AP Location Tracking appeared first on Security Boulevard.

Social Engineering

Social Engineering Data privacy Engineering IoT

DOGE Access to Personal Information and The Difficulty of Showing Harm in Privacy Litigation

Security Boulevard

MARCH 3, 2025

By failing to value privacy alone, the system skews in favor of not protecting privacy. The post DOGE Access to Personal Information and The Difficulty of Showing Harm in Privacy Litigation appeared first on Security Boulevard. If a company has effective insurance, prevention becomes even less cost-effective.

Insurance

Insurance Data privacy Data breaches Security Awareness

Black Basta Ascension Attack Redux — can Patients Die of Ransomware?

Security Boulevard

MAY 24, 2024

appeared first on Security Boulevard. Inglorious Basta(rds): 16 days on, huge hospital system continues to be paralyzed by ransomware—and patient safety is at risk. The post Black Basta Ascension Attack Redux — can Patients Die of Ransomware?

Ransomware

Ransomware Risk Social Engineering Healthcare

Do cyber regulations actually make K–12 schools safer? Navigating compliance while securing school and student data

Malwarebytes

APRIL 5, 2023

In fact, an October 2022 Government Accountability Office (GAO) report found that loss of learning following a cyberattack ranged from three days to three weeks, with recovery time taking anywhere from two to nine months. Secure data storage is also a requirement of FERPA.

Education

Education Ransomware Cybersecurity Risk

Russian ‘WhisperGate’ Hacks: 5 More Indicted

Security Boulevard

SEPTEMBER 6, 2024

The post Russian ‘WhisperGate’ Hacks: 5 More Indicted appeared first on Security Boulevard. Eaten by a GRU: Fake ransomware created by Russian GRU Unit 29155 attacked Ukraine and NATO—a month before the full scale invasion.

Hacking

Hacking Ransomware Social Engineering Cyber Attacks

Microsoft Privacy FAIL: Windows 11 Silently Backs Up to OneDrive

Security Boulevard

JUNE 25, 2024

The post Microsoft Privacy FAIL: Windows 11 Silently Backs Up to OneDrive appeared first on Security Boulevard. Copying users’ files and deleting some? Even a cartoon hound knows this isn’t fine.

Social Engineering

Social Engineering Account Security Accountability Data privacy

Revealed: Facebook’s “Incredibly Aggressive” Alleged Theft of Snapchat App Data

Security Boulevard

MARCH 27, 2024

The post Revealed: Facebook’s “Incredibly Aggressive” Alleged Theft of Snapchat App Data appeared first on Security Boulevard. Meta MITM IAAP SSL bump: Zuck ordered “Project Ghostbusters”—with criminal consequences, says class action lawsuit.

Social Engineering

Social Engineering VPN Data privacy Engineering

‘Polyfill’ Supply Chain Threat: 4x Worse Than We Thought

Security Boulevard

JULY 5, 2024

The post ‘Polyfill’ Supply Chain Threat: 4x Worse Than We Thought appeared first on Security Boulevard. Spackle attack: Chinese company takes over widely used free web service—almost 400,000 websites at risk.

Risk

Risk Social Engineering Data privacy Software

‘Perfect 10’ Apple Supply Chain Bug — Millions of Apps at Risk of CocoaPods RCE

Security Boulevard

JULY 2, 2024

The post ‘Perfect 10’ Apple Supply Chain Bug — Millions of Apps at Risk of CocoaPods RCE appeared first on Security Boulevard. Tim looks grim: 10 year old vulnerabilities in widely used dev tool include a CVSS 10.0 remote code execution bug.

Risk

Risk Social Engineering Data privacy Software

Watch This? Patch This! LG Fixes Smart TV Vulns

Security Boulevard

APRIL 10, 2024

LG Fixes Smart TV Vulns appeared first on Security Boulevard. 4×CVE=RCE or Merely CE? Update your LG TV now, or let hackers root it. But is Bitdefender overhyping the issue? The post Watch This? Patch This!

Social Engineering

Social Engineering IoT Data privacy Engineering

EFF Angry as Google Keeps 3rd-Party Cookies in Chrome

Security Boulevard

JULY 23, 2024

The post EFF Angry as Google Keeps 3rd-Party Cookies in Chrome appeared first on Security Boulevard. Regulatory capture by stealth? Google changes its mind about third-party tracking cookies—we’re stuck with them for the foreseeable.

Social Engineering

Social Engineering Advertising Marketing Surveillance

ASUS Router User? Patch ASAP!

Security Boulevard

JUNE 18, 2024

appeared first on Security Boulevard. Or junk it if EOL: Two nasty vulnerabilities need an update—pronto. The post ASUS Router User? Patch ASAP!

Firmware

Firmware Social Engineering Data privacy IoT

‘Russia’ Breaches TeamViewer — ‘No Evidence’ Billions of Devices at Risk

Security Boulevard

JULY 1, 2024

The post ‘Russia’ Breaches TeamViewer — ‘No Evidence’ Billions of Devices at Risk appeared first on Security Boulevard. SolarWinds hackers strike again: Remote access service hacked—by APT29, says TeamViewer.

Risk

Risk Hacking Social Engineering Authentication

Navigating the Complexities of Data Privacy: Balancing Innovation and Protection

Data Privacy and Remote Work: Three Things Businesses Need to Know

Trending Sources

How Government Regulations Can Aid Cybersecurity Defenses

The Necessity of Security Best Practices When Implementing Generative AI

Sisense Hacked: CISA Warns Customers at Risk

FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair?

ADPPA US Privacy Law: Coming Soon in Wake of Roe v. Wade Redo

Malicious AdTech Spies on People as NatSec Targets

PRC State Hacking: ‘Chinese Edward Snowden’ Spills I?Soon Secrets in Huge Dump of TTPs

Why We Need to Cultivate a Confidential Computing Ecosystem

More iOS Zero Days, More Mercenary Spyware — This Time: Cytrox Predator

Ô! China Hacks Canada too, Says CCCS

Security Vs. Compliance: Understanding the Difference

100 MILLION Americans in UnitedHealth PII Breach

Apple Enrages IT — 45-Day Cert Expiration Fury

Colorado’s new law ups need for privacy awareness training

Here’s Yet Another D-Link RCE That Won’t be Fixed

FINALLY! FCC Gets Tough on Robocall Fraud

Insecure Medical Devices — Illumina DNA Sequencer Illuminates Risks

Apple Lets Stalkers Find YOU — ‘nRootTag’ Team Breaks AirTag Crypto

These 20 D-Link Devices Have Critical RCE Bug — but NO Patch NEVER

Key Developments in IoT Security

Almost 10% of GenAI Prompts Include Sensitive Data: Study

Allstate Violates Drivers’ Privacy, Texas AG Alleges

10 Top Ways: Building an Effective Cybersecurity Awareness Campaign

Cybersecurity Awareness Month Focuses on People

Russian FSB Targets US and UK Politicians in Sneaky Spear-Phish Plan

Ransomware Scum — Out For Blood: NYBCe is Latest Victim

Hackers Intercept USPS Workers' Paychecks in Direct Deposit Scam

Temu is Malware — It Sells Your Info, Accuses Ark. AG

Tile/Life360 Breach: ‘Millions’ of Users’ Data at Risk

Apple API Allows Wi-Fi AP Location Tracking

DOGE Access to Personal Information and The Difficulty of Showing Harm in Privacy Litigation

Black Basta Ascension Attack Redux — can Patients Die of Ransomware?

Do cyber regulations actually make K–12 schools safer? Navigating compliance while securing school and student data

Russian ‘WhisperGate’ Hacks: 5 More Indicted

Microsoft Privacy FAIL: Windows 11 Silently Backs Up to OneDrive

Revealed: Facebook’s “Incredibly Aggressive” Alleged Theft of Snapchat App Data

‘Polyfill’ Supply Chain Threat: 4x Worse Than We Thought

‘Perfect 10’ Apple Supply Chain Bug — Millions of Apps at Risk of CocoaPods RCE

Watch This? Patch This! LG Fixes Smart TV Vulns

EFF Angry as Google Keeps 3rd-Party Cookies in Chrome

ASUS Router User? Patch ASAP!

‘Russia’ Breaches TeamViewer — ‘No Evidence’ Billions of Devices at Risk

Stay Connected