Most GDPR (General Data Protection Regulation) breaches arise from everyday slip-ups, such as missing DSAR (data subject access request) deadlines, picking the wrong lawful basis for processing, failing to enforce retention periods, keeping inadequate records or misreporting incidents. However, fall short of your compliance obligations – for whatever reason – and you face complaints, investigations,…
Category: privacy
GDPR, Global Security News, privacy, Training
5 common GDPR mistakes – and how training can fix them
Most GDPR (General Data Protection Regulation) breaches arise from everyday slip-ups, such as missing DSAR (data subject access request) deadlines, picking the wrong lawful basis for processing, failing to enforce retention periods, keeping inadequate records or misreporting incidents. However, fall short of your compliance obligations – for whatever reason – and you face complaints, investigations,…
AI, Compliance, Cybersecurity, Data Breaches, Global Security News, privacy, Risk Management
Salesforce’s trusted domain of doom
Researchers uncovered a security flaw in Salesforce’s shiny new Agentforce. The vulnerability, dubbed “ForcedLeak”, let them smuggle AI-read instructions in via humble Web-to-Lead form… and ended up spilling data for the low, low price of five dollars. And we discuss why data breach communications still default to “we take security seriously” while quietly implying “assume no…
GDPR, Global Security News, ISMS training, iso 27001 foundation training, privacy, Training
Who Needs ISO 27001 Foundation Training?
ISO 27001 training isn’t just for auditors or security consultants. Indeed, many roles need baseline knowledge of the Standard. If you help to protect information, support audits or manage suppliers, you will benefit. Foundation training teaches you the structure of an ISMS (information security management system), the core requirements in ISO/IEC 27001:2022 and what the…
GDPR, Global Security News, ISMS training, iso 27001 foundation training, privacy, Training
Who Needs ISO 27001 Foundation Training?
ISO 27001 training isn’t just for auditors or security consultants. Indeed, many roles need baseline knowledge of the Standard. If you help to protect information, support audits or manage suppliers, you will benefit. Foundation training teaches you the structure of an ISMS (information security management system), the core requirements in ISO/IEC 27001:2022 and what the…
GDPR, Global Security News, ISMS training, iso 27001 foundation training, privacy, Training
Who Needs ISO 27001 Foundation Training?
ISO 27001 training isn’t just for auditors or security consultants. Indeed, many roles need baseline knowledge of the Standard. If you help to protect information, support audits or manage suppliers, you will benefit. Foundation training teaches you the structure of an ISMS (information security management system), the core requirements in ISO/IEC 27001:2022 and what the…
data protection, Exploits, GDPR, Global Security News, human error, privacy
Human Error and Accidental Data Breaches: Lessons from Recent Cases
According to Verizon’s 2025 DBIR (Data Breach Investigations Report), some 60% of data breaches now involve “the human element” – in other words, errors and non-malicious activity. Failing to use the bcc function when emailing groups of people, accidentally emailing spreadsheets full of unencrypted personal data to entire mailing lists without checking, mistakenly misconfiguring an…
data protection, Exploits, GDPR, Global Security News, human error, privacy
Human Error and Accidental Data Breaches: Lessons from Recent Cases
According to Verizon’s 2025 DBIR (Data Breach Investigations Report), some 60% of data breaches now involve “the human element” – in other words, errors and non-malicious activity. Failing to use the bcc function when emailing groups of people, accidentally emailing spreadsheets full of unencrypted personal data to entire mailing lists without checking, mistakenly misconfiguring an…
data protection, Exploits, GDPR, Global Security News, human error, privacy
Human Error and Accidental Data Breaches: Lessons from Recent Cases
According to Verizon’s 2025 DBIR (Data Breach Investigations Report), some 60% of data breaches now involve “the human element” – in other words, errors and non-malicious activity. Failing to use the bcc function when emailing groups of people, accidentally emailing spreadsheets full of unencrypted personal data to entire mailing lists without checking, mistakenly misconfiguring an…
Global Security News, privacy, Training
How to Become a DPO (Data Protection Officer) in the UK
Are you thinking about becoming a DPO (data protection officer)? You’re not alone. It’s one of the fastest-growing privacy roles in the UK. For many organisations, appointing a DPO is a legal obligation under the UK GDPR (General Data Protection Regulation). For others, voluntarily appointing a DPO enables them to demonstrate accountability and manage the…
Global Security News, privacy, Training
How to Become a DPO (Data Protection Officer) in the UK
Are you thinking about becoming a DPO (data protection officer)? You’re not alone. It’s one of the fastest-growing privacy roles in the UK. For many organisations, appointing a DPO is a legal obligation under the UK GDPR (General Data Protection Regulation). For others, voluntarily appointing a DPO enables them to demonstrate accountability and manage the…
Global Security News, privacy, Training
How to Become a DPO (Data Protection Officer) in the UK
Are you thinking about becoming a DPO (data protection officer)? You’re not alone. It’s one of the fastest-growing privacy roles in the UK. For many organisations, appointing a DPO is a legal obligation under the UK GDPR (General Data Protection Regulation). For others, voluntarily appointing a DPO enables them to demonstrate accountability and manage the…
Global Security News, privacy, Training
How to Become a DPO (Data Protection Officer) in the UK
Are you thinking about becoming a DPO (data protection officer)? You’re not alone. It’s one of the fastest-growing privacy roles in the UK. For many organisations, appointing a DPO is a legal obligation under the UK GDPR (General Data Protection Regulation). For others, voluntarily appointing a DPO enables them to demonstrate accountability and manage the…
AI, Compliance, Cybersecurity, Global Security News, malware, privacy
The €600,000 gold heist, powered by ransomware
Ransomware doesn’t just freeze computers – it can silence alarms too. And when the Natural History Museum in Paris went dark, thieves helped themselves to €600,000 worth of gold in a daring late-night heist. Meanwhile, developers have a new headache: a worm dubbed “Shai Hulud” has wriggled its way through more than 180 npm packages,…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, cyber resilience, Cybersecurity, Data Breaches, Exploits, Funding, Global Security News, privacy, Threat Intelligence, Webroot Blog
Guarding your family against the latest online threats
Parents across America face a growing wave of sophisticated online fraud designed to exploit their deepest fears and protective instincts. Americans reported losing more than $12.5 billion to fraud in 2024, representing a 25% increase over the prior year, according to new Federal Trade Commission data. Parents represent a particularly vulnerable target because scammers understand…
AI, Cybersecurity, Global Security News, privacy
Accelerating adoption of AI for cybersecurity at DEF CON 33
Posted by Elie Bursztein and Marianna Tishchenko, Google Privacy, Safety and Security Team Empowering cyber defenders with AI is critical to tilting the cybersecurity balance back in their favor as they battle cybercriminals and keep users safe. To help accelerate adoption of AI for cybersecurity workflows, we partnered with Airbus at DEF CON 33 to host…
AI, Cybersecurity, Global Security News, privacy
Accelerating adoption of AI for cybersecurity at DEF CON 33
Posted by Elie Bursztein and Marianna Tishchenko, Google Privacy, Safety and Security Team Empowering cyber defenders with AI is critical to tilting the cybersecurity balance back in their favor as they battle cybercriminals and keep users safe. To help accelerate adoption of AI for cybersecurity workflows, we partnered with Airbus at DEF CON 33 to host…
data breach, Data loss, Global Security News, Guest blog, Law & order, privacy
Vastaamo psychotherapy hack: US citizen charged in latest twist of notorious data breach
28-year-old Daniel Lee Newhard, an American citizen living in Estonia, has been charged in relation to the notorious hack of Vastaamo, the biggest data breach in Finnish history. Read more in my article on the Hot for Security blog.
Global Security News, Law & order, malware, phishing, Podcast, privacy
Smashing Security podcast #435: Lights! Camera! Hacktion!
When “bad actors” stop being hackers and start being… actual actors. This week, Graham and special guest Jenny Radcliffe play “Hacker or Ham?” (yes, Steven Seagal, we’re looking at you), before diving into a campaign which saw an Iranian gang luring Israeli performers with fake casting calls for a serious film. We unpack why positive…
AI, Compliance, Global Security News, Network Security, privacy
Lights! Camera! Hacktion!
When “bad actors” stop being hackers and start being… actual actors. This week, Graham and special guest Jenny Radcliffe play “Hacker or Ham?” (yes, Steven Seagal, we’re looking at you), before diving into a campaign which saw an Iranian gang luring Israeli performers with fake casting calls for a serious film. We unpack why positive…
AI, Artificial Intelligence, Global Security News, openai, Podcast, privacy
The AI Fix #68: AI telepathy, and rights for robots
In episode 68 of The AI Fix, our hosts open the show by launching the thing nobody asked for but everybody wanted: our shiny new merch store – yes, including the “Would YOU trust a pigeon???” t-shirt for when you need fashion alongside health and safety. Meanwhile, AI hoaxers send Manila firefighters racing to an…
AI, Artificial Intelligence, Global Security News, openai, Podcast, privacy
The AI Fix #68: AI telepathy, and rights for robots
In episode 68 of The AI Fix, our hosts open the show by launching the thing nobody asked for but everybody wanted: our shiny new merch store – yes, including the “Would YOU trust a pigeon???” t-shirt for when you need fashion alongside health and safety. Meanwhile, AI hoaxers send Manila firefighters racing to an…
AI, Apps, Exploits, Global Security News, privacy, Risk Management
Supporting Rowhammer research to protect the DRAM ecosystem
Posted by Daniel Moghimi Rowhammer is a complex class of vulnerabilities across the industry. It is a hardware vulnerability in DRAM where repeatedly accessing a row of memory can cause bit flips in adjacent rows, leading to data corruption. This can be exploited by attackers to gain unauthorized access to data, escalate privileges, or cause…
AI, Apps, Exploits, Global Security News, privacy, Risk Management
Supporting Rowhammer research to protect the DRAM ecosystem
Posted by Daniel Moghimi Rowhammer is a complex class of vulnerabilities across the industry. It is a hardware vulnerability in DRAM where repeatedly accessing a row of memory can cause bit flips in adjacent rows, leading to data corruption. This can be exploited by attackers to gain unauthorized access to data, escalate privileges, or cause…
AI, Data loss, Global Security News, Law & order, Podcast, privacy
Smashing Security podcast #434: Whopper Hackers, and AI Whoppers
Ever wondered what would happen if Burger King left the keys to the kingdom lying around for anyone to use? Ethical hackers did – and uncovered drive-thru recordings, hard-coded passwords, and even the power to open a Whopper outlet on the moon. Meanwhile, over in Silicon Valley, one AI wunderkind managed to turn a $7…
AI, Compliance, Global Security News, privacy, Risk Management
Whopper Hackers, and AI Whoppers
Ever wondered what would happen if Burger King left the keys to the kingdom lying around for anyone to use? Ethical hackers did – and uncovered drive-thru recordings, hard-coded passwords, and even the power to open a Whopper outlet on the moon. Meanwhile, over in Silicon Valley, one AI wunderkind managed to turn a $7…
california, Global Security News, Government, privacy
Three states team up in investigative sweep of companies flouting data opt-out laws
A joint investigative sweep across three states kicked off this week aimed at identifying companies that aren’t following opt-out laws for collecting consumer data. The efforts, led by the state attorneys general, the California Privacy Protection Agency and other state regulators, will involve contacting businesses across all three states who may not be processing opt-out…
AI, android security, Apps, Global Security News, pixel, privacy, Risk Management
How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials
Posted by Eric Lynch, Senior Product Manager, Android Security, and Sherif Hanna, Group Product Manager, Google C2PA Core At Made by Google 2025, we announced that the new Google Pixel 10 phones will support C2PA Content Credentials in Pixel Camera and Google Photos. This announcement represents a series of steps towards greater digital media transparency:…
AI, android security, Apps, Global Security News, pixel, privacy, Risk Management
How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials
Posted by Eric Lynch, Senior Product Manager, Android Security, and Sherif Hanna, Group Product Manager, Google C2PA Core At Made by Google 2025, we announced that the new Google Pixel 10 phones will support C2PA Content Credentials in Pixel Camera and Google Photos. This announcement represents a series of steps towards greater digital media transparency:…
cyber attack, data breach, Global Security News, leaks, privacy, Security
Hello Gym Data Leak Exposes 1.6 Million Audio Files of Gym Members
An unsecured database managed by Hello Gym has exposed over 1.6 million audio recordings of gym members. Learn…
cyber attack, data breach, Global Security News, leaks, privacy, Security
Hello Gym Data Leak Exposes 1.6 Million Audio Files of Gym Members
An unsecured database managed by Hello Gym has exposed over 1.6 million audio recordings of gym members. Learn…
Cybersecurity, Data Privacy, Global Security News, lawsuit, Meta, privacy
Former Meta security chief sues company for privacy violations, professional retaliation
Meta is being sued by its former head of security, who claims the company ignored repeated warnings that its messaging platform WhatsApp was riddled with security vulnerabilities and privacy violations, and retaliated against him for raising these concerns, ultimately firing him. Attaullah Baig was the head of security at Meta from 2021 until this past…
children, Global Security News, Guest blog, Law & order, location tracking, North America, privacy
Parents warned that robot toys spied on children’s location without consent
Parents are being reminded to exercise caution about the toys that they purchase their children, after the United States Federal Trade Commission (FTC) announced it had taken action against a robot toy maker. Read more in my article on the Hot for Security blog.
AI, Compliance, Global Security News, malware, Network Security, privacy
How hackers turned AI into their new henchman
Your AI reads the small print, and that’s a problem. This week in episode 433 of “Smashing Security” we dig into LegalPwn – malicious instructions tucked into code comments and disclaimers that sweet-talks AI into rubber-stamping dangerous payloads (or even pretending they’re a harmless calculator). Meanwhile, new research from Anthropic reveals that hackers have already…
Asia Pacific, FTC, Global Security News, privacy
FTC announces settlement with toy robot makers that tracked location of children
The Federal Trade Commission announced a settlement Tuesday with a Chinese robot toy manufacturer, following an investigation that charged the company with illegally collecting the location data of U.S. children who buy its products. In a complaint filed in the U.S. Northern District Court of California, the Department of Justice on behalf of the FTC…
Editor's Pick, Global Security News, privacy, security flaws, Tips & Hacks, VPN
Top Dangerous VPN Providers & Red Flags to Avoid in 2025
Here, I will show you the top dangerous VPN providers and the top red flags to identify and avoid dangerous VPN providers in 2025. In today’s digital landscape, a Virtual Private Network (VPN) is an essential tool for protecting your online privacy. VPNs encrypt your internet traffic, masking your activity and location from prying eyes.…
AI, Artificial Intelligence, Global Security News, leaks, privacy, Security
Leaked ChatGPT Chats: Users Treat AI as Therapist, Lawyer, Confidant
Leaked ChatGPT chats reveal users sharing sensitive data, resumes, and seeking advice on mental health, exposing risks of…
AI, Cybersecurity, Global Security News, privacy, Risk Management
Oops! I auto-filled my password into a cookie banner
We unpack how some password managers can be tricked into coughing up your secrets, with a clickjacking sleight-of-hand, what website owners can do to prevent it, and how to lock down your personal password vault. Then we time-hop to the post-quantum scramble: “harvest-now, decrypt later”, Microsoft’s 2033 quantum-safe pledge, and whether your printer will survive…
antitrust, Financial, Global Security News, privacy, Technology, Threats
Court ruling in Epic-Google fight could have ‘catastrophic’ cyber consequences, former gov’t officials say
A court injunction in the long fight between Fortnite publisher Epic Games and Google could have “catastrophic results for the nation’s security” and “risks creating massive cybersecurity vulnerabilities in the online ecosystem,” a group of former top government officials said in a filing Monday. At issue, they wrote, is a district court injunction requiring Google…
AI, Cybersecurity, Endpoint, Global Security News, privacy
How to mine millions without paying the bill
In episode 431 of the “Smashing Security” podcast, a self-proclaimed crypto-influencer calling himself CP3O thought he had found a shortcut to riches — by racking up millions in unpaid cloud bills. Meanwhile, we look at the growing threat of EDR-killer tools that can quietly switch off your endpoint protection before an attack even begins. And…
AI, Cybersecurity, Data Breaches, Global Security News, privacy
Poisoned Calendar invites, ChatGPT, and Bromide
A poisoned Google Calendar invite that can hijack your smart home, a man is hospitalised after ChatGPT told him to season his food with… pesticide, and some thoughts on Superman’s latest cinematic outing. All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley, joined this…
AI, Android, android security, Apps, Cybersecurity, Global Security News, privacy
Android’s pKVM Becomes First Globally Certified Software to Achieve Prestigious SESIP Level 5 Security Certification
Posted by Dave Kleidermacher, VP Engineering, Android Security & Privacy Today marks a watershed moment and new benchmark for open-source security and the future of consumer electronics. Google is proud to announce that protected KVM (pKVM), the hypervisor that powers the Android Virtualization Framework, has officially achieved SESIP Level 5 certification. This makes pKVM the…
AI, Android, android security, Apps, Cybersecurity, Global Security News, privacy
Android’s pKVM Becomes First Globally Certified Software to Achieve Prestigious SESIP Level 5 Security Certification
Posted by Dave Kleidermacher, VP Engineering, Android Security & Privacy Today marks a watershed moment and new benchmark for open-source security and the future of consumer electronics. Google is proud to announce that protected KVM (pKVM), the hypervisor that powers the Android Virtualization Framework, has officially achieved SESIP Level 5 certification. This makes pKVM the…
data breach, Data loss, Global Security News, iOS, privacy
TeaOnHer copies everything from Tea – including the data breaches
TeaOnHer hasn’t stopped at copying the functionality of the original Tea app (albeit skewed towards men rating women). It also appears to have carelessly mimicked the Tea dating advice app’s recklessness when it comes to data security. Read more in my article on the Hot for Security blog.
AI, Global Security News, privacy
Replit panics, and the AI that will kill you
Those of you who tuned in to last week’s episode (#428) will have heard the big news from my podcast pal Carole that she’s decided to move on from her co-hosting duties on the show. There have been some lovely messages of support sent through for Carole, and indeed for me too. Thank you very…
data breach, Data loss, Global Security News, hospital, medical, privacy
Hospital fined after patient data found in street food wrappers
A hospital in Thailand has been fined after patient’s printed records were recycled as snack bags to hold crispy crepes.
data breach, Data loss, Global Security News, Podcast, privacy
Smashing Security podcast #428: Red flags, leaked chats, and a final farewell
The viral women-only dating safety app Tea, built to flag red flags, gets flagged itself – after leaking over 70,000 private images and chat logs. We are talking full-on selfies, ID docs, private DMs, and a dash of 4chan creepiness. Yikes. Plus, Carole takes us down memory lane as she hangs up her co-host mic…
AI, Compliance, Cybersecurity, Data Breaches, Global Security News, privacy
Red flags, leaked chats, and a final farewell
The viral women-only dating safety app Tea, built to flag red flags, gets flagged itself – after leaking over 70,000 private images and chat logs. We are talking full-on selfies, ID docs, private DMs, and a dash of 4chan creepiness. Yikes. Plus, Carole takes us down memory lane as she hangs up her co-host mic…
Android, cyber attack, Global Security News, privacy, Security
New Choicejacking Attack Steals Data from Phones via Public Chargers
Choicejacking is a new USB attack that tricks phones into sharing data at public charging stations, bypassing security prompts in milliseconds.
Cybersecurity, Global Security News, Post SMTP, privacy, Security, vulnerability
Post SMTP Plugin Flaw Allowed Subscribers to Take Over Admin Accounts
If you’re running a WordPress site and rely on the Post SMTP plugin for email delivery, there’s something…
california, Global Security News, Government, privacy
Hundreds of registered data brokers ignore user requests around personal data
There are few laws at the state or federal level to constrain data brokerage, the process by which companies collect and sell bulk data on people they’ve never met or done business with. States at the forefront of regulating the industry, like California, currently require hundreds of companies to register with the government and provide…
Cybersecurity, data breach, Global Security News, privacy, Security
Tea App Breach: Women Only Dating Platform Leaks 72,000 User Images
The “Tea” app, a new and popular social platform for women, confirmed a major data breach affecting users…
AI, Artificial Intelligence, Global Security News, privacy, Technology
Brave Browser Blocks Microsoft Recall from Tracking Online Activity
Brave browser now blocks Microsoft Recall by default, preventing screenshots and protecting users’ browsing history on Windows 11.
AI, Compliance, Cybersecurity, Exploits, Global Security News, Network Security, privacy, Risk Management
When 2G attacks, and a romantic road trip goes wrong
In this episode, Graham warns why it is high time we said goodbye to 2G – the outdated mobile network being exploited by cybercriminals with suitcase-sized SMS blasters. From New Zealand to London, scammers are driving around cities like dodgy Uber drivers, spewing phishing texts to thousands at once. Meanwhile, Carole unpacks a painfully awkward…
AI, Exploits, Global Security News, Government, privacy, Technology
Trump AI plan pushes critical infrastructure to use AI for cyber defense
The Trump administration’s new AI Action Plan calls for companies and governments to lean into the technology when protecting critical infrastructure from cyberattacks. But it also recognizes that these systems are themselves vulnerable to hacking and manipulation, and calls for industry adoption of “secure by design” technology design standards to limit their attack surfaces. The…
Australia, Cloud, Global Security News, leaks, privacy, Security
Global Fashion Label SABO’s 3.5M Customer Records Exposed Online
Global fashion brand SABO suffers data breach, exposing 3.5+ million customer records including names, addresses, and order details. Learn about the risks and what to do.
AI, Apps, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy, Risk Management, Webroot Blog
Back-to-school cyber safety: Parent checklist
Summer is flying by and before you know it, you’ll be buying backpacks and taking first-day-of-school photos. Back-to-school season brings new classes and friends, but it also brings new digital dangers. By the time you’ve dropped your kids off for their first day of class, chances are they’ve already been exposed to their first cyberthreat…
AI, Apps, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy, Risk Management, Webroot Blog
Back-to-school cyber safety: Parent checklist
Summer is flying by and before you know it, you’ll be buying backpacks and taking first-day-of-school photos. Back-to-school season brings new classes and friends, but it also brings new digital dangers. By the time you’ve dropped your kids off for their first day of class, chances are they’ve already been exposed to their first cyberthreat…
AI, Apps, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy, Risk Management, Webroot Blog
Back-to-school cyber safety: Parent checklist
Summer is flying by and before you know it, you’ll be buying backpacks and taking first-day-of-school photos. Back-to-school season brings new classes and friends, but it also brings new digital dangers. By the time you’ve dropped your kids off for their first day of class, chances are they’ve already been exposed to their first cyberthreat…
AI, Apps, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy, Risk Management, Webroot Blog
Back-to-school cyber safety: Parent checklist
Summer is flying by and before you know it, you’ll be buying backpacks and taking first-day-of-school photos. Back-to-school season brings new classes and friends, but it also brings new digital dangers. By the time you’ve dropped your kids off for their first day of class, chances are they’ve already been exposed to their first cyberthreat…
AI, Apps, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy, Risk Management, Webroot Blog
Back-to-school cyber safety: Parent checklist
Summer is flying by and before you know it, you’ll be buying backpacks and taking first-day-of-school photos. Back-to-school season brings new classes and friends, but it also brings new digital dangers. By the time you’ve dropped your kids off for their first day of class, chances are they’ve already been exposed to their first cyberthreat…
AI, Apps, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy, Risk Management, Webroot Blog
Back-to-school cyber safety: Parent checklist
Summer is flying by and before you know it, you’ll be buying backpacks and taking first-day-of-school photos. Back-to-school season brings new classes and friends, but it also brings new digital dangers. By the time you’ve dropped your kids off for their first day of class, chances are they’ve already been exposed to their first cyberthreat…
AI, Apps, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy, Risk Management, Webroot Blog
Back-to-school cyber safety: Parent checklist
Summer is flying by and before you know it, you’ll be buying backpacks and taking first-day-of-school photos. Back-to-school season brings new classes and friends, but it also brings new digital dangers. By the time you’ve dropped your kids off for their first day of class, chances are they’ve already been exposed to their first cyberthreat…
AI, Apps, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy, Risk Management, Webroot Blog
Back-to-school cyber safety: Parent checklist
Summer is flying by and before you know it, you’ll be buying backpacks and taking first-day-of-school photos. Back-to-school season brings new classes and friends, but it also brings new digital dangers. By the time you’ve dropped your kids off for their first day of class, chances are they’ve already been exposed to their first cyberthreat…
AI, Apps, Cybersecurity, Data Breaches, Global Security News, malware, Network Security, privacy, Risk Management, Webroot Blog
Back-to-school cyber safety: Parent checklist
Summer is flying by and before you know it, you’ll be buying backpacks and taking first-day-of-school photos. Back-to-school season brings new classes and friends, but it also brings new digital dangers. By the time you’ve dropped your kids off for their first day of class, chances are they’ve already been exposed to their first cyberthreat…
Cybersecurity, Fax, GDPR, Global Security News, privacy, Security
How Secure Is Online Fax: Privacy and Data Protection Standards
When it comes to sharing sensitive documents online, security sits at the top of everyone’s checklist. Online faxing is…
AI, Compliance, Cybersecurity, Global Security News, privacy
Choo Choo Choose to ignore the vulnerability
In episode 426 of the “Smashing Security” podcast, Graham reveals how you can hijack a train’s brakes from 150 miles away using kit cheaper than a second-hand PlayStation. Meanwhile, Carole investigates how Grok went berserk, which didn’t stop the Department of Defense signing a contract with Elon’s AI chatbot. So who is responsible when your…
Cybersecurity, fraud, Global Security News, privacy, Scams and Fraud, Security
UK Pet Owners Targeted by Fake Microchip Renewal Scams
Microchip renewal scam targets UK pet owners using leaked data from insecure registries. Emails appear legit but aim to steal money and personal info.
Global Security News, IP Address, privacy, Proxy, Security, Technology
Dedicated Proxies: A Key Tool for Online Privacy, Security and Speed
Online privacy, security, and performance today are more important than ever. For professionals and businesses working online, it’s…
Cybersecurity, data, Global Security News, privacy, Security
New Study Shows Google Tracking Persists Even With Privacy Tools
A new SafetyDetectives study reveals the surprising extent of Google tracking across the web in the US, UK, Switzerland, and Sweden. Discover how Google Analytics, AdSense, and YouTube embeds collect your data, even when using DuckDuckGo.
AI, Cybersecurity, Global Security News, leaks, privacy, Security
McDonald’s McHire Vulnerability Leaked Data of 64 Million Job Seekers
Major security flaw in McDonald’s McHire platform exposed 64M job applications. Discover how an IDOR vulnerability and weak…
AI, Cybersecurity, Global Security News, leaks, privacy, Security
McDonald’s AI Hiring Tool McHire Leaked Data of 64 Million Job Seekers
Major security flaw in McDonald’s McHire platform exposed 64M job applications. Discover how an IDOR vulnerability and weak…
AI, Compliance, Cybersecurity, Exploits, Global Security News, privacy, Risk Management
Call of Duty: From pew-pew to pwned
In episode 425 of “Smashing Security”, Graham reveals how “Call of Duty: WWII” has been weaponised – allowing hackers to hijack your entire PC during online matches, thanks to ancient code and Microsoft’s Game Pass. Meanwhile, Carole digs into a con targeting the recently incarcerated, with scammers impersonating bail bond agents to fleece desperate families.…
Cybersecurity, data breach, Global Security News, leaks, privacy, Security
Server with Rockerbox Tax Firm Data Exposed 286GB of Records
Cybersecurity researcher Jeremiah Fowler uncovered a massive 286GB data exposure at Texas-based Rockerbox, a tax credit consultancy. Exposed data includes SSNs, DD214s, and financial details, raising serious identity theft and fraud concerns.
El Salvador, Exploits, Geopolitics, Global Security News, NSO Group, privacy, Spyware
Appeals court clears path for El Salvadoran journos to sue spyware maker
A U.S. appeals court on Tuesday revived a lawsuit that El Salvadoran journalists had brought against leading spyware maker NSO Group. The U.S. Court of Appeals for the Ninth Circuit concluded that a district court that dismissed the suit — on the grounds that the California court wasn’t the right forum — abused its discretion.…
AI, Apps, Exploits, Global Security News, malware, Network Security, privacy, Risk Management
Advancing Protection in Chrome on Android
Posted by David Adrian, Javier Castro & Peter Kotwicz, Chrome Security Team Android recently announced Advanced Protection, which extends Google’s Advanced Protection Program to a device-level security setting for Android users that need heightened security—such as journalists, elected officials, and public figures. Advanced Protection gives you the ability to activate Google’s strongest security for mobile…
AI, Apps, Exploits, Global Security News, malware, Network Security, privacy, Risk Management
Advancing Protection in Chrome on Android
Posted by David Adrian, Javier Castro & Peter Kotwicz, Chrome Security Team Android recently announced Advanced Protection, which extends Google’s Advanced Protection Program to a device-level security setting for Android users that need heightened security—such as journalists, elected officials, and public figures. Advanced Protection gives you the ability to activate Google’s strongest security for mobile…
Android, data breach, Data loss, Global Security News, privacy, vulnerability
Catwatchful stalkerware app spills secrets of 62,000 users – including its own admin
Another scummy stalkerware app has spilled its guts, revealing the details of its 62,000 users – and data from thousands of victims’ infected devices.
Global Security News, Hardware, privacy, wireless-security
Exploring Meshtastic and LoRa Mesh Networks – Rob Allen – PSW #881
Application Security, Breach, Data Security, Exploits, Global Security News, privacy
CatWatchful stalkerware breach reveals 62K users, 26K victims
An SQL injection exploit exposed the users and owner of CatWatchful stalkerware.
Global Security News, Law & order, Mobile, Podcast, privacy
Smashing Security podcast #424: Surveillance, spyware, and self-driving snafus
A Mexican drug cartel spies on the FBI using traffic cameras and spyware — because “ubiquitous technical surveillance” is no longer just for dystopian thrillers. Graham digs into a chilling new US Justice Department report that shows how surveillance tech was weaponised to deadly effect. Meanwhile, Carole checks the rear-view mirror on the driverless car…
AI, Compliance, Cybersecurity, Europe, Global Security News, privacy
Surveillance, spyware, and self-driving snafus
A Mexican drug cartel spies on the FBI using traffic cameras and spyware — because “ubiquitous technical surveillance” is no longer just for dystopian thrillers. Graham digs into a chilling new US Justice Department report that shows how surveillance tech was weaponised to deadly effect. Meanwhile, Carole checks the rear-view mirror on the driverless car…
cyber attack, Cybersecurity, data breach, Global Security News, privacy, Security
Verizon and T-Mobile Deny Data Breaches as Millions of User Records Sold Online
User claims to sell stolen Verizon and T-Mobile data for 116 million users online Verizon says data is old T-Mobile denies any breach and links to it.
Breach, Global Security News, privacy, Ransomware
Johnson Controls notifies victims of breach in 2023 ransomware attack
Multinational automation systems manufacturer does not release the nature of the data stolen.
critical-infrastructure-security, Global Security News, IoT, privacy
Hikvision banned in Canada over security risks
Chinese state-owned video surveillance equipment vendor Hikvision had its Canadian subsidiary given an operation cessation order by the Canadian government following a review that indicated the products’ threat to the country’s national security, reports The Record, a news site by cybersecurity firm Recorded Future.
AI, Apps, Compliance, Cybersecurity, Exploits, Global Security News, Government & Policy, privacy, Risk Management
Fake Receipt Detector Technology: Protecting Financial Integrity in the Digital Age
The rise of sophisticated digital tools and artificial intelligence has revolutionized many aspects of business and finance, but it has also created new opportunities for fraudulent activities. Among the most concerning developments is the increasing prevalence of fake receipts and fraudulent expense documentation. As businesses, insurance companies, and financial institutions grapple with these challenges, the…
Application Security, Global Security News, Network Security, privacy
US data privacy threatened by free VPN apps
Google and Apple were reported by the Tech Transparency Project to have continued hosting free VPN apps linked to Chinese companies in their respective app stores, presenting significant privacy and national security threat to the U.S., months after the TTP disclosed that over a fifth of such apps on the U.S.
Cybercrime, Global Security News, Government, North America, privacy, Technology
Hacker helped kill FBI sources, witnesses in El Chapo case, according to watchdog report
A hacker working on behalf of the Sinaloa drug cartel infiltrated cameras and phones to track an FBI official in Mexico investigating the drug lord El Chapo, then used data from that surveillance to kill and intimidate potential sources and witnesses the agent was meeting with, a Justice Department watchdog report revealed. An FBI case…
Cybercrime, Global Security News, Government, North America, privacy, Technology
Hacker helped kill FBI sources, witnesses in El Chapo case, according to watchdog report
A hacker working on behalf of the Sinaloa drug cartel infiltrated cameras and phones to track an FBI official in Mexico investigating the drug lord El Chapo, then used data from that surveillance to kill and intimidate potential sources and witnesses the agent was meeting with, a Justice Department watchdog report revealed. An FBI case…
app store, Apple, china, Global Security News, privacy, Security
Researchers Warn Free VPNs Could Leak US Data to China
Tech Transparency Project warns Chinese-owned VPNs like Turbo VPN and X-VPN remain on Apple and Google app stores, raising national security concerns.