California Settles With Google Over Location Privacy Practices for $93 Million
Search giant Google agreed to a $93 million settlement with the state of California on Thursday over its location-privacy practices. The settlement follows a $391.5…
Category: SecurityWeek
Pentagon’s 2023 Cyber Strategy Focuses on Helping Allies
The US Department of Defense (DoD) this week published an unclassified summary of its 2023 Cyber Strategy, outlining plans for both offensive and defensive efforts.…
In Other News: China Blames NSA for Hack, AI Jailbreaks, Netography Spin-Off
SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a…
MGM Hackers Broadening Targets, Monetization Strategies
Google-owned Mandiant says the financially motivated threat actor responsible for the recent MGM Resorts hack has been expanding its targets, as well as its monetization…
Deduce Raises $9 Million to Fight AI-Generated Identity Fraud
Identity fraud prevention provider Deduce this week announced that it has raised $9 million in a new funding round that brings the total raised by…
Google Feature Blamed for Retool Breach That Led to Cryptocurrency Firm Hacks
A recently introduced Google account sync feature has been blamed by software development firm Retool after sophisticated hackers gained access to its systems and targeted…
A Second Major British Police Force Suffers a Cyberattack in Less Than a Month
Personal details of thousands of police officers and staff from Greater Manchester Police have been hacked from a company that makes identity cards, the second…
Caesars Confirms Ransomware Hack, Stolen Loyalty Program Database
Caesars Entertainment, Inc., a well-known global hospitality brand, has been hacked by a cybercrime gang that stole a vast chunk of data, including the company’s…
A One-Two Punch for Security ROI
Traditionally, as an industry, we rely heavily on metrics like the cost of a data breach as a tool to discuss return on investment (ROI).…
ICS Computers in Western Countries See Increasing Attacks: Report
Industrial control system (ICS) computers in the Western world have been increasingly attacked, but the percentages are still smaller compared to other parts of the…
Kubernetes Vulnerability Leads to Remote Code Execution
A high-severity vulnerability in Kubernetes can be exploited to achieve remote code execution (RCE) on all Windows endpoints within the cluster, Akamai’s security researchers warn.…
Azure HDInsight Flaws Allowed Data Access, Session Hijacking, Payload Delivery
Orca Security has published details on eight cross-site scripting (XSS) vulnerabilities impacting Azure HDInsight, which could be exploited to access data, hijack sessions, or deliver…