Major medical device manufacturer notifies nearly 4 million of breach
The world’s largest medical device company is notifying more than 3.8 million people that their data may have been exposed […]
RCS and DNS: The NAPTR Record
Over the last year, with recent updates to iOS and Android, RCS (Rich Communication Services) has become an increasingly used
Data Leak Prevention vs Data Loss Prevention
Data Leak Prevention focuses on stopping unauthorized data transfers outside an organization, while Data Loss Prevention protects against loss, corruption,
EFF and Allies: X’s FTC Petition to Waive Privacy Violation Order Should be Rejected
X Corp. should not be able to escape privacy compliance because it changed its name. On May 15, X Corp.
The Polite Social Engineering Attack: How Courtesy and Empathy Are Weaponized in Cybersecurity Threats
You’re at work, mid-morning, coffee still warm on your desk. Your phone rings. The voice on the other end is
AI-Hallucinated Domains as a Software Supply Chain Vector
Executive Summary Unit 42 researchers found that large language models (LLMs) consistently hallucinate web domains for legitimate brands. Adversaries are
When checking the URL isn’t enough: phishing via the Microsoft identity platform
One of the most common pieces of anti-phishing advice is to double-check the website’s domain name before providing your credentials.
What to Ask Before Buying a DSPM Solution
As interest in Data Security Posture Management (DSPM) skyrockets, so does confusion. Many vendors jump into the DSPM market with
Meta’s AI ‘Perv Glasses’ Now Come With Stupid Comcast-esque Usage Restrictions
from the accelerated-enshittification dept Despite a lot of pretense, Meta, permanently deadbolted to Mark Zuckerberg’s outsized ego, simply isn’t an
GDPR Article 17: What Is the Right to Erasure?
Article 17 of the GDPR (General Data Protection Regulation) plays a distinctive yet essential role in data protection law. It