Collaborate Disseminate
Over on LinkedIn, AlonGal of Hudson Rock wrote: BIG – ShinyHunters confirmed to me that they are behind the recent Okta vishing campaign and have published alleged data from three major victims (Crunchbase, SoundCloud, and Betterment) on their ne… Continue reading ShinyHunters group opens new dark web leak site, claims responsibility for OKTA vishing campaign
Bill Toulas reports: An operational security failure allowed researchers to recover data that the INC ransomware gang stole from a dozen U.S. organizations. A deep forensic examination of the artifacts left behind uncovered tooling that had not been us… Continue reading INC ransomware opsec fail allowed data recovery for 12 US orgs
NL Times reports: The Dutch police knew about gaps in their cybersecurity before a Russian cyber group stole a large amount of police data in September 2024, according to research by Follow the Money. The hackers used vulnerabilities that the police ha… Continue reading NL: Police warned about security hole used by Russian hackers in major theft of police data
Dmitry Pokidaev reports: Kazakhstan is considering tightening legal responsibility for violations related to personal data protection. The Ministry of Artificial Intelligence and Digital Development has proposed introducing criminal liability for mass … Continue reading Kazakhstan Considers Criminal Liability for Mass Leaks of Personal Data
Carly Page reports: GDPR fines pushed past the £1 billion (€1.2 billion) mark in 2025 as Europe’s regulators were deluged with more than 400 data breach notifications a day, according to a new survey that suggests the post-plateau era of enforcem… Continue reading Europe’s GDPR cops dished out €1.2B in fines last year as data breaches piled up
Lawrence Abrams reports: People worldwide are being targeted by a massive spam wave originating from unsecured Zendesk support systems, with victims reporting receiving hundreds of emails with strange and sometimes alarming subject lines. The wave of s… Continue reading Zendesk ticket systems hijacked in massive global spam wave
Today the Electronic Privacy Information Center (EPIC) released Beyond HIPAA: Reimagining How Privacy Laws Apply to Health Data to Maximize Equity in the Digital Age. The report examines and proposes solutions to the health data privacy crisis—a produc… Continue reading EPIC Releases New Report on Protecting Health Privacy in the Digital Age
Gabriela Kennedy, Joanna K.C. Wong, and Roslie Liu of Mayer|Brown write: On 1 January 2026, the Office of the Commissioner of Critical Infrastructure (Computer-system Security) issued a Code of Practice (the “CoP”) under the Protection of Critical… Continue reading Hong Kong issues Code of Practice under the Protection of Critical Infrastructures (Computer Systems) Ordinance
Eileen Sullivan reports: Employees with the Department of Government Efficiency who were detailed to the Social Security Administration last March shared sensitive data through a nonsecure third party server, in violation of agency security policies, t… Continue reading DOGE Employees Shared Social Security Data, Court Filing Shows
Jessica Lyons report: Cloudflare has fixed a flaw in its web application firewall (WAF) that allowed attackers to bypass security rules and directly access origin servers, which could lead to data theft or full server takeover. FearsOff security resear… Continue reading Cloudflare whacks WAF bypass bug that opened side door for attackers