Over 3,000 free Android apps violate kids’ US privacy law

It’s already tough for users to understand app permission requests to access various features on their phones. Kids who download game or language apps face an even tougher time understanding what they are giving up in exchange. Because we rarely … Continue reading Over 3,000 free Android apps violate kids’ US privacy law

Enterprise Networks Hit by Cryptominers; 2.5 Billion Attacks Blocked in Six Months

Cryptomining transactions, seen as a terrific money-making scheme separate from the traditional online advertising, are growing faster than ever, concluded security researchers after 2.5 billion attacks were blocked in enterprise networks in the p… Continue reading Enterprise Networks Hit by Cryptominers; 2.5 Billion Attacks Blocked in Six Months

Grindr says sharing of sensitive user information is ‘industry practice’

Dating social network Grindr admitted sharing users’ sensitive information with third parties as this is “industry practice.” The data was encrypted and Apptimize and Localytics were bound by contract to keep the data safe and confide… Continue reading Grindr says sharing of sensitive user information is ‘industry practice’

Over 5 million payment cards compromised in Saks, Lord & Taylor data breach

Russian hackers known as the JokerStash syndicate or Fin7 were selling on March 28 on the dark web payment card data stolen from over 5 million customers of department stores Saks Fifth Avenue, Saks OFF 5TH and Lord & Taylor in New York and New Jer… Continue reading Over 5 million payment cards compromised in Saks, Lord & Taylor data breach

MyFitnessPal hacked, 150 million user accounts compromised

American manufacturer of sports gear, Urban Armour, announced that 150 million MyFitnessPal accounts were breached following the largest cyber incident to take place so far this year. Although the nutrition application fell victim to a data breach in l… Continue reading MyFitnessPal hacked, 150 million user accounts compromised

‘Limited intrusion’ detected at Boeing, company says WannaCry articles are ‘overstated and inaccurate’

News that a WannaCry attack has allegedly hit a South Carolina facility owned by Boeing is now downplayed by the aerospace company on Twitter. According to their statement, “articles on a malware disruption are overstated and inaccurate,” a… Continue reading ‘Limited intrusion’ detected at Boeing, company says WannaCry articles are ‘overstated and inaccurate’

Facebook accused of secretly collecting user text and call data

Following the Cambridge Analytica scandal, some users reported on Twitter that they downloaded their profile data to figure out exactly what kind of information the social network keeps on them. According to ArsTechnica, a man from New Zealand scanned … Continue reading Facebook accused of secretly collecting user text and call data

City of Atlanta systems infected with ransomware; sensitive data at risk

The FBI and the US Department of Homeland Security are investigating a cyberattack against the municipality of Atlanta, said Atlanta Mayor Keisha Lance Bottoms. The city’s computer systems were taken offline on Thursday following a ransomware inf… Continue reading City of Atlanta systems infected with ransomware; sensitive data at risk

880,000 payment cards data breached in Orbitz security incident

Travel booking website Orbitz, part of online travel agency Expedia, confirmed a data security incident was detected on March 1, possibly exposing the personal information associated with some 880,000 payments cards. The breach affected both the partne… Continue reading 880,000 payment cards data breached in Orbitz security incident

Facebook caught up in political data scandal; denies data breach

Lawmakers from the US and Europe demand explanations from Facebook following statements that it shared user data with Cambridge Analytica, a political analytics firm linked to US President Donald Trump,  while the 2016 presidential election was in… Continue reading Facebook caught up in political data scandal; denies data breach