Tag #Data Breach

Showing 109 to 120 of 139 results

npr.org

🌐 85% Global Worthiness

Dec 31, 10:10

Chinese Hackers Access U.S. Treasury Department Systems

Chinese hackers accessed several U.S. Treasury Department workstations and unclassified documents after compromising third-party software provider BeyondTrust on December 8th; the department stated there is currently no evidence of continued access, and the incident is under investigation as a major...

Chinese Hackers Access U.S. Treasury Department Systems

Chinese hackers accessed several U.S. Treasury Department workstations and unclassified documents after compromising third-party software provider BeyondTrust on December 8th; the department stated there is currently no evidence of continued access, and the incident is under investigation as a major...

Progress

32% Bias Score

ShareSaveArticle

Industry, Innovation, and Infrastructure

12345678

Previous 1 of 8 Next

How does this Treasury Department breach relate to the broader Salt Typhoon campaign, and what are the systemic implications for U.S. cybersecurity?

This incident highlights the vulnerability of government systems to cyberattacks through third-party vendors. The compromise of BeyondTrust's key allowed hackers to bypass security protocols and access Treasury workstations. This breach follows the discovery of the Salt Typhoon campaign, which affected nine telecommunication companies, showcasing a broader pattern of Chinese cyberespionage targeting U.S. infrastructure and communications.

forbes.com

🌐 85% Global Worthiness

Dec 29, 19:09

Chrome Extension Attacks Bypass Two-Factor Authentication

Between December 24th and 26th, hackers exploited a vulnerability in Google's authorization flow to publish a malicious Chrome extension, potentially allowing them to steal cookies and bypass MFA despite the employee having Google Advanced Protection enabled. Cyberhaven was affected, and attackers p...

Chrome Extension Attacks Bypass Two-Factor Authentication

Between December 24th and 26th, hackers exploited a vulnerability in Google's authorization flow to publish a malicious Chrome extension, potentially allowing them to steal cookies and bypass MFA despite the employee having Google Advanced Protection enabled. Cyberhaven was affected, and attackers p...

Progress

28% Bias Score

ShareSaveArticle

Peace, Justice, and Strong Institutions

12345678

Previous 1 of 8 Next

What specific vulnerabilities in the Chrome extension ecosystem allowed hackers to bypass two-factor authentication and steal session cookies?

Between December 24th and 26th, hackers compromised several Chrome browser extensions, potentially stealing session cookies and bypassing two-factor authentication. The attack against Cyberhaven involved a phishing email that granted a malicious application access despite the employee having Google Advanced Protection and MFA enabled. This resulted in a malicious extension being briefly published on the Chrome Web Store.

nos.nl

🌐 85% Global Worthiness

Dec 28, 01:07

Volkswagen Data Breach Exposes Location Data of 800,000 Electric Vehicle Owners

A data breach at Volkswagen exposed the personal data of 800,000 electric vehicle owners, including precise location data for nearly 500,000 vehicles, due to a misconfiguration by subsidiary Cariad; data was accessible for months on Amazon cloud storage.

Volkswagen Data Breach Exposes Location Data of 800,000 Electric Vehicle Owners

A data breach at Volkswagen exposed the personal data of 800,000 electric vehicle owners, including precise location data for nearly 500,000 vehicles, due to a misconfiguration by subsidiary Cariad; data was accessible for months on Amazon cloud storage.

Progress

44% Bias Score

ShareSaveArticle

Reduced Inequality

12345678

Previous 1 of 8 Next

How did Volkswagen's data collection practices contribute to the severity of this data breach?

The breach, revealed by a whistleblower to Der Spiegel and the Chaos Computer Club, highlights significant security flaws in Volkswagen's data handling practices. The data, collected via a user app for features like pre-heating seats, included parking locations and daily routines, creating detailed datasets on individual movements. This raises serious privacy concerns and erodes public trust.

zeit.de

🌐 85% Global Worthiness

Dec 27, 19:10

Cariad Data Breach Exposes Location Data of 800,000 Electric Vehicles

A software flaw at Volkswagen's Cariad exposed location data of 800,000 electric vehicles and contact information of their owners in Europe; the vulnerability lasted months before being discovered by the Chaos Computer Club, which then reported it to VW.

Cariad Data Breach Exposes Location Data of 800,000 Electric Vehicles

A software flaw at Volkswagen's Cariad exposed location data of 800,000 electric vehicles and contact information of their owners in Europe; the vulnerability lasted months before being discovered by the Chaos Computer Club, which then reported it to VW.

Progress

32% Bias Score

ShareSaveArticle

Responsible Consumption and Production

12345678

Previous 1 of 8 Next

What security flaws allowed unauthorized access to Cariad's data, and what steps is Volkswagen taking to prevent future breaches?

The data breach at Cariad highlights the risks associated with storing large amounts of vehicle data in cloud services. The unauthorized access to precise location data of hundreds of thousands of vehicles raises serious privacy concerns. The incident underscores the need for robust security measures to protect sensitive user information in connected vehicles.

forbes.com

🌐 90% Global Worthiness

Dec 23, 16:07

AI-Powered Phishing Attacks Target Gmail's 2.5 Billion Users

AI-powered phishing attacks targeting Gmail's 2.5 billion users are leveraging deepfake technology to create highly convincing fake videos and audio recordings, prompting warnings from Google and McAfee to double-check unexpected requests and verify security emails directly through myaccount.google....

AI-Powered Phishing Attacks Target Gmail's 2.5 Billion Users

AI-powered phishing attacks targeting Gmail's 2.5 billion users are leveraging deepfake technology to create highly convincing fake videos and audio recordings, prompting warnings from Google and McAfee to double-check unexpected requests and verify security emails directly through myaccount.google....

Progress

40% Bias Score

ShareSaveArticle

No Poverty

12345678

Previous 1 of 8 Next

What are the immediate implications of AI-powered phishing attacks targeting Gmail's vast user base?

AI-driven phishing attacks targeting Gmail users are increasingly sophisticated, using deepfake technology to create realistic fake videos or audio recordings. These attacks aim to exploit the sensitive data stored in email inboxes, potentially leading to account compromise and identity theft. McAfee and Google have issued warnings about these threats, emphasizing the need for heightened vigilance among users.

foxnews.com

🌐 90% Global Worthiness

Dec 23, 19:10

Massive Health Data Breach Exposes Information of 910,000 Patients

A data breach at ConnectOnCall, a Phreesia-owned telehealth platform, exposed the sensitive personal and medical information of over 910,000 patients between February 16 and May 12, 2024, including names, medical records, and in some cases, Social Security numbers, highlighting vulnerabilities in he...

Massive Health Data Breach Exposes Information of 910,000 Patients

A data breach at ConnectOnCall, a Phreesia-owned telehealth platform, exposed the sensitive personal and medical information of over 910,000 patients between February 16 and May 12, 2024, including names, medical records, and in some cases, Social Security numbers, highlighting vulnerabilities in he...

Progress

36% Bias Score

ShareSaveArticle

Good Health and Well-being

12345678

Previous 1 of 8 Next

What are the immediate consequences of the ConnectOnCall data breach for the 910,000 affected patients?

A data breach affecting over 910,000 patients' sensitive medical and personal information occurred at ConnectOnCall, a telehealth platform owned by Phreesia. The breach, lasting from February 16 to May 12, 2024, exposed names, phone numbers, medical record numbers, dates of birth, and health details; Social Security numbers were also compromised in some cases. Phreesia is offering credit monitoring to those affected.

forbes.com

🌐 85% Global Worthiness

Dec 30, 13:08

Data Breach Recovery Plan: Six Steps To Safeguard Your Information

This guide details a six-step recovery plan following a data breach, including verifying the breach, securing accounts, addressing email and phone risks, protecting identity, reviewing online presence, and exploring legal and financial recourse.

Data Breach Recovery Plan: Six Steps To Safeguard Your Information

This guide details a six-step recovery plan following a data breach, including verifying the breach, securing accounts, addressing email and phone risks, protecting identity, reviewing online presence, and exploring legal and financial recourse.

Progress

32% Bias Score

ShareSaveArticle

Peace, Justice, and Strong Institutions

12345678

Previous 1 of 8 Next

What immediate actions should individuals take upon discovering a data breach to mitigate potential harm?

Data breaches expose personal information, leading to identity theft and financial losses. Swift action is crucial; delayed responses increase risks. The first step involves verifying the breach using official sources and assessing the type of compromised data.

foxnews.com

🌐 90% Global Worthiness

Dec 28, 13:08

Ninth US Telecom Company Hacked in Chinese Espionage Campaign

The White House revealed that a ninth US telecommunications company was hacked in a Chinese espionage campaign, Salt Typhoon, accessing private communications of Americans, mostly government officials in Washington, D.C., and Virginia, highlighting cybersecurity vulnerabilities.

Ninth US Telecom Company Hacked in Chinese Espionage Campaign

The White House revealed that a ninth US telecommunications company was hacked in a Chinese espionage campaign, Salt Typhoon, accessing private communications of Americans, mostly government officials in Washington, D.C., and Virginia, highlighting cybersecurity vulnerabilities.

Progress

48% Bias Score

ShareSaveArticle

Peace, Justice, and Strong Institutions

12345678

Previous 1 of 8 Next

How did the Chinese hackers gain access to private communications, and what measures can be taken to prevent future incidents?

This Chinese hacking campaign, Salt Typhoon, highlights the vulnerability of US telecommunications infrastructure and the need for stronger cybersecurity measures. The compromise of nine US telecommunication companies and access to private communications of a large number of Americans underscores the significant threat posed by state-sponsored cyberattacks.

welt.de

🌐 85% Global Worthiness

Dec 27, 19:10

Data Breach Exposes Location Data of 800,000 VW Electric Vehicles

A data breach at VW's Cariad exposed location data of 800,000 electric vehicles and contact information of their owners due to a software flaw in an Amazon cloud server, allowing access to precise location data of 460,000 vehicles for months; VW claims the issue is resolved and no sensitive data was...

Data Breach Exposes Location Data of 800,000 VW Electric Vehicles

A data breach at VW's Cariad exposed location data of 800,000 electric vehicles and contact information of their owners due to a software flaw in an Amazon cloud server, allowing access to precise location data of 460,000 vehicles for months; VW claims the issue is resolved and no sensitive data was...

Progress

40% Bias Score

ShareSaveArticle

Responsible Consumption and Production

12345678

Previous 1 of 8 Next

What were the root causes of the data breach at Cariad, and what specific security measures were insufficient to prevent unauthorized access?

The breach highlights significant security flaws in the online connectivity of modern vehicles. The unauthorized access to precise location data raises serious privacy concerns, as this information could be used to track individuals' movements and routines. The fact that this data was stored on an Amazon cloud server underscores the challenges in securing such systems.

bbc.com

🌐 75% Global Worthiness

Dec 27, 04:07

Over 700 MoD Devices and Firearms Lost or Stolen

The UK Ministry of Defence lost or had stolen over 700 electronic devices and several firearms, including deactivated World War I and II weapons, between 2023 and 2024, prompting concerns over national security and prompting calls for an inquiry.

Over 700 MoD Devices and Firearms Lost or Stolen

The UK Ministry of Defence lost or had stolen over 700 electronic devices and several firearms, including deactivated World War I and II weapons, between 2023 and 2024, prompting concerns over national security and prompting calls for an inquiry.

Progress

48% Bias Score

ShareSaveArticle

Peace, Justice, and Strong Institutions

12345678

Previous 1 of 8 Next

What specific measures are currently in place to prevent such losses, and what evidence suggests these measures are insufficient?

The increasing number of lost or stolen items from the MoD, especially the rise in missing USB sticks from 20 in 2023 to 125 in 2024, highlights a potential weakness in security protocols. The loss of firearms, even deactivated ones, poses a risk of sensitive information falling into the wrong hands, undermining national security. The government's claim of "robust policies" is challenged by the sheer number of incidents.

forbes.com

🌐 90% Global Worthiness

Dec 23, 19:10

Ascension Data Breach Exposes 5.6 Million Patients, Employees

Ascension, a healthcare company, reported a data breach on December 19, 2024, affecting 5,599,699 individuals due to a phishing email exploiting employee vulnerabilities; compromised data includes medical, financial, and personal information, prompting Ascension to offer two years of identity theft ...

Ascension Data Breach Exposes 5.6 Million Patients, Employees

Ascension, a healthcare company, reported a data breach on December 19, 2024, affecting 5,599,699 individuals due to a phishing email exploiting employee vulnerabilities; compromised data includes medical, financial, and personal information, prompting Ascension to offer two years of identity theft ...

Progress

36% Bias Score

ShareSaveArticle

Good Health and Well-being

12345678

Previous 1 of 8 Next

What systemic vulnerabilities within the healthcare industry contributed to this data breach?

The breach highlights the vulnerability of healthcare systems to social engineering attacks and the significant risks associated with the extensive personal data they hold. The attackers leveraged a phishing email to gain access, underscoring the need for enhanced cybersecurity measures within the healthcare industry. The stolen data, including Social Security numbers and medical records, creates a high risk of identity theft and financial fraud.

dw.com

🌐 85% Global Worthiness

Dec 22, 16:07

Ukraine Suffers Major Cyberattack on State Registries

A massive cyberattack on December 19th, 2023, disrupted Ukrainian state registries, causing the temporary suspension of services and raising concerns about data security, with the former justice minister downplaying the impact while the government assesses the damage, which includes over one billion...

Ukraine Suffers Major Cyberattack on State Registries

A massive cyberattack on December 19th, 2023, disrupted Ukrainian state registries, causing the temporary suspension of services and raising concerns about data security, with the former justice minister downplaying the impact while the government assesses the damage, which includes over one billion...

Progress

56% Bias Score

ShareSaveArticle

Peace, Justice, and Strong Institutions

12345678

Previous 1 of 8 Next

What specific data was compromised, and how does the former minister's assessment of the situation differ from the government's response to the incident?

The attack, claimed by the XakNet Team, resulted in the deletion of over one billion data rows, including backups in Poland. While the government anticipates registry restoration within one to two weeks, the incident highlights the evolving tactics of Russian cyberattacks, shifting from data theft to destruction.

Showing 109 to 120 of 139 results