Data Protection & Privacy

15
Mar

Canada’s Bill C-22 Forces New Metadata Harvesting by ISPs

Bill C-22, recently tabled in the Canadian Parliament, mandates that telecoms and internet service providers collect and retain detailed metadata
1 min read
14
Mar
Student Loan Provider Exposes 2.5M Records via Misconfigured Cloud Bucket

Student Loan Provider Exposes 2.5M Records via Misconfigured Cloud Bucket

A student loan servicing company unintentionally left an Amazon S3 bucket publicly accessible, exposing roughly 2.5 million records that
1 min read
14
Mar

Iran‑Backed Group Deploys Wiper Malware Against Stryker’s Medical Systems

Krebs on Security reported that a cyber‑crime group with alleged ties to the Iranian government claimed responsibility for a
1 min read
12
Mar
Misconfigured Cloud Bucket Leaks 2.5M Student Loan Records

Misconfigured Cloud Bucket Leaks 2.5M Student Loan Records

A publicly accessible cloud storage bucket at a major student‑loan servicer exposed the personal data of roughly 2.5
1 min read
12
Mar
Critical Android Graphics Driver Flaw Lets Attackers Bypass Lock Screen in Seconds

Critical Android Graphics Driver Flaw Lets Attackers Bypass Lock Screen in Seconds

Malwarebytes has identified a critical zero‑day vulnerability in Android’s graphics driver stack. By delivering a specially crafted image
1 min read
09
Mar
Insecure Cloud Bucket Leaks 2.5 M Student‑Loan Records

Insecure Cloud Bucket Leaks 2.5 M Student‑Loan Records

Attackers exploited a publicly accessible cloud storage bucket that was misconfigured without proper authentication controls. Over a short period they
1 min read
05
Mar
Misconfigured Cloud Buckets Leak 2.5 M Student Loan Records

Misconfigured Cloud Buckets Leak 2.5 M Student Loan Records

A major student loan servicer left several cloud storage buckets publicly accessible, allowing threat actors to enumerate and download files
1 min read
05
Mar
Windows Delete Leaves Traces: Secure Shredding Essential for GDPR Compliance

Windows Delete Leaves Traces: Secure Shredding Essential for GDPR Compliance

Malwarebytes recently demonstrated that the default “delete” action in Windows does not actually erase data; it merely removes the directory
1 min read
05
Mar
Windows Delete Fails: Remnants Leak Data, Defenders Must Enforce Secure Erasure

Windows Delete Fails: Remnants Leak Data, Defenders Must Enforce Secure Erasure

Malwarebytes’ recent analysis shows that the default Windows file‑deletion process merely removes directory entries, leaving the underlying data blocks
1 min read
05
Mar
UK Mulls VPN Ban: New Threat Landscape for Defenders

UK Mulls VPN Ban: New Threat Landscape for Defenders

The UK government is debating legislation that would prohibit the use of commercial VPN services for personal and business traffic.
1 min read