All Cybersecurity articles – Page 11
-
Article
NetWalker hacker imprisoned 20 years for ransomware attacks
Sebastien Vachon-Desjardins, a former Canadian government employee who played part in widespread NetWalker ransomware attacks, was sentenced to 20 years in prison and ordered to forfeit the $21.5 million U.S. investigators said he received from his victims.
-
Article
Samsung facing class action alleging CCPA violations over data breaches
Samsung collected too much personal data from customers and failed to adequately secure it, leading to two data breaches this year and potentially millions of harmed individuals, a class-action lawsuit alleges.
-
Article
Experts: EU Cyber Resilience Act puts pressure on tech developers, users
The EU’s proposed Cyber Resilience Act primarily puts pressure on tech manufacturers to ensure the cybersecurity of their products, but companies also have a duty of care to use the most secure products available.
-
Article
Morgan Stanley unit fined $35M for mishandling customer data
Morgan Stanley Smith Barney agreed to pay $35 million to settle Securities and Exchange Commission charges it repeatedly disregarded the safeguarding of clients’ personal data in decommissioning local storage devices.
-
Article
U.S. sanctions Iran intelligence ministry over Albania cyberattack
Iran’s minister of intelligence, together with its Ministry of Intelligence and Security, were sanctioned by the Treasury Department’s Office of Foreign Assets Control for malicious cyber activities that threaten the national security of the United States and its allies.
-
Article
Details murky in Samsung’s second data breach this year
Samsung revealed a hacker accessed the personal data of an unspecified number of its U.S.-based customers, even after improving its cybersecurity systems following a previous breach earlier this year.
-
Article
U.S., Israel finalize deal on cybersecurity cooperation
The United States and Israel have finalized an agreement to work together to protect the financial sector from cybersecurity attacks, the U.S. Treasury Department announced.
-
Article
Judge OKs Robinhood $20M data breach settlement
Online stock trading platform and broker-dealer Robinhood Financial moved closer to paying $20 million as part of a class-action settlement with thousands of customers whose accounts were allegedly accessed by unauthorized users.
-
Article
Lawsuit: Lax Coinbase cybersecurity led to theft of customers’ crypto
Coinbase is the subject of a class-action lawsuit alleging cybersecurity failures at the cryptocurrency exchange are to blame for customer accounts losing thousands of dollars in crypto, with the company not doing enough to prevent further thefts.
-
Article
Twitter whistleblower says poor cybersecurity invites breaches, manipulation
Peiter Zatko, a former cybersecurity executive at Twitter, has blown the whistle on his observations of systemic data security lapses at the company, undercounting of fake accounts, and how the social media platform could be manipulated by foreign intelligence services.
-
Article
Cybersecurity, beneficial ownership lessons found in SEC fraud case
Charges levied by the Securities and Exchange Commission regarding an international scheme in which hackers accessed online brokerage accounts to manipulate stock prices impart cybersecurity and beneficial ownership lessons for compliance professionals.
-
Article
FTC seeks to expand authority on data breaches, commercial surveillance
The Federal Trade Commission is seeking comment on potential rules that would penalize companies that suffer data breaches due to lax cybersecurity protocols and punish firms that engage in abusive commercial surveillance practices.
-
Article
Proposed NIST cybersecurity guide incorporates HIPAA Security Rule
The National Institute of Standards and Technology is seeking comment on proposed guidance intended to help healthcare organizations that fall under the regulatory umbrella of the Health Insurance Portability and Accountability Act’s Security Rule.
-
Training
Ransomware Attack: A scenario-based immersive learning
Take this self-directed, interactive immersive study of a fictional cyber event based on real-life scenarios to deepen your understanding of the importance of crisis management planning and put you in the shoes of a compliance leader during a ransomware attack.
-
Article
Robinhood Crypto fined $30M for AML, cybersecurity failures
Robinhood Crypto agreed to pay a $30 million fine to the New York State Department of Financial Services for “significant failures” in its Bank Secrecy Act/anti-money laundering and cybersecurity compliance programs.
-
Article
IBM report: Data breach costs up, contributing to inflation
The global average cost to mitigate cybersecurity issues resulting from a data breach increased to an all-time high of $4.35 million and could be contributing to current inflation trends, according to the latest annual report from IBM.
-
Article
Wawa to pay states $8M for data security failures in 2019 breach
East Coast convenience store chain Wawa agreed to pay $8 million in a settlement with a coalition of seven attorneys general over its 2019 data breach that exposed the debit and credit card information of approximately 34 million payment cards.
-
Article
Uber admits 2016 data breach cover-up in deal with DOJ
Ridesharing company Uber reached a nonprosecution agreement with the Department of Justice to resolve a criminal investigation into its 2016 data breach and subsequent cover-up.
-
Article
T-Mobile to create $350M fund to settle 2021 data breach claims
T-Mobile agreed to create a $350 million fund and spend an additional $150 million on improving its data security to settle a class-action lawsuit related to a 2021 hack that exposed the personal information of more than 76 million customers.
-
Article
Chinese regulator fines Didi $1.2B for data security violations
The Cyberspace Administration of China levied fines of more than ¥8 billion (U.S. $1.2 billion) against ridesharing platform Didi Global and ¥1 million (U.S. $148,000) against two company executives for violating the country’s data security regulations.