Civil liberties advocates have long argued that “geofence” search warrants are unconstitutional for their ability to ensnare entirely innocent people who were nearby at the time a crime was committed. But errors in the geofence warrant applications that go before…
Tag: Security News | TechCrunch
State-backed hackers are exploiting new Ivanti VPN zero-days — but no patches yet
U.S. software giant Ivanti has confirmed that hackers are exploiting two critical-rated vulnerabilities affecting its widely-used corporate VPN appliance, but said that patches won’t be available until the end of the month. Ivanti said the two vulnerabilities — tracked as…
EU lawmakers under pressure to fully disclose dealings with child safety tech maker, Thorn
More trouble for European Union lawmakers in a controversial area of tech policymaking — namely the bloc’s proposed legislation to apply surveillance technologies, such as client-side scanning, to digital messaging to try to detect child sexual abuse material (CSAM). This…
A startup’s guide to cyberthreats — threat modeling and proactive security
Cybersecurity is a complex and multifaceted field, and even with thorough threat modeling, there’s always a risk of compromise. © 2023 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read…
Texas-based care provider HMG Healthcare says hackers stole unencrypted patient data
Texas-based care provider HMG Healthcare has confirmed that hackers accessed the personal data of residents and employees, but says it has been unable to determine what types of data were stolen. HMG Healthcare is headquartered in The Woodlands, Texas, and…
Fujitsu, facing heat over UK Post Office scandal, continues to rake in billions from government deals
Japanese tech giant Fujitsu is facing growing pressure from U.K. political quarters over its role in a scandal that saw hundreds of post office owners prosecuted for accounting discrepancies. But as Fujitsu has emerged as a leading protagonist in a…
Fidelity National Financial says hackers stole data on 1.3 million customers
Real estate services giant Fidelity National Financial has confirmed hackers stole data on 1.3 million of its customers during a November cyberattack that knocked the company offline for a week. FNF said in a filing Tuesday with federal regulators: “We…
AI aids nation-state hackers but also helps US spies to find them, says NSA cyber director
Nation state-backed hackers and criminals are using generative AI in their cyberattacks, but U.S. intelligence is also using artificial intelligence technologies to find malicious activity, according to a senior U.S. National Security Agency official. “We already see criminal and nation…
FTC bans X-Mode from selling phone location data, and orders firm to delete collected data
The U.S. Federal Trade Commission has banned the data broker X-Mode Social from sharing or selling users’ sensitive location data, the federal regulator said Tuesday. The first of its kind settlement prohibits X-Mode, now known as Outlogic, from sharing and…
AI aides nation-state hackers but also helps US spies to find them, says NSA cyber director
Nation state-backed hackers and criminals are using generative AI in their cyberattacks, but U.S. intelligence is also using artificial intelligence technologies to find malicious activity, according to a senior U.S. National Security Agency official. “We already see criminal and nation…
GenAI could make KYC effectively useless
KYC, or “know your customer,” is a process intended to help financial institutions, fintech startups and banks verify the identity of their customers. Not uncommonly, KYC authentication involves “ID images,” or cross-checked selfies used to confirm a person is who…
Gen AI could make KYC effectively useless
KYC, or “Know Your Customer,” is a process intended to help financial institutions, fintech startups and banks verify the identity of their customers. Not uncommonly, KYC authentication involves “ID images,” or cross-checked selfies used to confirm a person is who…
LoanDepot hit by suspected ransomware attack
Mortgage and loan giant LoanDepot said Monday it is experiencing a cyberattack and that it’s “working diligently to restore normal business operations as quickly as possible.” The Irvine, Calif.-based company said in a brief statement on its cybersecurity incident page…
SentinelOne acquires Peak XV-backed PingSafe for over $100 million
SentinelOne’s deal to acquire PingSafe valued the Peak XV-backed young startup at over $100 million, two sources familiar with the matter told TechCrunch, in one of the strongest and fastest deals emerging from India. The New York Stock Exchange-listed AI…
Law firm that handles data breaches was hit by data breach
An international law firm that works with companies affected by security incidents has experienced its own cyberattack that exposed the sensitive health information of hundreds of thousands of data breach victims. San Francisco-based Orrick, Herrington & Sutcliffe said last week…
Software supply chain security remains a challenge for most enterprises
Log4j, maybe more than any other security issue in recent years, thrust software supply chain security into the limelight, with even the White House weighing in. But even though virtually every technology executive is at least aware of the importance…
Crypto losses declined over 50% in 2023
The total amount “lost” during 2023 from security incidents was almost $2 billion. © 2023 TechCrunch. All rights reserved. For personal use only. This article has been indexed from Security News | TechCrunch Read the original article: Crypto losses declined…
23andMe tells victims it’s their fault that their data was breached
Facing more than 30 lawsuits from victims of its massive data breach, 23andMe is now deflecting the blame to the victims themselves in an attempt to absolve itself from any responsibility, according to a letter sent to a group of…
Cloud-native cybersecurity startup Aqua Security raises $60M and remains a unicorn
Aqua Security, an Israeli cybersecurity startup that helps companies protect their cloud services, has raised $60 million in funding, extending its previously announced $135 million Series E round of funding to $195 million. Founded in 2015, Tel Aviv- and Boston-based…
It’s not all doom and gloom: When cybersecurity gave us hope in 2023
A funny — but true — joke at TechCrunch is that the security desk might as well be called the Department of Bad News, since, well, have you seen what we’ve covered of late? There is a never-ending supply of…