Legal News, Data Breach News
September 09, 2025
813 views 20 secs 0

Department of War Announces the Final Defense Federal Acquisition Regulation Supplement Rule Implementing the Cybersecurity Maturity Model Certification Program

From the U.S. Department of Defense, now called the Department of War: On September 9, the Department of War (DoW) released the final Defense Federal Acquisition Regulation Supplement (DFARS) rule implementing the Cybersecurity Maturity Model Certification (CMMC) Program as described at 32 CFR 170.3 for public inspection in the Federal Register.  The final rule will […]

Data Breach News, Vulnerabilities
September 09, 2025
293 views 21 secs 0

Brazil lesbian dating app shuts down after security flaw exposes sensitive user data

The Record reports: A Brazilian dating app marketed as a safe space for lesbian women shut down this week after several users uncovered a flaw that reportedly could expose sensitive data, including identity verification photos. Sapphos, which launched in early September, required users to verify their identity by submitting a selfie holding a government-issued ID. But on […]

Legal News, Data Breach News
September 09, 2025
828 views 15 secs 0

Trump Cuts Imperil Private Sector Cybersecurity Cooperation

From Bloomberg Law: Companies are facing the risk that they will be left alone to fend off cyber attacks. Even as authorities warn of relentless cyber threats, a key tool companies use to safely share information with other businesses and the government is set to expire. Meanwhile, the Cybersecurity and Infrastructure Security Agency, the federal body […]

Data Breach News, Malware Ransomware, News
September 09, 2025
832 views 36 secs 0

18 Popular Code Packages Hacked, Rigged to Steal Crypto

KrebsOnSecurity reports: At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved in maintaining the projects was phished. The attack appears to have been quickly contained and was narrowly focused on stealing cryptocurrency. But experts warn […]

Data Breach News, Vulnerabilities
September 07, 2025
931 views 24 secs 0

Burger King hacked, systems described as ‘solid as a paper Whopper wrapper in the rain’; Tim Hortons and Popeyes hacked too

What happens when you don’t acknowledge ethical hackers? Sometimes nothing, but sometimes you get a lot of negative coverage. Tom’s Hardware reports: Ethical hackers BobDaHacker and BobTheShoplifter have detailed their claim that they uncovered “catastrophic” vulnerabilities in multiple platforms hosted by Restaurant Brands International (RBI). While RBI may not be a very familiar name, this […]

News, Data Breach News, Legal News
September 05, 2025
1051 views 2 mins 0

Texas sues PowerSchool For Data Breach That Com­pro­mised the Per­son­al Infor­ma­tion of Over 880,000 Texas School-Aged Chil­dren and Teachers

From Texas Attorney General Ken Paxton: Attorney General Ken Paxton filed suit against PowerSchool, a California-based provider of cloud-based services for K-12 schools, after an unprecedented data breach exposed the sensitive personal identifying information and protected health information of more than 880,000 Texas school-aged children and teachers. PowerSchool’s software collects, processes, and secures sensitive information […]

Data Breach News, Vendor News
September 04, 2025
992 views 16 secs 0

Cloudflare Confirms Data Breach – Customer Data Exposed via Salesforce Attack

GBHackers reports: Cloudflare has disclosed a significant data breach affecting customer information following a sophisticated supply chain attack targeting its Salesforce integration with Salesloft Drift. The incident, which occurred between August 12-17, 2025, resulted in the exposure of customer support case data and potentially sensitive credentials shared through support channels. The cybersecurity company became aware […]

Data Breach News, Healthcare
September 04, 2025
902 views 44 secs 0

Dutch Lab Cancer Screening Hack Balloons to 941,000 Victims

BankInfoSecurity reports: With ransomware gang Nova threatening to leak patient data on the darkweb, a Dutch laboratory that performs cervical cancer tests for a government screening program is mum about the ransom negotiations, but it says the cyberattack in July has affected 941,000 patients – nearly double the initial estimate of 485,000 people. Bevolkingsonderzoek Nederland, […]

Legal News, Data Breach News
September 03, 2025
976 views 35 secs 0

More Personal Injury Lawyers Are Chasing Data-Breach Settlements

“U.S. lawyers filed 1,488 class-action lawsuits related to data breaches in 2024, up from 1,320 in 2023 and just 604 in 2022.” The Wall Street Journal reports: A growing number of personal injury lawyers are adding data-breach lawsuits to caseloads, alongside traffic accidents, medical malpractice and dog bites.   The upswing is being fueled by a […]