government
healthcare
social media
service provider
fine
education
finance
dark web
retail
law enforcement
web
telecoms
travel
manufacturing
phama
operating system
insurance
legal
charity
app
tech
gaming
transport
publishing
utilities
story
hacked
malware
unauthorised access
ransomware
vulnerability
accidental disclosure
phishing
unsecured database
poor security
insider threat
unsecured server
hacked email
lost device
website hacked
identity theft
ddos
stolen documents
Trojans
financial
inside job
spear phishing
RDP
spyware
skimming
cyber attack
privacy
breach notification
security flaw
legislation
poor operations
user credentials
physical security
customer data
third party
Cryptocurrency
enforcement
email hacked
insecure storage
court action
encryption
VPN
fraud
passwords
zero day
3rd parties
state hacking
remote working
stolen data
cloud
Cypriot Real Estate Registration Authority fined 10,000 Euros for breaching Art. 12 GDPR, Art. 15 GDPR, Art. 31 GDPR, Art. 58 (1) e) GDPR - Insufficient fulfilment of information obligations
Hellenic Bank fined 25,000 Euros for breaching Art. 5 (1) e), f) GDPR, Art. 32 (1) b), c) GDPR, Art. 33 (1) GDPR - Insufficient technical and organisational measures to ensure information security
Private Individual fined 200 Euros for breaching Art. 5 GDPR, Art. 32 GDPR - Non-compliance with general data processing principles
Ursnif Trojan has targeted over 100 Italian banks | ZDNet
Microsoft accuses China over email cyber-attacks - BBC News
Brave buys a search engine, promises no tracking, no profiling – and may even offer a paid-for, no-ad version • The Register
Unpatched Bug in WiFi Mouse App Opens PCs to Attack | Threatpost
Researcher finds 5 privilege escalation vulnerabilities in Linux kernel
Bournemouth residents advised to look out for Bluetooth malware | Bournemouth Echo
Hackers share methods to bypass 3D Secure for payment cards
Proof of concept code published for latest Saltstack CVE: Don't be an update laggard • The Register
Microsoft promises end-to-end encrypted Teams calls for some, invites you to go passwordless with Azure AD • The Register
How Gootkit trojan distributes ransomware via Google SERPs
Cybersecurity Trends and Emerging Threats in 2021
Vulnerabilities in Smarty PHP template engine renders popular CMS platforms open to abuse | The Daily Swig
Gootkit malware crew using SEO to get pwned websites in front of unwitting marks • The Register
I-DE Redes Eléctricas Inteligentes, S.A.U fined 200,000 Euros for breaching Art. 5 (1) b), c) GDPR, Art. 6 (1) b) GDPR - Non-compliance with general data processing principles
Registrų Centras fined 15,000 Euros for breaching Art. 32 (1) b), c) GDPR - Insufficient technical and organisational measures to ensure information security
Unknown fined 9,000 Euros for breaching Art. 6 GDPR, Art. 13 GDPR - Insufficient legal basis for data processing
Undisclosed company fined 24,400 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
CVE-2020-3992-CVE-2021-21974
Malicious NPM packages target Amazon, Slack with new dependency attacks
New nation-state cyberattacks - Microsoft On the Issues
Israeli spyware firm NSO Group faces renewed US scrutiny | Surveillance | The Guardian
Critical vulnerability found in Snow Software's Inventory Agent
Malware attack that crippled Mumbai's power system came from China, claims infosec intel outfit Recorded Future • The Register
'Incorrect software parameter' sends Formula E's Edoardo Mortara to hospital: Brakes' fail-safe system failed • The Register
IT sprendimai sėkmei fined 3,000 Euros for breaching Art. 5 (1), (2) GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 32 GDPR, Art. 35 GDPR, Art. 58 (2) f) GDPR - Non-compliance with general data processing principles
Nacionaliniam visuomenės sveikatos centrui (NVSC) fined 12,000 Euros for breaching Art. 5 (1), (2) GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 32 GDPR, Art. 35 GDPR, Art. 58 (2) f) GDPR - Non-compliance with general data processing principles
Arizona Complete Health (AzCH) received information that one of our business partners was a victim of a cyber-attack.
Nginx: Server misconfigurations found in the wild that expose websites to attacks | The Daily Swig
10,000 mailboxes hit in phishing attacks on FedEx and DHL Express
How to Avoid Phishing Emails and Scams | WIRED
Toledo Public School students seeing effects of massive data breach
Notice of Data Security Incident | Covenant HealthCare
March 1, 2021: Deadline for Reporting 2020 Small Healthcare Data Breaches
Istituto Nazionale Previdenza Sociale (INPS) fined 300,000 Euros for breaching Art. 5 (1) a), c), d) GDPR, Art. 25 GDPR, Art. 35 GDPR - Non-compliance with general data processing principles
Hackers share details of Canadian military spy plane on dark web | The Independent
How to Scan your WordPress Website for Hidden Malware | Elegant Themes Blog
NPower cyber attack - customers warned personal details may have been breached - Mirror Online
