State of Cybercrime12 Jul 2018

When Your Security Brain Never Runs Out Of Problems To Find

For years, technologists wondered why the law can’t keep pace with technology. Instead of waiting for the government to pass a regulation, should we enlist private companies to regulate?

However, in a recent interview with privacy and cybersecurity attorney Camille Stewart, she said that laws are built in the same way a lot of technologies are built: in the form of a framework. That way, it leaves room and flexibility so that technology can continue to evolve.

While technologists and attorneys continue that debate, the US Federal Trade Commission is hard at work. They recently announced, “If a company chooses to implement some or all of GDPR across their entire operations, and makes promises to U.S. consumers about their specific practices,” they must live up to those commitments, otherwise the FTC could initiate an enforcement action if the company does not comply with” the EU data protection promises for U.S. customers.

Episoder(214)

ShinyHunters Attacks The FBI

ShinyHunters claims it stole 2-3 TB of FBI data and shared a sample with researchers containing information on employees, applicants, and even family members. The FBI has acknowledged unauthorized act...

28 Sep 25min

Cl0p's Blueprint Heist

If your company runs PTC Windchill, Cl0p may already have your blueprints. Forty-plus companies. One unpatched hole in PTC's product lifecycle management software. A custom-built tool that CL0p used t...

12 Sep 29min

The Hugging Face Breach

Out of the sandbox and into the fire. During an OpenAI security evaluation, an AI agent escaped its test environment and breached Hugging Face in search of information that could help it complete its ...

15 Aug 27min

The Ransomware That Ran Itself

More from Varonis ⬇️ Visit our website: https://www.varonis.com LinkedIn: linkedin.com/company/varonis X/Twitter: x.com/varonis Instagram: instagram.com/varonislife Want to join us live? Save a seat h...

18 Jul 38min

Megalodon Poisons Github

12 Jun 29min

The Canvas Breach

19 Mai 29min

The Axios Supply Chain Attack

The Axios supply chain attack proves attackers don’t need vulnerabilities if they can hit the assembly line. By compromising a single npm maintainer account, they were able to slip a trojan into Axios...

10 Apr 43min

Salesforce Aura Data Theft

ShinyHunters has once again placed Salesforce customers in their crosshairs – this time abusing guest user misconfigurations in public-facing Experience Cloud sites. The group claims to have compromis...

20 Mar 29min