student data Teen Researcher Exposes Massive Flaws in Student Data Systems An 18-year-old security researcher uncovers severe vulnerabilities in popular school software, potentially exposing the data of over five million students and teachers.
aws Misconfigured AWS EBS Snapshots Expose Corporate Secrets to the Open Internet New research presented at Def Con reveals that companies inadvertently leave Amazon EBS snapshots public, exposing application keys, source code, and VPN configurations. These misconfigured cloud storage volumes act as digital keys to the kingdom for anyone on the internet.
robocalls Popular Robocall Blocking Apps Caught Sharing User Data Without Consent Security researchers discover that several top robocall-blocking applications secretly transmit personal and device data to third-party analytics firms before users even accept the privacy policies.
apple Apple Expands Bug Bounty Program, Offers Up to $1 Million for Flaws Apple is expanding its bug bounty program to cover macOS, watchOS, tvOS, and iCloud, offering rewards up to $1 million. The company also plans to provide researchers with special iPhones to aid in security testing.
warshipping Hackers Bypass Network Perimeters by Mailing Exploits Direct to Targets IBM security researchers reveal a technique called "warshipping" where attackers build cheap, cellular-connected devices and mail them to targets to infiltrate corporate Wi-Fi networks from the inside.
cybereason Cybereason Secures $200 Million from SoftBank to Expand Cybersecurity Platform Boston-based Cybereason raises $200 million in new funding from SoftBank to scale its machine learning endpoint security platform. The company plans to use the capital to boost global marketing and advance autonomous security research.
8chan Cybersecurity Provider Drops 8chan After El Paso Mass Shooting A cybersecurity firm terminates services for the online forum 8chan, cutting off the website's primary defense against cyberattacks following the deadly El Paso shooting.
poshmark Poshmark Investigates Data Breach Exposing 50 Million User Profiles Online clothing marketplace Poshmark confirms an unauthorized third party accessed user profile details, though financial data remains secure. The company is actively investigating the incident with outside experts.
stockx Sneaker Marketplace StockX Misleads Users Over Suspicious Security Reset StockX forces a widespread customer password reset due to suspicious activity, initially misleading users by claiming it is a routine system update. The billion-dollar company declines to answer questions about potential data compromises.
capital one Capital One Breach Exposes 100 Million Applications A massive Capital One data breach compromises the personal information of over 100 million Americans, prompting experts to urge immediate security precautions.
capital one Capital One Breach Exposes Personal Data of 100 Million People A massive cyberattack on Capital One compromises the sensitive personal information of approximately 100 million individuals in the United States and Canada.
faceapp Democratic National Committee Warns Campaigns Against Russian FaceApp The DNC urges political campaigns to delete the viral FaceApp over vague cybersecurity fears tied to its Russian origins. The warning highlights growing American skepticism toward foreign-developed technology and data privacy.
equifax Equifax Agrees to Historic $575 Million Settlement Over Massive 2017 Data Breach Equifax pays a massive $575 million penalty to resolve government probes into its 2017 data breach that exposes the personal information of millions of consumers. The settlement includes funds for consumer restitution and mandates strict security improvements.
onetrust Privacy Startup OneTrust Reaches $1.3 Billion Valuation in Massive Series A OneTrust raises $200 million to help businesses comply with strict online privacy laws like GDPR and CCPA. The three-year-old company plans to use the funds to expand globally and enhance its data protection technology.
capital one Capital One Reveals Massive Data Breach Affecting 106 Million People Capital One announces a major data security incident that exposes the personal information of approximately 106 million credit card applicants and customers. The FBI arrests the suspected perpetrator, and the bank confirms that no credit card account numbers or login credentials are compromised.