SecurityWeek

As US lawmakers head home without agreeing on consumer privacy legislation, a new California law is set to become the de facto national standard, potentially leaving consumers and businesses confused over rules for personal data collection and protection.

California-based burger chain Islands Restaurants recently informed customers that it had identified a piece of malware on the point-of-sale (PoS) systems used for payment card transactions at its restaurants.

An Elasticsearch cluster containing information on Honda owners in North America was recently found to be accessible from the Internet without any authentication.Discovered on December 11, 2019, by security researcher Bob Diachenko, the database was part of Honda North America infrastructure and it contained 976 million records.

A vulnerability in the Twitter application for Android could have been exploited by hackers to obtain sensitive information or take control of accounts.

RavnAir canceled at least a half-dozen flights in Alaska on Saturday — at the peak of holiday travel — following what the company described as “a malicious cyber attack” on its computer network.The cancellations affected around 260 passengers, according to company spokeswoman Debbie Reinwand.

Cisco has warned customers that a vulnerability patched last year in its Adaptive Security Appliance (ASA) and Firepower Appliance products continues to be targeted by hackers.

Greece's justice ministry has decided to extradite to France Russian Alexander Vinnik, who allegedly headed the bitcoin exchange BTC-e, on suspicion of money laundering, a ministry source said Friday.

Apple this week kicked off its public bug bounty program, just over four months after announcing it officially at the Black Hat cybersecurity conference in Las Vegas.

An unprotected Elasticsearch database that was accessible from the Internet was recently found to store information on over 267 million Facebook users, according to tech website Comparitech.

Facial recognition systems can produce wildly inaccurate results, especially for non-whites, according to a US government study released Thursday that is likely to raise fresh doubts on deployment of the artificial intelligence technology.

A former contractor of British low-cost airline Jet2 has been sentenced to 10 months in prison for a cyberattack that shut down the airline’s systems for over 12 hours, the UK’s National Crime Agency (NCA) announced on Thursday.

Six years into running the Patch Rewards Program to help improve the security of open source projects, Google has decided to provide upfront financial support for such initiatives.

The Wawa convenience store chain says a data breach may have collected debit and credit card information from thousands of customers.

F5 Networks announced on Thursday that it has agreed to acquire privately held Shape Security for approximately $1 billion in cash.

Evaldas Rimasauskas, a Lithuanian national involved in a highly profitable business email compromise (BEC) scheme that targeted Google and Facebook, has been sentenced to 5 years in prison, the U.S. Department of Justice announced on Thursday.

Whether It’s Stealing Your Information or Selling it Online, the Holidays are a Bonanza for Cybercriminals

Cyprus on Thursday arrested three people in connection with an alleged Israeli-owned "spy van" equipped with sophisticated surveillance technology capable of hacking communications, police said.

It may surprise you to learn that individuals under the age of 30, often referred to as “digital natives”, are less likely to adopt cybersecurity best practice than those over the age of 30 with “acquired digital DNA”. That’s according to a recent report commissioned by NTT that involved 2,256 organizations in 17 sectors across 20 countries. For security professionals, the good news is that all that work raising awareness for cybersecurity and educating employees has paid off.

A UK national suspected of being a member of the notorious hacker group called The Dark Overlord has been extradited to the United States, the U.S. Department of Justice announced on Wednesday.

Drupal developers on Wednesday announced the release of versions 7.69, 8.7.11 and 8.8.1, which address several vulnerabilities, including a potentially serious file processing issue.