government healthcare social media service provider fine education finance dark web retail law enforcement web telecoms travel manufacturing phama operating system insurance charity legal app tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents Trojans financial inside job spear phishing RDP skimming spyware
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day state hacking 3rd parties employee data remote working stolen data

Proof of concept code published for latest Saltstack CVE: Don't be an update laggard • The Register
Microsoft promises end-to-end encrypted Teams calls for some, invites you to go passwordless with Azure AD • The Register
How Gootkit trojan distributes ransomware via Google SERPs
Cybersecurity Trends and Emerging Threats in 2021
Vulnerabilities in Smarty PHP template engine renders popular CMS platforms open to abuse | The Daily Swig
Gootkit malware crew using SEO to get pwned websites in front of unwitting marks • The Register
I-DE Redes Eléctricas Inteligentes, S.A.U fined 200,000 Euros for breaching Art. 5 (1) b), c) GDPR, Art. 6 (1) b) GDPR - Non-compliance with general data processing principles
Registrų Centras fined 15,000 Euros for breaching Art. 32 (1) b), c) GDPR - Insufficient technical and organisational measures to ensure information security
Unknown fined 9,000 Euros for breaching Art. 6 GDPR, Art. 13 GDPR - Insufficient legal basis for data processing
Undisclosed company fined 24,400 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
CVE-2020-3992-CVE-2021-21974
Malicious NPM packages target Amazon, Slack with new dependency attacks
New nation-state cyberattacks - Microsoft On the Issues
Israeli spyware firm NSO Group faces renewed US scrutiny | Surveillance | The Guardian
Critical vulnerability found in Snow Software's Inventory Agent
Malware attack that crippled Mumbai's power system came from China, claims infosec intel outfit Recorded Future • The Register
'Incorrect software parameter' sends Formula E's Edoardo Mortara to hospital: Brakes' fail-safe system failed • The Register
IT sprendimai sėkmei fined 3,000 Euros for breaching Art. 5 (1), (2) GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 32 GDPR, Art. 35 GDPR, Art. 58 (2) f) GDPR - Non-compliance with general data processing principles
Nacionaliniam visuomenės sveikatos centrui (NVSC) fined 12,000 Euros for breaching Art. 5 (1), (2) GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 32 GDPR, Art. 35 GDPR, Art. 58 (2) f) GDPR - Non-compliance with general data processing principles
Arizona Complete Health (AzCH) received information that one of our business partners was a victim of a cyber-attack.
Nginx: Server misconfigurations found in the wild that expose websites to attacks | The Daily Swig
10,000 mailboxes hit in phishing attacks on FedEx and DHL Express
How to Avoid Phishing Emails and Scams | WIRED
Toledo Public School students seeing effects of massive data breach
Notice of Data Security Incident | Covenant HealthCare
March 1, 2021: Deadline for Reporting 2020 Small Healthcare Data Breaches
Istituto Nazionale Previdenza Sociale (INPS) fined 300,000 Euros for breaching Art. 5 (1) a), c), d) GDPR, Art. 25 GDPR, Art. 35 GDPR - Non-compliance with general data processing principles
Hackers share details of Canadian military spy plane on dark web | The Independent
How to Scan your WordPress Website for Hidden Malware | Elegant Themes Blog
NPower cyber attack - customers warned personal details may have been breached - Mirror Online
We asked, you told us: Most of you are ditching LastPass after changes
Web Apps Can Interact With Your Filesystem Now – CloudSavvy IT
Cyberattacks Launch Against Vietnamese Human-Rights Activists | Threatpost
Alert (AA21-055A) Exploitation of Accellion File Transfer Appliance
Insider Cloud Data Theft Plagues Healthcare Sector - Infosecurity Magazine
Indian Army probes alleged data breach in Northern Command amid border tensions
Lazarus targets defense industry with ThreatNeedle | Securelist
Ransomware attacks fuelled increase in data theft in 2020, says IBM Security | News | GRC World Forums
Morgan County, Missouri: DoppelPaymer publishes the first data stolen during the cyber attack
Oxford University Covid-19 laboratory hacked by cyber gang