Data Security

Approval has been given by the Senate to legislation that would extend Section 702 of the Foreign Intelligence Surveillance Act for another two years, which headed to the desk of President Joe Biden just minutes after the surveillance law expired, reports CyberScoop.

Washington, D.C.'s Department of Insurance, Securities and Banking has disclosed that 800GB of data claimed to have been stolen by the LockBit ransomware operation was obtained from an attack against third-party software provider Tyler Technologies following the ransomware gang's threats to expose 1GB of the exfiltrated data to coerce the agency into providing the demanded ransom, reports The Record, a news site by cybersecurity firm Recorded Future.

Information-stealing trojan RedLine Stealer has gained a more advanced variant leveraging the Lua bytecode and spoofing game cheats to facilitate increased stealth, The Hacker News reports.

Ransomware operation HelloKitty has coincided its rebranding to HelloGookie with the publication of internal Cisco network data exfiltrated from a 2022 attack, exfiltrated source code for several CD Projekt Red games from a 2021 attack, and four private decryption keys for other intrusions that involved an older iteration of its ransomware encryptor, according to BleepingComputer.

Hackers claim to have obtained the records by breaching a third party with access to the database.

More protections against data brokers were urged by lawmakers and data privacy experts to be added to the draft American Privacy Rights Act, which would only allow the deletion of consumer data provided that individual requests are made to the data brokers, reports The Record, a news site by cybersecurity firm Recorded Future.

The House has approved the bipartisan Fourth Amendment Is Not For Sale Act, which seeks to bolster data privacy protections by prohibiting the warrantless acquisition of electronic and remote computing service providers' customer information among law enforcement and intelligence agencies, according to CyberScoop.