Privacy

A report from Insikt Group has uncovered fresh infrastructure linked to spyware maker Candiru, indicating ongoing spyware operations tied to DevilsTongue malware, reports The Record, a news site by cybersecurity firm Recorded Future.

Chanel U.S. customer data stolen in Salesforce-linked breach tied to social-engineering attacks.

Forty percent of more than 500 data brokerage firms across California did not respond to requests for obtained user data, while most of the remaining firms made it difficult to access such information, indicating prevalent nonadherence to the state's Consumer Privacy Act that orders data brokers to comply with user opt-out or data deletion requests, CyberScoop reports.

More than 100 million records belonging to Swedish individuals and organizations between 2019 and 2024 have been inadvertently leaked by an unsecured Elasticsearch server, reports Cybernews.

A report by cybersecurity firm Lookout reveals that Chinese authorities are using a mobile forensics tool called Massistant to extract data from seized smartphones, according to The Hacker News.

Amazon-owned home security and smart home device manufacturer Ring has attributed the spike in unauthorized device logins worldwide in late May to a faulty backend update and not to a data breach, reports BleepingComputer.