Password manager Dashlane says hackers stole some customers’ password vaults
The password manager giant said hackers were able to ‘brute-force’ its two-factor system, allowing them to access customer accounts and download their password vaults.
A security lapse at prison payphone service Pay Tel publicly exposed over 300K callers’ driver’s licenses
Pay Tel secured the publicly exposed data after security researchers discovered the leak containing callers’ sensitive ID documents and inmate communications.
U.S. says troops were targeted with location data, as senator warns ad industry is a ‘national security threat’
One leading privacy lawmaker said it was time to “start treating the adtech industry as a national security threat.”
UK Visa Portal exposed thousands of applicants’ passports and selfies — then called the lawyers on us
The third-party website exposed passports, selfies, and the location data of applicants who submitted their documents as part of the U.K. visa application process. Instead of fixing the issue, the website sent attorneys.
Dutch government blocks US company from acquisition, citing ‘risk to public interest’
The move to block the acquisition of the cloud company that hosts the Dutch digital ID service comes as Europe continues to reduce its reliance on U.S. technology.
7-Eleven data breach affects over 185,000 people’s personal data
The data breach included names, dates-of-birth, postal addresses, and Social Security numbers, according to a state government listing.
Scammers are abusing an internal Microsoft account to send spam links
The loophole allows spammers and scammers to send emails from a legitimate Microsoft email address typically used for sending genuine account alerts.
GitHub says hackers stole data from thousands of internal repositories
The code hosting giant GitHub said it was investigating a breach, but said there was no evidence of customer data theft.
Discord enables end-to-end encrypted voice and video calling for every user
Good news! Discord’s hundreds of millions of users now have their communications scrambled, so not even Discord can see them.
US cyber agency CISA exposed reams of passwords and cloud keys to the open web
The federal cybersecurity agency left plaintext passwords in a spreadsheet uploaded to a public GitHub repository, per a report by independent journalist Brian Krebs.