-
A week in security (July 14 – July 20)
Last week on Malwarebytes Labs: Meta execs pay the pain away with $8 billion privacy settlement Adoption agency leaks over a million records Meta AI chatbot bug could have allowed anyone to see private conversations WeTransfer walks back clause that said it would train AI on your files Chrome fixes 6 security vulnerabilities. Get the…
-
vCISO, Done Right: MicroSolved’s Formula for Cybersecurity ROI
At MicroSolved, we don’t just offer virtual CISO (vCISO) services—we deliver tailored, deeply integrated security leadership that aligns precisely with your organization’s risk posture and regulatory obligations. Unlike one-size-fits-all models, our vCISO engagements begin with immersive understanding: of your business model, sector-specific compliance demands (think NCUA/FFIEC for credit unions, TISAX for auto suppliers, GDPR/SOC2 for…
-
Hijacking Discord invite links to install malware | Kaspersky official blog
Attackers hijack Discord invite links to redirect users to malicious servers and install AsyncRAT and Skuld Stealer. Attackers are using expired and deleted Discord invite links to distribute two strains of malware: AsyncRAT for taking remote control of infected computers, and Skuld Stealer for stealing crypto wallet data. They do this by exploiting a vulnerability…
-
Meta execs pay the pain away with $8 billion privacy settlement
Meta chief Mark Zuckerberg and several other members of the social media giant’s top brass agreed to settle increasingly heated privacy violation claims for the price of $8 billion. It is far from the first time that the company, its subsidiary Facebook, or its executives have responded to alleged user privacy violations with billions upon…
-
OffSec’s Take on the Global Generative AI Adoption Index
Discover OffSec’s take on the latest Global Generative AI Adoption Index report released by AWS. The post OffSec’s Take on the Global Generative AI Adoption Index appeared first on OffSec. Go to Source
-
Three Tips for a Better, Easier BIA Process
The ability to swiftly recover from disruptions can make or break an organization. A well-executed Business Impact Analysis (BIA) is essential for understanding potential threats and ensuring business resilience. However, navigating the complexities of a BIA can often feel daunting without a structured approach. Understanding the critical nature of refining the scope, enhancing data…
-
A New Era of Global Privacy Complexity
It’s no longer enough for CIOs to check boxes and tick off compliance milestones. The world has changed — and with it, the data privacy landscape. From the GDPR in Europe to California’s CCPA, and now Brazil’s LGPD and India’s DPDP, the patchwork of privacy laws continues to expand. What was once a series of…
-
Adoption agency leaks over a million records
Security researcher Jeremiah Fowler found a publicly accessible database online that contained highly personal information from an adoption agency. Jeremiah, who specializes in locating exposed cloud storage, is used to finding sensitive information exposed. However, because of the nature of the information, this one immediately raised his concern and he hurried to find out who…
-
How to protect yourself from Google Forms scams | Kaspersky official blog
We’re sharing a recent example of a scam using Google Forms and a way to completely avoid it. You’ve probably filled out a Google Forms survey at least once — likely signing up for an event, taking a poll, or gathering someone else’s contacts. No wonder you did — this is a convenient and easy-to-use…
-
CVE-2025-0655 – Remote Code Execution in D-Tale via Unprotected Custom Filters
A critical remote code execution (RCE) vulnerability in the D-Tale data visualization tool was identified which allowed attackers to execute arbitrary system exams, abusing an exposed API endpoint. The post CVE-2025-0655 – Remote Code Execution in D-Tale via Unprotected Custom Filters appeared first on OffSec. Go to Source