Company unnecessarily collected consumers’ personal data and failed to safeguard it, suit alleges, leading to two back-to-back data breaches.

from Dark Reading https://ift.tt/WxHAM0y
via IFTTT

Many enterprise applications are built outside of IT, but we still treat the platforms they’re built with as point solutions.

from Dark Reading https://ift.tt/NzSZK0g
via IFTTT

Slack, Docker, Kubernetes, and other applications that allow developers to collaborate have become the latest vector for software supply chain attacks.

from Dark Reading https://ift.tt/UNTtshr
via IFTTT

The ongoing ad fraud campaign can be traced back to 2019, but recently expanded into the iOS ecosystem, researchers say.

from Dark Reading https://ift.tt/NxFuQi6
via IFTTT

CISA says the flaw poses “significant risk” to federal government, adding the Zoho ManageEngine RCE vulnerability to its Known Exploited Vulnerabilities Catalog.

from Dark Reading https://ift.tt/TRBL5PI
via IFTTT

Cybercriminals took control of enterprise Exchange Servers to spread large amounts of spam aimed at signing people up for bogus subscriptions.

from Dark Reading https://ift.tt/4EVlzwX
via IFTTT

Manufacturers need to document a medical device’s intended use and operational environment, as well as plan for misuse, such as a cyberattack.

from Dark Reading https://ift.tt/0aHjoOt
via IFTTT

From creating a software bill of materials for applications your company uses to supporting open source projects and maintainers, businesses need to step up their efforts to help reduce risks.

from Dark Reading https://ift.tt/hMANwoB
via IFTTT

With the update, Microsoft adds features to allow easier deployment of zero-trust capabilities. Considering the 1.3 billion global Windows users, the support could make a difference.

from Dark Reading https://ift.tt/g0oWaw9
via IFTTT

Protecting against risk is a shared responsibility that only gets more complex as you mix the different approaches of common cloud services.

from Dark Reading https://ift.tt/tPwWGKo
via IFTTT