Explore

TrendlineTrendline
Atlassian Guard Premium Enhances Data Loss Prevention for Jira and Confluence Cloud

Atlassian Guard Premium Enhances Data Loss Prevention for Jira and Confluence Cloud

Atlassian Guard Premium Enhances Data Loss Prevention for Jira and Confluence Cloud
Rapid ReadRapid Read
University of Maryland Study Reveals Privacy Risks in Multi-App Messaging Habits

University of Maryland Study Reveals Privacy Risks in Multi-App Messaging Habits

A new study by the University of Maryland (UMD) and the Korea Advanced Institute of Science and Technology (KAIST) has uncovered significant privacy risks associated with users juggling multiple messaging applications. Researchers, including Yonghwi Kwon from UMD, demonstrated how seemingly isolated pieces of metadata across platforms like Telegram, WhatsApp, Tinder, and KakaoTalk can be chained together to reveal real identities and pinpoint physical locations. This is achieved without breaking encryption or reading private messages. The study, titled 'Connecting the Dots: An Investigative Study on Linking Private User Data Across Messaging Apps,' was presented at the 2026 Network and Distributed System Security (NDSS) Symposium. The team found that security protections within one platform can be undermined by permissive defaults on another, especially when users reuse identifiers like phone numbers or photos across different accounts. Following the disclosure of these findings, affected platforms updated...
TrendlineTrendline
AI Chatbot Security Testing Becomes Critical for U.S. Businesses Amid Rising Vulnerabilities

AI Chatbot Security Testing Becomes Critical for U.S. Businesses Amid Rising Vulnerabilities

AI Chatbot Security Testing Becomes Critical for U.S. Businesses Amid Rising Vulnerabilities
FactFableFactFable
How SFTP Quietly Underpins Modern Networks

How SFTP Quietly Underpins Modern Networks

It's the unsung hero of secure data transfer. Discover what SFTP is, how it works, and why this decades-old protocol is still a critical part of modern digital infrastructure.
TrendlineTrendline
theCUBE Research Releases Hyperscaler Buyer's Guide, Highlighting US CLOUD Act's Impact on Data Sovereignty

theCUBE Research Releases Hyperscaler Buyer's Guide, Highlighting US CLOUD Act's Impact on Data Sovereignty

theCUBE Research Releases Hyperscaler Buyer's Guide, Highlighting US CLOUD Act's Impact on Data Sovereignty
Rapid ReadRapid Read
Uber Technologies Investigated for Data Breach Exposing Personal Information

Uber Technologies Investigated for Data Breach Exposing Personal Information

Federman & Sherwood is investigating a data breach involving Uber Technologies, Inc., according to a notice filed with the California Attorney General. An unauthorized third party gained access to personal information through Uber’s account with a service provider. The incident began on October 9, 2026, when the service provider notified Uber that its internal credentials had been compromised, leading to unauthorized access to Uber’s account. Uber promptly severed its data connections with the provider and initiated an investigation. By October 13, 2026, Uber confirmed that the unauthorized party had accessed Uber data linked to the service provider, which included personal information of affected individuals. While Uber’s notification letter, dated November 10, 2026, did not specify the exact categories of personal information affected in the publicly available sample, it indicated that potentially compromised data could include names, Social Security numbers, financial information, and other sensitive de...
Rapid ReadRapid Read
EU Digital Identity Wallets Raise Privacy Concerns Over Tracking Risks

EU Digital Identity Wallets Raise Privacy Concerns Over Tracking Risks

The European Union is preparing to roll out digital identity wallets, a key component of the European Digital Identity Regulation, by the end of the year. These wallets are designed to securely store personal identifying information such as bank account details, diplomas, and government IDs like driver's licenses. However, cryptographers are expressing concerns that the current implementation of these digital wallets could inadvertently create 'cryptographic clues' that enable tracking of individuals across various services. While the regulation mandates 'selective disclosure,' allowing users to share only necessary attributes (e.g., confirming age without revealing full name), experts warn that underlying digital signatures and identifiers could still be used to link interactions. This potential for tracking raises questions about the privacy protections afforded by the new system, with some cryptographers suggesting that the technology may not be advanced enough to prevent such issues without further enh...
Rapid ReadRapid Read
HHS FedHub Integrates ID.me for Secure Identity Verification for Work Access

HHS FedHub Integrates ID.me for Secure Identity Verification for Work Access

The Department of Health & Human Services (HHS) FedHub has partnered with ID.me to provide secure identity verification for work-related access. ID.me, certified against federal standards, ensures that individuals logging into HHS applications are who they claim to be, thereby enhancing security and preventing unauthorized access. This integration requires users to set up an ID.me Wallet and link it to their FedHub account. The process involves creating an ID.me Wallet, adding the FedHub work email as the default email, and then verifying identity through self-service, video call, or in-person methods. Users must also set up multi-factor authentication (MFA) and consent to share their verified identity information with FedHub. This system is specifically for work purposes, with separate instructions provided for personal use of HHS applications or access to the National Practitioner Data Bank (NPDB).
Rapid ReadRapid Read
Biometric Authentication Utilized for Enhanced Security in Digital Transactions and Device Access

Biometric Authentication Utilized for Enhanced Security in Digital Transactions and Device Access

Biometric authentication is a security method that verifies a user through unique physical or behavioral traits, such as fingerprints or face scans. This technology is increasingly being adopted to unlock devices, approve sign-ins, and verify purchases, including those made through platforms like Google Play. When a user enrolls, the system captures a sample of their biometric data, extracts distinguishing features, and creates an encrypted mathematical template stored securely on the device. During subsequent authentication attempts, a sensor captures a fresh sample and compares it to the stored template. If the similarity score meets a predefined threshold, access is granted. This method is designed to improve convenience and security by reducing reliance on traditional passwords, which are prone to reuse and forgetting. However, it requires robust privacy controls, liveness checks to prevent spoofing, and secure fallback sign-in methods.
Rapid ReadRapid Read
ULS Mandates International Travel Reporting for Account Holders to Combat Cyber Threats

ULS Mandates International Travel Reporting for Account Holders to Combat Cyber Threats

ULS is now requiring all account holders to report their international travel dates and destinations in advance. This new mandate is a direct response to the increasing frequency and sophistication of cyberattacks targeting institutions. ULS IT systems experience an average of 87 failed login attempts from overseas locations daily, with numbers sometimes reaching hundreds. The institution emphasizes that a single compromised account can jeopardize both individual information and the broader ULS systems. By knowing when community members are legitimately accessing their accounts from abroad, ULS IT can better differentiate authorized activity from potential security threats. Failure to report international travel may result in an account being locked until ULS IT can verify the activity's legitimacy through direct contact with the account holder. This requirement applies to all individuals with a ULS-issued account, including those sponsoring or leading international trips, who must ensure all participants ...
Rapid ReadRapid Read
South Korea's Financial Security Institute Reports Data Breach After Cyberattack

South Korea's Financial Security Institute Reports Data Breach After Cyberattack

South Korea's Financial Security Institute (FSI) has reported a data breach following a cyberattack on its security assessment system. The institute detected unauthorized external access on Monday, November 9, and promptly blocked the compromised system. The breach reportedly exposed approximately 200 administrative documents, around 300 pieces of personal data including names and dates of birth, and about 350 user records. This sensitive information was stored on the FSI website, which is utilized for conducting security assessments of financial institutions. The FSI has since reported the incident to the Financial Services Commission (FSC) and the Korea Internet & Security Agency (KISA). Initial investigations suggest that the attacker attempted to evade access controls by repeatedly changing internet protocol (IP) addresses to make connections appear legitimate. This incident highlights growing concerns regarding the increasing frequency and sophistication of cyberattacks globally, emphasizing the need ...
Rapid ReadRapid Read
Germany to Launch d-you-Wallet for European Digital Identity in Early 2027

Germany to Launch d-you-Wallet for European Digital Identity in Early 2027

Germany is set to launch the d-you-Wallet, its government-issued wallet for the European Digital Identity (EUDI-Wallet), in early 2027. This digital wallet, accessible via smartphone, will enable users to verify their identity both online and in person, as well as securely receive, store, and present digital documents. The d-you-Wallet is designed to facilitate various interactions, including conducting business with government agencies online, opening bank accounts, and submitting supporting documents for applications. Users will retain control over which data they choose to share, as the use of the wallet is voluntary. Zittau/Görlitz University of Applied Sciences plans to integrate the d-you-Wallet for digital identity verification on its eCampus and for distributing various university documents directly to students' wallets. This initiative aims to provide a seamless and secure method for managing personal and official digital information.