Security News

NSO Group Exploited WhatsApp to Install Pegasus Spyware Even After Meta's Lawsuit
2024-11-18 05:52

Legal documents released as part of an ongoing legal tussle between Meta's WhatsApp and NSO Group have revealed that the Israeli spyware vendor used multiple exploits targeting the messaging app...

23andMe settles class-action breach lawsuit for $30 million
2024-09-16 02:30

Also: Apple to end NSO Group lawsuit; Malicious Python dev job offers; Dark web kingpins busted; and more Infosec In Brief Genetic testing outfit 23andMe has settled a proposed class action case...

That cyber-heist of 2.9B personal records? There's a class-action lawsuit looming for that
2024-08-05 17:58

A lawsuit has accused a Florida data broker of carelessly failing to secure billions of records of people's private information, which was subsequently stolen from the biz and sold on an online criminal marketplace. California resident Christopher Hofmann filed the potential class-action complaint against Jerico Pictures, doing business as National Public Data, a Coral Springs-based firm that provides APIs so that companies can perform things like background checks on people and look up folks' criminal records.

Judge mostly drags SEC's lawsuit against SolarWinds into the recycling bin
2024-07-18 21:06

A judge has mostly thrown out a lawsuit brought by America's financial watchdog that accused SolarWinds and its chief infosec officer of misleading investors about its computer security practices and the backdooring of its Orion product. In a Thursday ruling [PDF], US federal district Judge Paul Engelmayer dismissed all of the so-called "Post-SUNBURST" claims the SEC levied against SolarWinds.

Merged Exabeam and LogRhythm cut jobs, face lawsuit
2024-07-17 23:27

Exabeam and LogRhythm - a pair of cyber security firms - finalized their merger on Wednesday, an occasion The Register understands was marked by swift job cuts and shareholder action to investigate the transaction. The merger of LogRhythm and Exabeam is a private transaction, and we will not be disclosing details on the value or structure of the deal.

New Lawsuit Attempting to Make Adversarial Interoperability Legal
2024-05-06 11:03

About Bruce Schneier I am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.

AT&T faces lawsuits over data breach affecting 73 million customers
2024-04-03 16:28

AT&T is facing multiple class-action lawsuits following the company's admission to a massive data breach that exposed the sensitive data of 73 million current and former customers. The lawsuit alleges that AT&T failed to adequately protect customers' personal data, leading to a cyberattack and subsequent data breach that exposed sensitive information for 73 million people.

Class-Action Lawsuit against Google’s Incognito Mode
2024-04-03 11:01

Google has agreed to delete "Billions of data records" the company collected while users browsed the web using Incognito mode, according to documents filed in federal court in San Francisco on Monday. The agreement, part of a settlement in a class action lawsuit filed in 2020, caps off years of disclosures about Google's practices that shed light on how much data the tech giant siphons from its users­-even when they're in private-browsing mode.

Google to Delete Billions of Browsing Records in 'Incognito Mode' Privacy Lawsuit Settlement
2024-04-02 07:08

Google has agreed to purge billions of data records reflecting users' browsing activities to settle a class action lawsuit that claimed the search giant tracked them without their knowledge or...

US to probe Change Healthcare's data protection standards as lawsuits mount
2024-03-14 14:03

Change Healthcare is being investigated over the alleged 6 TB data theft by the ALPHV ransomware group as it continues recovery efforts. The US Department of Health and Human Services Office for Civil Rights wrote to the healthcare IT company this week informing it that a formal inquiry into its data protection practices will soon begin.