Rosen Hotels & Resorts announces data breach
News 6 learned on Tuesday a data breach at Orlando-based Rosen Hotels & Resorts may have compromised payment cards used at the hotels by guests as far back as 2014. Read…
Most cloud providers not protecting users against DROWN threat
One week after the critical vulnerability in SSL/TLS named DROWN was disclosed, Skyhigh Cloud Security Labs has found that 620 cloud services remain vulnerable to compromise. Read more here
SSL ‘DROWNs’ In Yet Another Serious Security Flaw
Millions of SSL servers vulnerable to newly discovered attack that breaks encryption and exposes communication and information in Web and email servers and VPNs. Read more here
IRS: Remember That 100,000 Taxpayers Data Breach? It Was Actually 700,000
The US Internal Revenue Service (IRS) has announced that the data breach from last May was actually seven times larger than initially estimated and that the service has taken all…
Data breach affects 80,000 UC Berkeley faculty, students and alumni
A hacker broke into the University of California, Berkeley computer system holding financial data of 80,000 students, alumni, current and former employees, school officials said Friday. Read more here
90 Percent of All SSL VPNs Use Insecure or Outdated Encryption
Information security firm High-Tech Bridge has conducted a study of SSL VPNs (Virtual Private Networks) and discovered that nine out of ten such servers don't provide the security they should…
Squid vulnerability allows remote attackers to launch DoS attacks
Squid, a Unix-based caching proxy, patched a handling server error. The vulnerability (CVE-2016-2390) allowed remote attackers to launch a denial-of-service (DoS) attack when connected to TLS or SSL servers. The…
OpenSSL patches flaw that exposes an encryption key
The OpenSSL project issued an update to patch a vulnerability that would allow a malicious remote user to obtain a decryption key enabling them to learn sensitive information. Read more…
Data breach lawsuits indicate a troubling trend for enterprises
A number of recent enterprise data breaches have resulted in class-action lawsuits, and those data breach lawsuits have revealed a troubling trend about the rising costs of security failures in…
State attorney general releases Data Breach Report; more than 49 million records compromised
California Attorney General Kamala Harris on Tuesday addressed the Stanford Cyber Initiative to release a comprehensive report detailing the nature of data breaches reported to her office over the past…