Similar Posts
UK Government Pressures Apple for Backdoor Access to Encrypted Cloud Data: Latest Report
The UK government has requested Apple to create a backdoor for accessing encrypted iCloud data, raising major concerns about user privacy and data security. This demand, made under the Investigatory Powers Act 2016, seeks blanket access to all end-to-end encrypted files globally, not just specific accounts. As a result, Apple may consider discontinuing its Advanced Data Protection service in the UK. The tech giant has historically opposed backdoors, citing risks to user data and increased hacking threats. The situation highlights ongoing debates over digital privacy and government surveillance, potentially impacting user confidence in cloud services.
UK Domain Leader Nominet Reports Cybersecurity Breach Tied to Ivanti VPN Vulnerabilities
Nominet, the U.K. domain registry managing .co.uk domains, is dealing with a significant cybersecurity incident linked to a vulnerability in Ivanti’s VPN software. Hackers accessed Nominet’s systems via this third-party VPN, exploiting a zero-day vulnerability before Nominet could implement security patches. Although Ivanti has not disclosed the number of affected customers, cybersecurity experts report widespread compromises among various organizations. Nominet has restricted VPN access and is investigating the incident while assuring customers that there is currently no evidence of data breaches. They are monitoring their systems and updating stakeholders throughout the investigation.
PowerSchool Pays Ransom to Hacker: Schools Now Face Ongoing Extortion Threat
PowerSchool, a prominent education software provider, is grappling with new extortion threats following a significant data breach that occurred in December 2024. Hackers accessed sensitive information, including personal and health data of students and teachers, impacting over 60 million users across North America. Recently, the Toronto District School Board received ransom demands linked to this breach, with additional reports from school districts in North Carolina. Despite paying a ransom to delete the stolen data, PowerSchool confirmed that extortion attempts are based on previously compromised information. This incident underscores the urgent need for improved cybersecurity in educational institutions.
Senator Blocks Trump’s CISA Director Nominee Over Telecom Security ‘Cover-Up’ Concerns
Democratic Senator Ron Wyden has placed a hold on Sean Plankey’s nomination as director of the Cybersecurity and Infrastructure Security Agency (CISA) due to concerns over a “multi-year cover-up” of security flaws in U.S. telecommunications. Wyden demands the release of a 2022 unclassified report detailing these vulnerabilities before supporting Plankey. He emphasizes the public’s right to know about critical telecom security issues, especially in light of the Salt Typhoon hacking incidents linked to Chinese spies. Wyden has introduced legislation for minimum cybersecurity standards for phone companies, highlighting the urgent need for accountability in the sector.
SGNL Secures $30M Investment to Revolutionize ID Security with Zero-Standing Privileges
Startup SGNL has raised $30 million in a Series A funding round led by Brightmind Partners, with participation from Microsoft and Cisco Investments, bringing its total funding to $42 million. SGNL focuses on identity security, employing a zero-standing privilege model for user access management to combat vulnerabilities from leaked credentials. Co-founded by former Google executives Scott Kriz and Erik Gustavson, SGNL aims to enhance identity management with innovative technology like the Continuous Access Evaluation Protocol (CAEP). The company has attracted major enterprise clients, streamlining access policies and improving security, while addressing risks highlighted by recent identity breaches.
New Victim Emerges: Paragon Spyware Strikes Again!
Beppe Caccio, co-founder of Mediterranea Saving Humans, has revealed he was targeted in a spyware campaign linked to the Israeli company Paragon, following a similar disclosure by colleague Luca Casarini. Both activists received notifications from WhatsApp about the attacks, raising concerns over privacy and safety. Casarini has filed a complaint with the Prosecutor’s Office in Palermo to identify those responsible. Previous victims include journalist Francesco Cancellato and Libyan activist Husam El Gomati. Despite the Italian government’s denial of involvement, the campaign reportedly targeted around 90 individuals across multiple countries. Investigations are ongoing, with Paragon and the government yet to respond.