433 Central Ave., 4th Floor, St. Petersburg, FL 33701 | [email protected] | Office: (813) 563-2652

Samsung employees leaked corporate data in ChatGPT: report

Data privacy is a concern for companies with employees using ChatGPT’s web-based interface, as input data is used to train and improve the tool.
http://news.poseidon-us.com/Sm8GVK

Rilide browser extension steals MFA codes

Cryptocurrency thieves are targeting users of Chromium-based browsers – Google Chrome, Microsoft Edge, Brave Browser, and Opera – with an extension that steals credentials and can grab multi-factor authentication (MFA) codes. The malicious extension Dubbed Rilide by Trustwave researchers, the extension mimics the legitimate Google Drive extension while, in the background, it disables the Content Security Policy (CSP), collects system information, exfiltrates browsing history, takes screenshots, and injects malicious scripts. It aims to allow attackers … More → The post Rilide browser extension steals MFA codes appeared first on Help Net Security.
http://news.poseidon-us.com/Sm7c0z

Companies carry unquantified levels of risk due to current network security approaches

40% of senior cybersecurity decision makers effectively prioritize risks to Payment Card Industry Data Security Standard (PCI DSS) 4.0 compliance, according to Titania. The study highlights that oil and gas, telecommunications, and banking and financial services organizations are prime targets for threat actors that exploit vulnerable network device configurations to scale their attacks. It also reveals only 37% could ‘very effectively’ categorize and prioritize compliance risks that undermine the security of their networks. Network misconfigurations … More → The post Companies carry unquantified levels of risk due to current network security approaches appeared first on Help Net Security.
http://news.poseidon-us.com/Sm6Yz8

ISC Stormcast For Friday, April 7th, 2023 https://isc.sans.edu/podcastdetail.html?id=8444, (Fri, Apr 7th)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
http://news.poseidon-us.com/Sm6Wtk

Google Play apps will allow users to initiate in-app account deletion

Google Play will be pushing Android app developers to allow users to delete their account and associated data from within the app. Users will also be given the option to only delete data where applicable, as some data needs to be retained for security, fraud prevention, or regulatory reasons. Google’s new app account and data deletion requirements Google Play has introduced new app account deletion requirements and added Data deletion questions to developers’ Data safety … More → The post Google Play apps will allow users to initiate in-app account deletion appeared first on Help Net Security.
http://news.poseidon-us.com/Sm4mK6