This week’s security news highlights several alarming incidents in technology and privacy. A significant concern arises from period tracker apps like Stardust, which were found to share sensitive user data, including health details, without proper user consent. A Mozilla Foundation audit revealed that Stardust scored poorly on privacy metrics, transmitting user data to third parties at the moment the app is opened, raising serious implications for privacy in health tracking applications.
In global cybersecurity matters, Russian state-sponsored actors, specifically the FSB, have been implicated in a cyberattack targeting the Polish electric grid. This attack nearly caused significant disruptions in essential services, showcasing the risks posed by nation-state cyber activities. Further alarming is the revelation of Denis Obrezko, a Russian hacker facing charges, who previously worked for Kaspersky, a cybersecurity firm with alleged ties to the Russian government.
Closer to home, the U.S. Department of Homeland Security (DHS) has faced scrutiny after two breaches were falsely dismissed as false positives. Analysts detected signs of unauthorized access that were initially overlooked, revealing challenges in cybersecurity monitoring and response within federal agencies.
Finally, the AI music startup Suno has also come under fire after a breach exposed that it scraped a vast amount of music data from platforms like YouTube and Deezer without appropriate permissions, thereby challenging industry norms and legal standards around data usage.
To explore more on these topics, check the following links:
