Aggregator

Threat Attack Daily - February 25th, 2025

Experts Say First Class Action Claim Under State's Privacy Law Won't Be the Last
A proposed class action lawsuit alleges that Amazon is unlawfully collecting and tracking mobile users' data - including sensitive geolocation - in violation of Washington State's My Health My Data Act. It's the first such lawsuit filed since the data privacy law went into effect last year.

Some Lawmakers Fear Regulation Could Stymie Innovation
The British Labour Government has reportedly delayed plans to put forward a draft bill on artificial intelligence over concerns that binding AI regulation could stifle the country's AI growth potential. A spokesperson said the government remains "committed to bringing forward a legislation."

Federal Agencies and Experts Alike Say Musk's Email Request Poses Security Threat
The Department of Government Efficiency-led effort to assess whether millions of federal jobs are necessary through a bulleted list of weekly activities is causing a major security threat, in addition to mass confusion across the federal government, experts told Information Security Media Group.

eSafety Regulator Seeks Platform's Policy on Extremist and Child Sexual Content
Australia regulators on Monday fined social networking company Telegram nearly AU$1 million for delaying its response to questions on how the company regulates violent, extremist and child sexual content on its platform. Telegram was the only social media firm to miss a May 6 deadline.

2025年，老牌的安全产品——杀毒软件要凉了吗？

本期周报简介：1.金融专网安全防护：当服务位于外部单位且使用SSL加密时，如何有效检测对外部单位的攻击行为？有何解决方案？ 2.如何利用新的方法如漏洞可达性分析、EPSS等改进传统的基于CVSS评分的漏洞管理策略，更有效地识别真正的漏洞？

2025年，老牌的安全产品——杀毒软件要凉了吗？

2025年，老牌的安全产品——杀毒软件要凉了吗？

2025年，老牌的安全产品——杀毒软件要凉了吗？

本期周报简介：1.金融专网安全防护：当服务位于外部单位且使用SSL加密时，如何有效检测对外部单位的攻击行为？有何解决方案？ 2.如何利用新的方法如漏洞可达性分析、EPSS等改进传统的基于CVSS评分的漏洞管理策略，更有效地识别真正的漏洞？

2025年，老牌的安全产品——杀毒软件要凉了吗？

本期周报简介：1.金融专网安全防护：当服务位于外部单位且使用SSL加密时，如何有效检测对外部单位的攻击行为？有何解决方案？ 2.如何利用新的方法如漏洞可达性分析、EPSS等改进传统的基于CVSS评分的漏洞管理策略，更有效地识别真正的漏洞？

Ransomware Attack Update for 25th of February 2025

Addressing the complexities of session management in multi-IDP environments, the protocol offers a pathway to real-time security, proactive risk mitigation, and enhanced user trust.

A Threat Actor Claims to be Selling the Data of an Unidentified Managed Service Provider in France

The fake websites trick users into downloading and running malware that searches for personal information, especially anything related to cryptocurrency.