Florida-based mobile device maker BLU has settled with the Federal Trade Commission (FTC) over charges it allowed a Chinese partner to collect detailed personal customer information from some of its devices without authorization or consent.
Search Results for "third party software"
Podcast Episode 94: Black Report takes Hacker View and Securing the Open Source Supply Chain
In this episode of the Security Ledger Podcast we do a deep dive into the recent Black Report by NUIX – which flips the script by asking hackers and pen testers their opinions about how they hack firms and what defensive strategies and technologies work best at stopping them. Also: Rami Sass the CEO and co-founder of this week’s sponsor, WhiteSource Software, joins us in the Security Ledger studios to talk about how a white knuckle audit of his company’s open source dependencies eight years ago prompted him to start WhiteSource, which makes a tool for managing the open source software supply chains.
Trail from AggregateIQ Data Leak points to GOP-Linked Firms
A data leak by a company called AggregateIQ has revealed that the obscure Canadian firm developed the software Cambridge Analytica used and sold to clients during the 2016 election to help Republican campaigns target voters, security firm UpGuard revealed this week. Clues in the data suggest other well known GOP linked data and research firms were also involved.
FBI, DHS warn Russian Dragonfly Group Still Targeting US Critical Infrastructure
The Department of Homeland Security and the FBI on Thursday warned that the so-called “Dragonfly” hackers linked to the government of Russia are engaged in a “multi-stage intrusion campaign” against U.S. critical infrastructure, including the energy, nuclear, aviation and manufacturing sectors.
UPDATED: Damning Report Has AMD Investigating Critical Vulnerabilities in Ryzen, EPYC Chips
Chip maker AMD acknowledges it is looking into critical vulnerabilities and an exploitable backdoor in its latest line of processors after an Israel-based security firm ambushed the company with a report this week detailing more than a dozen serious security holes in its products.