Three privacy rules for 2025 (Lock and Code S06E02)

This week on the Lock and Code podcast… It’s Data Privacy Week right now, and that means, for the most part, that you’re going to see a lot of well-intentioned but clumsy information online about how to protect your data privacy. You’ll see articles about iPhone settings. You’ll hear acronyms for...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.3, which stems from an application that may be able to access protected user data...

The vulnerability in the dllog.cgi script of D-Link DIR-878 microprogramming devices allows a hacker to gain unauthorized access to protected information.

The vulnerability of the dllog.cg script in D-Link DIR-878 router microprogramming software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2025-3036 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue is related to insufficient protection of service data in the Face Gallery component of watchOS, iOS, and iPadOS operating systems. ...

The vulnerability of the SAP NetWeaver Virus Scan Interface (NW-VSI) programming integration platform for SAP NetWeaver Application Server ABAP and ABAP Platform allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP NetWeaver Virus Scan Interface NW-VSI software integration platform for SAP NetWeaver Application Server ABAP and ABAP Platform is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

The vulnerability of SAP NetWeaver AS ABAP and SAP ABAP Platform integration platforms, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of SAP NetWeaver AS ABAP and SAP ABAP Platform integration platforms is related to insufficient protection of operational data. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access to protected information...

CVE-2025-24591

Missing Authorization vulnerability in NinjaTeam GDPR CCPA Compliance Support allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GDPR CCPA Compliance Support: from n/a through 2.7.1...

WordPress GDPR CCPA Compliance & Cookie Consent Banner plugin <= 2.7.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ngô Thái An in WordPress Plugin GDPR CCPA Compliance Support versions = 2.7.1...

2025 State of SaaS Backup and Recovery Report

The modern workplace has undergone a seismic transformation over recent years, with hybrid work becoming the norm and businesses rapidly adopting cloud-based Software-as-a-Service SaaS applications to facilitate it. SaaS applications like Microsoft 365 and Google Workspace have now become the...

PT-2025-5428 · Ninja Team · Ninjateam Gdpr Ccpa Compliance Support

Name of the Vulnerable Software and Affected Versions: NinjaTeam GDPR CCPA Compliance Support versions 2.7.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

The vulnerability of the Mark-of-the-Web protection mechanism in the 7-Zip compressor allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Mark-of-the-Web protection mechanism in the 7-Zip compressor is related to a breach of the data protection mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user...

WordPress plugin GDPR CCPA Compliance Support 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

The vulnerability of the BitLocker component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the BitLocker component of the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Secure Boot Security component of the Windows operating system, which allows a hacker to circumvent security restrictions

The vulnerability of the Secure Boot Security component of the Windows operating system is related to a breach of the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation allows a perpetrator to compromise the confidentiality of protected information.

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality of the protected information...

The vulnerability of the LibreOffice office software package, related to insufficient protection of sensitive data, allows a perpetrator to disclose confidential information.

The vulnerability of the LibreOffice office software package is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to disclose confidential information...

Considerations for Selecting the Best API Authentication Option

Implementing API authentication is one of the most critical stages of API design and development. Properly implemented authentication protects data, user privacy, and other resources while streamlining compliance, preventing fraud, and establishing accountability. In fact, broken authentication i...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to disclose sensitive information that is protected by this mechanism.

The vulnerability of the Kerberos protocol for Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

How to Bring Zero Trust to Wi-Fi Security with a Cloud-based Captive Portal?

Recent data breaches have highlighted the critical need to improve guest Wi-Fi infrastructure security in modern business environments. Organizations face increasing pressure to protect their networks while providing convenient access to visitors, contractors, temporary staff, and employees with...

European Privacy Group Sues TikTok and AliExpress for Illicit Data Transfers to China

Austrian privacy non-profit None of Your Business noyb has filed complaints accusing companies like TikTok, AliExpress, SHEIN, Temu, WeChat, and Xiaomi of violating data protection regulations in the European Union by unlawfully transferring users' data to China. The advocacy group is seeking an...