Facebook's Download-Your-Data Tool Is Incomplete

Privacy International has the details: Key facts: Despite Facebook claim, "Download Your Information" doesn't provide users with a list of all advertisers who uploaded a list with their personal data. As a user this means you can't exercise your rights under GDPR because you don't know which...

RSAC 2020: Blockchain is 'Garbage In', Voting Needs Paper Ballots

SAN FRANCISCO – Cryptography is at the heart of security, especially here at this week’s RSAC 2020. And during the event’s annual Cryptographer’s Panel, industry leaders broke down their top crypto-concerns, including privacy regulations, election security and blockchain. Privacy is clearly a top...

WordPress GDPR Cookie Consent Plugin Cross Site Scripting

A cross site scripting vulnerability exists in WordPress GDPR Cookie Consent plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

GDPR Cookie Consent Plugin for WordPress < 1.8.3 Cross-Site Scripting

The WordPress GDPR Cookie Consent Plugin installed on the remote host is affected by a cross-site scripting XSS vulnerability due to improper access controls. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No...

Critical WordPress Plugin Bug Afflicts 700K Sites

A popular WordPress plugin, which helps make websites compliant with the General Data Protection Regulation GDPR, has issued fixes for a critical flaw. If exploited, the vulnerability could enable attackers to modify content or inject malicious JavaScript code into victim websites. The plugin, GD...

GDPR Cookie Consent < 1.8.3 - Improper Access Controls

Improper Access Controls issue in the clipolicygenerator AJAX call which could allow an authenticated user with low privileges such as a subscriber to: - Change the status of any post/page from published to draft, removing them from the frontend of the blog. - Put a payload in the content of one...

WordPress GDPR Cookie Consent plugin <= 1.8.2 - Improper Access Controls vulnerability

Improper Access Controls vulnerability found by Jerome Bruandet in WordPress GDPR Cookie Consent plugin versions = 1.8.2. Solution Update the WordPress GDPR Cookie Consent plugin to the latest available version at least 1.8.3...

culturelab.gr GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1086626 Security Researcher SecuWatch Helped patch 15 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting culturelab.gr website and its users. Following...

sematec-metrologie.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1086526 Security Researcher SecuWatch Helped patch 15 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting sematec-metrologie.com website and its users. Followin...

beavrs.org GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1086137 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

fems.asso.fr GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1085684 Security Researcher SecuWatch Helped patch 15 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting fems.asso.fr website and its users. Following...

Cyber-risk assessments—the solution for companies in the Fourth Industrial Revolution

Technology continues to play a critical role in shaping the global risks landscape for individuals, governments, and businesses. According to the World Economic Forum's Global Risks Report 2020, cyberattacks are ranked as the second risk of greatest concern for business globally over the next 10...

New privacy assessments now included in Microsoft Compliance Score

Keeping up with rapidly changing regulatory requirements has become one of the biggest challenge’s organizations face today. Just as companies finished preparing for the General Data Protection Regulation GDPR, California’s privacy regulation—California Consumer Privacy Act CCPA—went into effect ...

Embracing Data Privacy Day

January 28 is Data Privacy Day, commemorating the Council of Europe Treaty known as Convention 108, the first legally binding international treaty on data protection signed on January 28, 1981. This "holiday" was originally celebrated in Europe where it is known as Data Protection day. But in 200...

Explained: data enrichment

How do your favorite brands know to use your first name in the subject line of their emails? Why do you seem to get discounts and special offers on products you've recently purchased? Businesses are able to personalize their marketing messages thanks to data enrichment. Data enrichment applies to...

How we Developed a Unified Binary Store (UBS): Part 1

Like most technology companies, VMware Carbon Black has a combination of acquired and built technologies that all utilize their own data stores. As our products have evolved to include the benefits of a centralized cloud offering, our data stores needed to similarly evolve. A new goal was formed:...

novochem.net GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1066026 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Making Compliance and Risk Part of DevOps – 2020 Trend #4

In our 2020 Trends blog, Imperva CTO Kunal Anand predicts that fully automated processes will make compliance more rapid and less expensive. As businesses incorporate security into software development lifecycles SDLC, continuous integration-continuous deployment CICD processes will reduce risk a...

California's Tough New Privacy Law and Its Biggest Challenges

The California Consumer Privacy Act is being touted as one of the strongest privacy regulations in the U.S. enacted so far. However, though the CCPA was adopted on January 1, 2020, the act still has several loose ends and privacy loopholes that need to be fleshed out. At a high level ,the CCPA...

GDPR Cookie Compliance <= 4.0.2 - Authenticated Settings Reset

The gdprcookiecomplianceresetsettings AJAX action registered for authenticated users lacks authorisation and CSRF checks, allowing unauthorised authenticated users to call it, which would result in the settings being reset...