Security flaw in Qatar’s COVID-19 contact-tracing app ‘put 1m people’s sensitive data at risk’

From Amnesty USA: Serious security vulnerabilities in Qatar’s mandatory contact tracing app, uncovered by Amnesty International, must act as a wake-up call for governments rolling-out COVID-19 apps to ensure privacy safeguards are central to the technology. An investigation by Amnesty’s Security Lab discovered the critical weakness in the configuration of Qatar’s EHTERAZ contact tracing...

Ransomware Attack Kidnaps Austrian City

Felipe Eraon reports: Malware team, NetWalker, launched a ransomware attack against the Austrian village of Weiz. This attack affected the public service system and leaked some of the stolen data from building applications and inspections. According to the cybersecurity firm, Panda Security, hackers managed to penetrate the village’s public network through phishing emails related to...

Taiwan government database leaked on dark web

Kelvin Chen reports:  It was reported on Friday (May 29) that a government database of more than 20 million Taiwanese citizens was leaked on the dark web. According to researchers at Cyble Inc., Toogod (sic) a “known and reputable actor” was found to have released the data titled, “Taiwan Whole Country Home Registry DB,”...

Bank of America reveals data breach in PPP application process

Caroline Hudson reports: Bank of America Corp. (NYSE: BAC) has revealed a possible data breach on business clients’ information for the Paycheck Protection Program. The breach occurred on April 22, as BofA uploaded PPP applications onto the U.S. Small Business Administration’s test platform, according to a filing with the California Attorney General’s Office. The...

Ransomware attack targets Nipissing First Nation

Michael Lee reports: Nipissing First Nation (NFN) has confirmed it was the victim of a ransomware attack earlier this month that affected the administration’s computers and server. The First Nation provided an update about the attack in the June issue of its monthly newsletter Enkamgak. According to the statement, administration discovered the attack May...