Oakland, Portland, San Francisco and Minneapolis have banned police use of facial recognition, mainly due to its inherent racial bias. Massachusetts is now the first U.S. state to legislate its use. The law, which goes into effect in July, has found a middle ground, both allowing law enforcement to use the facial recognition technology to catch criminals and building in protections intended to prevent false arrests. With the new law, police must get a judge’s permission to run a facial recognition search. Continue reading Massachusetts Finds Compromise in Use of Facial Recognition

Beginning January 2020, the California Consumer Privacy Act (CCPA) will allow that state’s residents to find out exactly what personal data companies hold about them — and ask them to delete such information. Consumers will also have the option of opting out of allowing their personal information to be sold. The legislation — which was designed to make Amazon, Facebook, Google and others more transparent — will impact a wide range of companies, large and small, including airlines, banks, retailers and restaurants. Continue reading Companies Prep for Brunt of California Consumer Privacy Act

Stanford University released the findings of a study on the comments received by the FCC on its plan to end net neutrality. The FCC received millions of comments from bots that used real identities, making it difficult to determine authenticity. The research analyzed 800,000+ unique comments that were not obviously produced by bots to conclude they were overwhelmingly in favor of net neutrality. The New York attorney general is seeking to determine if false comments swayed legislators in their decision to end net neutrality. Continue reading Millions of Net Neutrality Comments to FCC Judged for Fraud

Since Apple’s publicized showdown with the FBI following the San Bernardino shooting in 2015, after the company refused to unlock a suspected killer’s iPhone, law enforcement agencies have been turning to third parties in order to access information from iPhones. Now Apple has indicated an upcoming software update, designed to enhance security, will block access to an iPhone’s Lightning port one hour after it is locked. Some authorities believe the update also impacts their ability to access phone data in criminal investigations, which could reignite the privacy debate that followed San Bernardino. Continue reading Apple Closing Loophole That Lets Authorities Hack iPhones

In the wake of May’s Equifax website breach that reportedly involved personal data of 145.5 million U.S. consumers, the credit reporting service’s site was manipulated again this week. On Wednesday, and again on Thursday, fraudulent Adobe Flash updates appeared that infected computers with adware when clicked. Only three of 65 antivirus providers detected the adware. Security analyst Randy Abrams discovered the issue while investigating false information that had appeared on his credit report. Meanwhile. federal legislators have introduced a new cybersecurity bill to help protect consumers. Continue reading Clicking Flash Update on the Equifax Site Results in Adware

Equifax reported that hackers likely gained access to the personal information of about 143 million people in the U.S., making it the second biggest data breach after last year’s two Yahoo hacks, which impacted as many as 1.5 billion customers. The Equifax hack is almost twice as large as the J.P. Morgan Chase & Co. hack three years ago. The damage the hack to Equifax will do is as of yet unknown, but it could be serious, given the immense scope of the attack and the future potential for fraud.   Continue reading Equifax Data Breach, Discovered in July, Impacts 143 Million

Computer security company Symantec Corp. will acquire LifeLock Inc. for $2.3 billion in a deal that will broaden Symantic’s offerings beyond its antivirus software. LifeLock, which sells identity-theft protection services, currently has more than 4.4 million subscribers. “Symantec hopes to integrate LifeLock with its Norton antivirus businesses into a single product line after the acquisition closes, expected early next year,” reports The Wall Street Journal. In June, Symantec acquired Blue Coat Systems for $4.65 billion to add cyberdefense technologies to its portfolio. Earlier this year, the company “sold its Veritas data-storage unit to Carlyle Group for $7.4 billion.” Continue reading Symantec Agrees to Purchase LifeLock for $2.3 Billion in Cash

In an era of system hacks becoming more common, JP Morgan is the latest to report a massive breach of customer information. While the company believed a few weeks ago that only one million accounts were affected, it now reports that 76 million households and 8 million small businesses were part of the data breach. While recent breaches have largely involved retailers, some analysts are more concerned about the JP Morgan case, especially since banks tend to have more sensitive data about their customers. Continue reading Why Analysts Are Concerned About the JP Morgan Data Breach

Hold Security, an Internet security research firm in the U.S., discovered a Russian crime ring has stolen an unprecedented amount of Internet credentials, including 1.2 billion user names and passwords, and more than 500 million email addresses. The hackers targeted websites from multiple countries and a range of businesses, from Fortune 500 companies to small websites. The crime ring is currently using the information to send spam through social networks for a fee. Continue reading Russian Criminals Obtain Passwords and More in Massive Hack