In this article, Cybernews reveals that digital banking platform Bankingly exposed the personal data of nearly 135,000 clients from seven financial institutions across Central and South America due to misconfigured Azure Blob Storage buckets. Affected countries include the Dominican Republic, Mexico, Ecuador, El Salvador, Bolivia, and Costa Rica, with the Dominican Republic being the hardest hit. The exposed data included full names, usernames, emails, and phone numbers, posing a significant risk for phishing and social engineering attacks. Bankingly has since secured the data, though the breach highlights the broader risks of using third-party service providers for financial institutions.

For more on this data breach and its implications, click here to read more.

In this article, T-Mobile has agreed to pay a $15.75 million fine and invest an equal amount to improve its cybersecurity following a series of data breaches between 2021 and 2023, impacting tens of millions of customers. The Federal Communications Commission (FCC) launched an investigation, citing T-Mobile’s failure to protect customer data, including names, Social Security numbers, and driver’s license numbers. As part of the settlement, T-Mobile will implement stronger security measures, including zero trust architecture and phishing-resistant multi-factor authentication, while denying wrongdoing but agreeing to prioritize consumer protection.

For more on this significant settlement, click here to read more.

Verizon experienced a major nationwide outage on Monday, affecting mobile data, voice, and text services for several hours. The outage, which impacted customers in various cities across the U.S., caused users’ phones to display SOS mode, signaling the lack of connectivity. The issue, concentrated mainly on the East Coast, led to over 1.5 million user reports between 8 AM and 4 PM ET on Downdetector. Verizon engineers worked to resolve the problem, and by 7:18 PM ET, the company announced that services had been fully restored. The FCC was aware of the disruption and was investigating its cause and extent.

For more details, click here to read more.

A recent investigation by Cybernews reveals that many popular educational apps, including Coursera, Duolingo, and Moodle, request sensitive permissions, potentially putting users’ privacy at risk. These permissions allow access to sensitive data, such as location, camera, contacts, and storage. Some apps even have access to users’ accounts, phone numbers, and device information. While such permissions may be essential for certain features, they can open the door to misuse if compromised. Users are advised to carefully review app permissions and revoke unnecessary access to protect their privacy.

For more details, click here to read more.

California Governor Gavin Newsom signed a new law (AB 2426) requiring digital storefronts to clearly inform customers that they are purchasing a license to use digital media, rather than owning it outright. The law, effective next year, prohibits the use of terms like “buy” or “purchase” unless stores disclose the limitations of the license, including the possibility of revocation. This move aims to protect consumers as digital media becomes more prevalent, sparked by incidents where companies like Ubisoft and Sony removed content users believed they owned.

For more details, click here to read more.

A cyberattack disrupted public Wi-Fi at 19 major UK train stations, including London King’s Cross and Manchester Piccadilly, with passengers receiving terror-related messages. Network Rail, which manages the stations, suspended Wi-Fi services while the British Transport Police investigated. The attack also impacted other stations in cities like Birmingham, Glasgow, and Edinburgh. Telent, the telecommunications company providing the Wi-Fi, is investigating the incident. The attack follows a spate of recent cyber incidents targeting UK public services, sparking concerns about national security.

For more details, click here to read more.