InfoSec News Nuggets 3/19/2020

1 - Brave accuses Google of using 'hopelessly vague' privacy policies that breach GDPR Google has been accused of breaching one of the General Data Protection Regulation's (GDPR) principles surrounding consent that requires companies to provide a specific purpose for collecting and processing user personal data.  In a complaint [PDF] filed to the Irish Data Protection Commission (DPC), Chromium-based browser Brave alleges that Google's privacy policy infringes the GDPR "purpose limitation" principle as it "does not transparently…
Read More

InfoSec News Nuggets 3/9/2020

1 - One of Roman Abramovich's companies got hit by ransomware EVRAZ, one of the world's largest steel manufacturers and mining operations, has been hit by ransomware, a source inside the company told ZDNet today. The infection has been identified as a result of the Ryuk ransomware strain. The ransomware infection has hit and brought down the company's North American branches. These include primarily steel production plants across Canada and the US. Manufacturing has been…
Read More

InfoSec News Nuggets 2/12/2020

1 - Software errors plague Boeing's Calamity Capsule Troubled aerospace giant Boeing will "re-verify" the flight software code for its calamity capsule, the CST-100 Starliner, after it was revealed that December's anomaly could have been a lot, lot worse. Boeing had already coughed to a timer error that made the spacecraft's internal clock 11 hours out of whack while sat on the Atlas V. The result was that the Starliner managed to burn through its attitude control…
Read More