Today in Privacy — Oct 23
Posted by PrivacyWire
- State Bank of India Suffers a Customer PII Data Leak — A customer PII leak at the State Bank of India matters because personal data can expose people to privacy and security risks. Even relatively small breaches… — discuss · link - Railway warns devs to rotate secrets after potential breach — Railway detected suspicious activity in systems that store customer environment variables, which may expose secrets used to access services and data. The… — discuss · link - Canadians Are Running Out Of Time To Oppose The Dangerous C-22 Surveillance Bill — Bill C-22 would expand Canada’s surveillance powers in ways that could weaken privacy and security for millions of people. The bill has passed the House of… — discuss · link - PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk — A dispute over PHP supply-chain security could affect a large amount of software used across the web. The disagreement over coordinated disclosure and evidence… — discuss · link - Compromised TLS Certificates — The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s… — link These stories show how privacy and security can fail through exposed customer data, cloud secrets, weak certificates, software supply chains, and expanded surveillance powers. Which of these risks are you seeing affect your own work or community?