Notifications can signal security events, policy changes, and required responses, helping organizations detect incidents and manage cyber risk.
Search across headline titles and summaries.
Background for this topic.
Notification in information security is the delivery of an alert about a security event, required action, system change, or confirmed incident. Notifications may target security teams, administrators, users, regulators, or affected individuals and can use email, messaging, phone, or monitoring dashboards. The term covers both automated technical alerts and formal communications about incidents or privacy impact.
Notifications support detection and incident response by directing people to investigate, contain, or remediate a problem. Their security depends on trustworthy event sources, authenticated delivery channels, clear severity and ownership, and records showing when messages were sent and acknowledged. Attackers may spoof alerts, interfere with delivery, or exploit exposed notification content; poorly tuned systems can also create alert overload that obscures important events. Notifications involving personal data should disclose only necessary information, while external incident notices must meet applicable legal deadlines and accurately describe known effects without overstating unconfirmed facts.
Weekly headline count for the current query.
Nearly 300 employees caught up in intrusion at benefits provider Navia Almost 300 HackerOne employees are caught up in a data breach, with the bug bounty biz slamming a third-party benefits provider for a weeks-long delay in notification.…
Travel biz tells customers to change passwords beyond its own services Eurail has confirmed customer information was stolen in a data breach, according to notification emails sent out this week.…
Allianz Life and WestJet lead the way, along with a niche software shop A trio of companies disclosed data breaches this week affecting approximately 3.7 million customers and employees across North America.…
Better late than never after SharePoint assault? Microsoft has reportedly stopped giving Chinese companies proof-of-concept exploit code for soon-to-be-disclosed vulnerabilities following last month's SharePoint zero-day attacks, which appear to be related to a leak in Redmond's early-bug-notification program.…
244M purloined passwords added to Have I Been Pwned thanks to govt tip-off A tip-off from a government agency has resulted in 284 million unique email addresses and plenty of passwords snarfed by credential-stealing malware being added to privacy-breach-notification service Have I Been Pwned (HIBP).…
Notification omits a number of key details Popular flight-tracking app FlightAware has admitted that it was exposing a bunch of users' data for more than three years.…
Rail company goes full steam ahead with notification letters to Rewards customers about spilled card details and more US rail company Amtrak is writing to users of its Guest Rewards program to inform them that their data is potentially at risk following a derailment of their account security. …
Cops love it because popup messages can reveal location, device details, IP address and more More than 130 petitions seeking access to push notification metadata have been filed in US courts, according to a Washington Post investigation – a finding that underscores the lack of privacy protection available to users of mobile devices.…
Mandatory measure against attackers who spam MFA folks into submission Microsoft is hoping to curb a growing threat to multi-factor authentication (MFA) by enforcing a number-matching step for those using Microsoft Authenticator push notifications when signing into services.…
CERT-In was told its six-hour notification requirement was a bad idea – now it knows just how bad India's rules requiring local organizations to report infosec incidents within six hours of detection have been observed by a mere 15 entities/…
That's not what I like Crooks have breached Pepsi Bottling Ventures' network and, after deploying info-stealing malware, made off with sensitive personal and financial information according to a notification sent to consumers.…
All that data coming soon to a darkweb crime forum near you? Several California medical groups have sent security breach notification letters to more than three million patients alerting them that crooks may have stolen a ton of their sensitive health and personal information during a ransomware infection in December.…
That passwordless option is looking really good right about now The personal information of 35,000 PayPal users was exposed in December, according to a notification letter sent to the online payment company's customers this week.…