FTC secures first databroker settlement banning sale of sensitive location data

This briefing covers several security developments: the FTC's settlement restricting X-Mode/Outlogic from selling sensitive location data; a set of critical vulnerabilities (including CVSS 10.0 and multiple CVSS 9.x issues) affecting Cisco, Siemens, Rapid SCADA, Fortinet, Adobe ColdFusion, Apache Superset, Microsoft SharePoint and others with some actively exploited; the TriangleDB iOS spyware campaign that abused an Apple ECC feature to access device memory, microphones and cameras; and a healthcare breach at HMG exposing unencrypted records (names, DOBs, SSNs and medical data) across 40 facilities.