What to watch this week: The privacy of more than 250,000 consumers in US federal agencies was leaked; DingTalk and Kingsoft Office announced AI applications on the same day; Round of financing...
data security
US federal agency exposed to data breach scandal
Overseas Network, April 20th According to a report by the US "New York Post" on the 19th, the Consumer and Financial Protection Bureau (CFPB), a subsidiary of the US federal government, was exposed to a serious data breach scandal. The data is sent to a private mailbox. The agency called it a "significant incident."
The CFPB said the employee was authorized to access the data, which included consumer identifiable information, such as names and transaction accounts, from seven agencies. The data was sent by employees to individual email addresses in 65 emails.
CFPB officials discovered the misuse of personal email accounts on February 14 and notified the case on March 21. At present, the employee involved in the case has resigned, but whether he has been fired, the CFPB did not disclose. (Source: Overseas Network)
International payment giant NCR was attacked by ransomware
On April 17th, the payment giant NCR was attacked by ransomware, and its Aloha POS system platform was interrupted. The BlackCat/ALPHV gang has claimed responsibility.
NCR is an American software and technology consulting company that provides digital banking, POS systems and payment processing solutions to customers such as restaurants, businesses and retailers.
NCR's Aloha POS platform, a product used for hotel services, has not been available to customers since it broke down last Wednesday (April 12). After days of silence, NCR disclosed today that the data center that powers the Aloha POS platform has been hit by a ransomware attack. (Source: Security Internal Reference)
Siemens Metaverse Leaks Sensitive Corporate Data
Recently, the Cybernews research team discovered that a digital platform created by Siemens factories and offices leaked some sensitive information. This information, if obtained by those attackers, could have devastating consequences for the company and other large companies that use its services, including ransomware attacks. However, Siemens said that this problem has now been resolved.
Siemens, as a German multinational company with a revenue of more than 71 trillion US dollars and 300,000 employees worldwide, has also caught up with the red tide of the metaverse. In 2022, it partnered with NVidia, an American multinational technology company, to establish the Industrial Metaverse.
In addition, the research team also found that Siemens leaked four sets of user information in WordPress, and three sets of background and authentication endpoint URLs in the system. Although WordPress only exposed username and avatar picture information, four subdomains based on Siemens WordPress were vulnerable. A vulnerability was fixed in WordPress back in 2017, leading researchers to suspect that the site may have other, more serious vulnerabilities. (Source: FreeBuf.COM)
Car giant Volvo leaks sensitive documents
Brazilian Volvo car retailer Dimas Volvo has been leaking sensitive documents through its website for nearly a year, which could be used by malicious actors to hijack official communications, according to an investigation by the Internet News Research Group. Channels or direct intrusion into the company's system.
Relevant personnel from the American Digital Security Investigation Media contacted Dimas Volvo and relevant officials in charge of data protection at Volvo headquarters, and learned that the problem of information leakage has been properly resolved. (Source: Safer)
work those things
DingTalk and Kingsoft Office announced AI applications on the same day
On April 18, DingTalk and Kingsoft Office, two companies that make office products, both announced the launch of generative AI applications, both supported by large-scale model technology. Dingding has been connected to Alibaba's "Tongyi Qianwen", and will fully start intelligentization. The application of Kingsoft Office is called "WPS AI", which is also supported by the domestic large-scale model platform.
These two AI applications focus on intelligent services. DingTalk provides more than 10 AI capabilities, covering group chat, documents, video conferencing and low-code application development. "WPS AI" provides functions such as document drafting, rewriting, summarizing, polishing, translation, and continuation. (Source: Economic Observer)
E-commerce/logistics matters
JD.com and Suqian Port Group signed a strategic agreement
According to news on April 21, JD.com Global Shopping recently signed a strategic cooperation agreement with Suqian Port Group Co., Ltd. at the headquarters of JD.com in Beijing. The signing of this agreement is an important measure to promote the Shenchuang operation of Suqian Bonded Logistics Center, and it is also a key measure for Suqian Port to further promote the high-quality development of Suqian's export-oriented economy. According to reports, Suqian Port Group will take this signing ceremony as an opportunity to actively play the role of a bonded logistics center, and jointly explore and optimize the bonded logistics center and cross-border e-commerce business cooperation with JD Global. (Source: Yibang Power)
Shein announces nearly $150 million investment in Brazil
According to news on April 21, Shein said on Thursday that it plans to invest 750 million reais (about 148.9 million U.S. dollars) in Brazil in the next few years to establish a network with thousands of textile manufacturers in the country. This is Shein's first major move in Latin America after former SoftBank COO Marcelo Claure joined Shein in February.
The company also announced a marketplace for products and sellers in Brazil and said it intends to work with 2,000 manufacturers in Brazil, which will create 100,000 jobs over the next three years. Earlier Thursday, Brazil's Finance Minister Fernando Haddad said Shein planned to localize some of its Brazilian sales through local production. (Source: Yibang Power)
Investment and financing / mergers and acquisitions
Didagou completes tens of millions of yuan in Pre-A round of financing
News on April 21, a few days ago, TikTok e-commerce data service platform Didagou announced that it has completed tens of millions of yuan in Pre-A round of financing, invested by OXYZ Seafirst Capital, and Yuehai Capital served as the exclusive financial advisor. This round of financing will be used to improve the platform construction and the systematic layout of Southeast Asian agent operation business. (Source: Yibang Power)
Baseus Technology completed hundreds of millions of yuan in Series A financing
According to news on April 21, Shenzhen Base Technology Co., Ltd., a consumer electronics company, announced the completion of a round A financing of hundreds of millions of yuan. This round of financing was jointly led by Shenzhen Venture Capital and CICC Capital. Follow up. This is the first external market financing for Baseus Technology since its establishment in 2011. This round of financing will be mainly used for product research and development, overseas offline market construction, supply chain construction, factory construction, brand promotion, etc. (Source: Yibang Power)