Yazılar

Baidu Denies Data Breach Amid Controversy Over Executive’s Daughter

Baidu, one of China’s largest search and cloud service providers, has denied allegations of an internal data breach after the teenage daughter of a senior executive was accused of posting personal information online. The controversy erupted when social media users alleged that the daughter of Baidu vice president Xie Guangjun had leaked private details, including phone numbers, during an online dispute.

In response, Baidu stated that neither employees nor executives have access to user data and that the leaked information originated from illegally obtained databases hosted on foreign platforms. The company also announced that it had filed a police report to counter misinformation, including claims that Xie’s daughter had access to Baidu’s databases.

Xie, a member of Baidu’s cloud division, apologized for his daughter’s actions, asserting that she had acquired the data from overseas social media sites. His statement, reported by Chinese media, was shared on his personal WeChat account.

The incident comes as China tightens data security laws to curb the sale of private information, an issue exacerbated by illicit data brokers. The controversy has impacted Baidu’s stock performance, with shares dropping over 4% in Hong Kong trading on Thursday morning.

SentinelOne Issues Lower Revenue Forecasts Amid Competition and Economic Uncertainty

SentinelOne (S.N.) issued disappointing revenue forecasts for both the first quarter and the full year, citing challenges such as tough competition and reduced enterprise spending amid economic uncertainty. This led to a 16% drop in its shares after the market closed on Wednesday.

The cybersecurity company faces significant pricing pressure, particularly in the endpoint security market, where larger platform players like Palo Alto Networks (PANW.O) and CrowdStrike (CRWD.O) are offering deeper discounts. Analysts note that despite SentinelOne’s strong competitive positioning, the sector is feeling the strain of more aggressive pricing strategies. Additionally, economic challenges have led enterprises to curtail spending on cybersecurity solutions, focusing more on cost optimization.

Generative AI, while offering opportunities, has also opened the door for increased cyberattacks. The rise of malicious AI usage has made the cybersecurity industry more critical, with global cyberattacks becoming a significant threat. For example, X, the social media platform owned by Elon Musk, experienced intermittent outages earlier this week due to a powerful cyberattack. Similarly, a cyberattack on UnitedHealth Group‘s technology unit last year compromised the personal information of 190 million individuals, marking it as the largest healthcare data breach in the United States.

Despite these cybersecurity challenges, SentinelOne’s first-quarter revenue forecast was $228 million, below the Wall Street estimate of $235.1 million. For the full year, the company expects revenue between $1.01 billion and $1.012 billion, which is also below analysts’ average estimate of $1.03 billion.

In its most recent financial results for the fourth quarter ending January 31, SentinelOne reported $225.5 million in revenue, surpassing expectations of $222.3 million. The company’s adjusted profit per share for the quarter was 4 cents, exceeding the 1-cent estimate.

Australia Regulator Sues FIIG Securities for Cybersecurity Failures

The Australian Securities and Investments Commission (ASIC) announced on Thursday that it is suing FIIG Securities, a fixed-income broker, accusing the company of failing to implement proper cybersecurity measures over a four-year period. These alleged failures allowed a hacker to infiltrate FIIG’s IT network, resulting in the theft of approximately 385 gigabytes of confidential data.

The breach, which occurred between May 19 and June 8, 2023, affected 18,000 clients, who were notified that their personal information may have been compromised. Some of the stolen client data was later found on the dark web.

ASIC’s lawsuit claims that from March 2019 to June 2023, FIIG failed to take necessary steps to ensure the security of its digital infrastructure. The regulator stated that the company lacked adequate cyber risk management systems, which directly contributed to the attack.

“Advancing digital safety and resilience is a strategic priority for ASIC, and we have been actively engaging with companies to support the continuous improvement of cyber and operational resilience practices,” said ASIC Chair Joe Longo.

During the period when the cybersecurity issues occurred, JPMorgan held assets for FIIG and its clients, ranging in value from A$2.89 billion ($1.83 billion) to A$3.7 billion. However, JPMorgan declined to comment on the matter when contacted by Reuters, and FIIG did not respond to requests for comment.

According to ASIC, the deficiencies alleged include FIIG’s failure to adequately update and patch its software, as well as its insufficient resources to protect against and prevent cyberattacks.