Latest

Insights

Insights and opinions on data protection, privacy and cybersecurity contributed by thought leaders from around the world.

Facade of the Stock Exchange building showing cybersecurity disclosures

Cyber Security Insights

Revisiting the SolarWinds Incident With the Final SEC Cybersecurity Disclosure Rules

September 4, 2023

The SEC has been clear that proper risk management and timely cyber incident disclosures protect investors and other stakeholders. The regulators may make an example out of SolarWinds and its leadership at the time of the Orion incident to set the tone for the importance of software supply chain security.

Woman is pressing shield and check icon showing generative AI and authenticity

Cyber Security Insights

The Death of Authenticity: Generative AI and Large Language Models

September 1, 2023

We live in an age that values authenticity: being true to who you are and what you value. It is ironic, then, that one of the more recent innovations of the past few years—Large Language Models, or Generative AI—is in the process of undermining authenticity itself.

Cyber security IT engineer working showing cyber security career

Cyber Security Insights

Navigating Your Path to a Career in Cyber Security: Practical Steps and Insights

August 30, 2023

Landing a job in cyber security may require persistence and continuous learning, so it's important to keep refining your skills, networking, and seeking new opportunities.

Screen with ChatGPT showing intellectual property issues

Data Protection Insights

ChatGPT – IP and Privacy Considerations

August 28, 2023

Copying of protected works is generally a no-no. But, training of AI tools such as ChatGPT requires copying enormous amounts of data. The two positions appear potentially irreconcilable. This is where the “text and data mining” (TDM) exception to copyright and database rights comes in.

Wall Street building in downtown New York City showing SEC investigation on SolarWinds and cybersecurity disclosures

Cyber Security Insights

What the SEC’s Investigation of SolarWinds Means for CISOs and Cybersecurity Disclosures

August 25, 2023

This appears to be the first time that the SEC has sent a Wells Notice to a CISO. While novel, this Wells Notice furthers the SEC’s recent enforcement and rulemaking focus on meaningful and timely cybersecurity-related disclosures, as well as holding individual liable for their roles in company violations.

User working on laptop with digital lock showing zero trust

Cyber Security Insights

It’s a Process, Not a Product: A Proven Approach to Zero Trust

August 23, 2023

The true essence of Zero Trust lies in embracing a process-centric approach rather than relying solely on products. CISA has established a set of maturity pillars that guide organizations in their journey toward zero trust. Understanding these pillars is essential for CISOs and CPOs looking to build a robust security framework.

Security lock chain and worldwide connection

Insights

The Strange Evolution of Data Loss Prevention (DLP)

August 22, 2023

DLP still ‘lives on’ in the capabilities of its successors and in the re-vamped versions hardline DLP providers have developed today. Let’s take a look at where this all came from, why the pivot, and where DLP is going in the future (which is, we can say, today).

Woman shopping online showing ecommerce sites and customer data

Cyber Security Insights

How to Stop Leaky Forms From Putting Ecommerce Customer Data at Risk

August 21, 2023

Some ecommerce sites may be unwittingly placing customer data at risk of exposure through forms that unintentionally collect PII without user consent. Here’s what retail security teams need to know about “leaky forms” and how to implement security policies that can protect customer data from this hazard.

Man touching phone for MFA showing MFA fatigue

Cyber Security Insights

Beating MFA Fatigue: Why Hackers Have Resorted to Prompt Bombing

August 18, 2023

One of the most significant barriers for cybercriminals when trying to compromise a user account is Multi-Factor Authentication (MFA). But what happens when users are overrun by notifications? Enter MFA bombing attacks to exploit MFA fatigue.

OpenAi ChatGPT application on smartphone showing AI governance

Cyber Security Insights

Your Company (And Your Teams) Are Using AI Whether You Know It or Not; Here Are Four Steps to Lay a Foundation for Better Policies

August 16, 2023

Setting up the right AI governance is a crucial foundation in these early days of AI. Companies that get governance right will be able to move faster, more confidently in the space – likely outperforming companies that lack the right safeguards to mobilize AI effectively.

1 … 16 17 18 19 20 … 150

Insights

Revisiting the SolarWinds Incident With the Final SEC Cybersecurity Disclosure Rules

The Death of Authenticity: Generative AI and Large Language Models

Navigating Your Path to a Career in Cyber Security: Practical Steps and Insights

ChatGPT – IP and Privacy Considerations

What the SEC’s Investigation of SolarWinds Means for CISOs and Cybersecurity Disclosures

It’s a Process, Not a Product: A Proven Approach to Zero Trust

The Strange Evolution of Data Loss Prevention (DLP)

How to Stop Leaky Forms From Putting Ecommerce Customer Data at Risk

Beating MFA Fatigue: Why Hackers Have Resorted to Prompt Bombing

Your Company (And Your Teams) Are Using AI Whether You Know It or Not; Here Are Four Steps to Lay a Foundation for Better Policies

U.S. Banks are Blocking AI Agents from Accessing Customer Accounts Amid Safety Concerns

OpenAI: AI Agents Turned Off Safety Monitoring Guardrails, Even Lied About It

SafePay Ransomware Breached Over 600 Critical Infrastructure Organizations, CISA Warns

Why Agentic AI Belongs in Your Employee Security Framework