The New York Department of Financial Services (NYDFS) Cybersecurity Regulation blazed a trail in 2017, forming the basis for similar laws for other industries in other states. Currently, the regulation serves as a useful model for managing cybersecurity risks, regardless of industry.
No matter how boring or clichéd this might sound, information security policies and procedures are the pillars successful organizations are built on, setting the stage for a sound security culture and helping to create a foundation for a truly resilient organization.
Development automation needs to shift from an almost exclusively technical automation-for-speed perspective to a more business centric perspective of automation-for-balance.
Criminal gangs behind ransomware attacks will continue to adapt their techniques to maximize their returns. They are increasingly using novel tactics to circumvent traditional security solutions and one of the most significant shifts is that attacks involving data exfiltration are now the norm.
While Big Tech's intent seems positive, the likely beneficiary of the recent Apple/Google privacy push is not the consumer but an effort to force the digital advertising world to restructure itself for their benefit.
Texas is the tenth state to enact comprehensive data privacy protections for its residents. The Texas Data Privacy and Security Act will take effect July 1, 2024, giving Texas businesses a year to prepare for compliance with the new law.
Synthetic identity fraud and identity fraud in general were the costliest kinds of fraud that U.S. ecommerce merchants suffered during 2021, as the incidence and total cost of online fraud continues to rise. Authorities and analysts report growth in the number of criminals targeting children and teenagers online.
A key concept of many privacy laws is the definition of “personal data”, “personal information” or “personally identifiable information”. If it’s not “personal data”, you are likely outside of the scope of data protection laws, however that is a line in the sand which is constantly moving – in this article David Fraser of McInnes Cooper in Canada examines what that constantly shifting line means for privacy, and the individual.
Have you ever wondered how exactly threat actors spend their days? A recent Huntress investigation into a machine operated by a threat actor, who had installed a Huntress agent, gave an inside look into just that.
Since ransomware attacks have evolved from a ‘spray and pray’ tactic to a meticulously planned event, businesses need to be better prepared. What is the missing link that can nudge a novice business towards becoming a cybersecurity grandmaster with foresight and adequate visibility across security vulnerabilities?










