One of the most significant barriers for cybercriminals when trying to compromise a user account is Multi-Factor Authentication (MFA). But what happens when users are overrun by notifications? Enter MFA bombing attacks to exploit MFA fatigue.
Online businesses must prioritize credential stuffing mitigations by detecting and preventing automation in credential stuffing, and identifying compromised credentials of legitimate users and forcing them to change password to disincentivize the attackers and break the attack lifecycle.
As regulators get more serious about enforcing data protection rules, the severity of penalties issued against enterprises who fail to secure their customer data continues to grow and there's higher demand for better executive accountability as seen in the recent cases of Uber and Drizly.
25th May 2018 marked the implementation of the GDPR. However, many organizations outside Europe are not aware that a Nominated European Representative is required under certain conditions in GDPR Article 27.
Nearly half of IT and business leaders said that the expanding attack surface is “spiraling out of control.” But throwing even more tooling and people at the issue doesn’t address the underlying problem which lies in a disconnect between the teams, processes and tools that a CISO probably already has in place.
The main issues surrounding data management and consumer privacy will only accelerate as we move forward into the final months of the year. Here are three major trends and events to look out for.
Safeguarding privacy can be achieved through a federal privacy law and privacy-enabling technologies that help people exercise their rights and organizations in using personal data responsibly.
Hundreds of written comments received by the California Office of the Attorney General show that there is still confusion and possible expansion of the CCPA.
The true essence of Zero Trust lies in embracing a process-centric approach rather than relying solely on products. CISA has established a set of maturity pillars that guide organizations in their journey toward zero trust. Understanding these pillars is essential for CISOs and CPOs looking to build a robust security framework.
Legal research software provides fundamental support for the privacy office. Armed with up-to-the-minute knowledge, and a thorough understanding of current legal requirements, the privacy office can advise on compliance with privacy obligations across multiple jurisdictions. How do you choose the right solution?
