Virginia is the latest state to adopt a consumer privacy law, with the Virginia Consumer Data Protection Act (CDPA) signed by the governor in early March. The bill adopts some of the terms seen in the CPRA.
Billions of devices may be affected by a UPnP vulnerability that allows hackers to conduct a DDoS attack and perform data exfiltration on the local network.
A bill establishing a new vulnerability disclosure program for federal contractors has passed the House, and will now move on to the Senate to be reviewed by the Committee on Homeland Security and Governmental Affairs.
The recent cyber attacks on Ukraine appeared to use distributed denial of service (DDoS) techniques to take several government websites offline for several hours.
The 2021 World Economic Forum (WEF) Global Risk Report has named "cybersecurity challenges" as the 4th most pressing danger to the global economy.
WEF's newly-released principles for board governance of cybersecurity offer a base of best practices for dealing with increasing cyber risk, with a new element being an emphasis on an organization-wide focus.
Investors can no longer ignore the cyber resilience of their target companies, in fact the new WEF report shows they should be actively play a role in incentivizing responsible and secure innovation.
A new data sharing policy is universalizing personal information among Facebook products. WhatsApp informed users of this change in a privacy policy update, which did not provide any means of opting out.
A WhatsApp security flaw on the desktop version was recently discovered that allows hackers to rifle through user accounts and remotely access their files on PC via malicious messages.
The new "Gold Eagle" proposal from the White House looks to establish an AI security clearinghouse to be shared by government and private critical infrastructure companies, in the interest of coordinating cyber defense efforts as frontier AI models reshape the threat landscape.
