AIIM

MAY 30, 2023

It was originally published in the AIIM Florida Chapter Newsletter in April 2023. This is an exercise that demonstrates that the law is not unchangeable and that, on the contrary, it can also be subject to improvement or flexibility when the circumstances and needs of society and institutions so warrant.

Archiving 141

Archiving Search queries Digital preservation Big data 141

Thales Cloud Protection & Licensing

OCTOBER 23, 2023

The Evolving Cybersecurity Threats to Critical National Infrastructure andrew.gertz@t… Mon, 10/23/2023 - 14:07 Cyberattacks on critical vital infrastructure can have disastrous results, forcing governments and regulatory bodies to pay close attention to intensifying the efforts to safeguard these industries. And only a mere 2.6%

Energy and Utilities 77

Energy and Utilities Cybersecurity Ransomware Authentication 77

Data Protection Report

NOVEMBER 2, 2023

Regulated firms remain responsible for any data that they outsource and, in line with this, they must exercise appropriate oversight of any outsourcing – firms may want to consider, for example, what would happen if there was an issue, including whether back-up is adequate and if they would receive appropriate information if something did go wrong.

GDPR 77

GDPR Risk Cybersecurity Compliance 77

Hunton Privacy

JULY 5, 2023

On June 28, 2023, the New York Department of Financial Services (“NYDFS”) published an updated proposed Second Amendment (“Amendment”) to its Cybersecurity Regulation, 23 NYCRR Part 500. The new MFA requirements, for example, would be subject to the two-year transition period.

Cybersecurity 113

Cybersecurity IT Compliance Financial Services 113

Hunton Privacy

MARCH 29, 2023

On Monday, March 27, 2023, the Centre for Information Policy Leadership (CIPL) at Hunton Andrews Kurth submitted a response to the California Privacy Protection Agency (CPPA)’s Invitation for Preliminary Comments on Proposed Rulemaking for cybersecurity audits, risk assessments and automated decisionmaking.

Risk 58

Risk Personal data Cybersecurity Compliance 58

ARMA International

APRIL 18, 2022

A data subject request is an action by an individual to exercise that right, and the organization has an obligation to respond to that request 10 11. Code § 1798.105 (State of California, Effective January 1, 2023). 6-1-1308 (State of Colorado, Effective July 2023). 577 (State of Virginia, Effective January 1, 2023).

Personal data 100

Personal data GDPR Privacy Records Management 100

Hunton Privacy

NOVEMBER 1, 2022

Below are key examples of topics addressed by the proposed regulations. Right to Request to Exercise Personal Data Rights (Rule 4.02 – Rule 4.07; 6.11). For example, the Colorado Department of Law will maintain a public list of opt-out mechanisms that have been recognized by the AG’s Office. Summary of Proposed Regulations.

Privacy 78

Privacy Personal data Data collection Compliance 78

Data Matters

JUNE 13, 2022

More than ever, a ‘joined up’ approach is required to assess them, and the UK’s main regulators are working together to try to formulate a coherent policy, setting an interesting example that could be a template for global approaches to digital regulation. This can result in difficulties in people exercising their rights (e.g.,

Paper 97

Paper Communications Risk Marketing 97

DLA Piper Privacy Matters

APRIL 25, 2023

Authors: Verena Grentzenberg and Katja-Maria Harsdorf On 20 April 2023, the Advocate General (“ AG ”), Nicholas Emiliou, published his Opinion in the case of FT v DW, (C-307/22 ). Data subjects are therefore able to exert considerable pressure on companies by exercising their right of access. 12(5) and Art.

Access 52

Access GDPR Personal data IT 52

DLA Piper Privacy Matters

MARCH 6, 2023

Authors: Heidi Waem and Simon Verschaeve On 21 February 2023, the Litigation Chamber of the Belgian Data Protection Authority ruled on a case relating to the lawfulness of a geolocation tracking system for employee vehicles used by a public authority.

GDPR 98

GDPR Personal data Compliance IT 98

Data Matters

JANUARY 31, 2022

The Statement of Scope also sets out 24 questions on which it is seeking industry input, which represent the start of its evidence-gathering exercise (see pp. Jan 26, 2023. As noted, the CMA is seeking the views of industry stakeholders on the proposed scope of its market study. 36 – 38 of the Statement of Scope). Aug – Sep, 2022.

Marketing 78

Marketing Privacy IT 78

eSecurity Planet

OCTOBER 6, 2023

Conducts phishing simulation exercises and offers training to educate staff on email security best practices, lowering the chance of becoming a victim of phishing attempts. Provides phishing simulation exercises to train employees and raise awareness about email security best practices. Pros Competitively priced at $3.03

Security 124

Security Phishing Compliance Cybersecurity 124

IBM Big Data Hub

AUGUST 16, 2023

During red team exercises, organizations pit their security controls, defenses, practices and internal stakeholders against a dedicated adversary that mounts an attack simulation. For example, how far would an attacker who wants to exfiltrate sensitive data get within my network before they trigger an alert?

Cybersecurity 59

Cybersecurity Security Access Risk 59

IBM Big Data Hub

FEBRUARY 23, 2024

billion fine in 2023. For example, a business that collects user health data needs stronger protections than one that collects only email addresses. While the GDPR offers a few examples—using new technologies, large-scale processing of sensitive data—it does not exhaustively list every high-risk activity.

GDPR 83

GDPR Compliance Personal data Privacy 83

IT Governance

NOVEMBER 28, 2023

Only a couple of weeks ago, I saw the NCSC Annual Review 2023 , which showed a 64% increase of the number of incident reports on last year. For DDoS [distributed denial-of-service] attacks, for example, it faced over 30% of attacks, making it the second-most attacked sector. Could you share some statistics on this trend?

Risk 52

Risk Compliance Government Security 52

Unwritten Record

MAY 18, 2023

On May 18, 2023, the Tennessee Valley Authority (TVA) will celebrate its 90 th Anniversary. Below is a prime example of a brochure created for the public, this one specifically focused on Chickamauga Lake. You will notice the wealth of navigational information included as you look through the maps. Recreational Maps, 1982-1993.

Agriculture 44

Agriculture Government Sales Archiving 44

Krebs on Security

MARCH 8, 2024

But in September 2023, the U.S. In October 2023, an Illinois resident filed a class-action lawsuit against Radaris for allegedly using people’s names for commercial purposes, in violation of the Illinois Right of Publicity Act. The FTC levied a $5.8

Privacy 241

Privacy Data Privacy Government Marketing 241

Security Affairs

APRIL 21, 2023

Email security provider Proofpoint’s 2023 State of the Phish report reflects an ever-escalating financial loss attributed to phishing attacks but also highlights the importance of how appropriate end-user behavior greatly reduces organizational impacts arising from them. The eight most common forms of phishing-based cyberattacks.

Phishing 86

Phishing Security awareness Passwords Education 86

Troy Hunt

NOVEMBER 6, 2023

Verification that supports the alleged source is usually quite straightforward , but disproving a claim can be a rather time consuming exercise, especially when a dataset contains fragments of truth mixed in with data that is anything but. Which is what we have here today.

Data breaches 137

Data breaches IT Personal data Passwords 137

Troy Hunt

FEBRUARY 19, 2023

For example, when an invoice is paid or a customer is updated, Stripe sends information about that event to HIBP and then lists each call on the webhooks dashboard in their portal: There are a whole range of different events that can be listened to and webhooks fired, here we're seeing just a couple of them that are self explanatory in name.

Metadata 135

Metadata IT Risk Encryption 135

IT Governance

DECEMBER 20, 2022

Although Vladimir Putin and his sympathisers assured the world that they were simply conducting military exercises, the inevitable occurred on 24 February, when troops mobilised and war was declared. The attacker might, for example, search social media to find the name, email address and job title of a company director.

Security 132

Security Data breaches Ransomware Military 132

Data Protection Report

NOVEMBER 29, 2023

On November 27, 2023, the California Privacy Protection Agency (“CPPA”) released a first draft of rules for automated decision-making technologies under California’s privacy law. For example, to what extent would a model already trained on consumer’s personal information be permitted to continue operating following an opt-out request?

Access 62

Access Privacy Personal data Authentication 62

KnowBe4

JULY 5, 2023

CyberheistNews Vol 13 #27 | July 5th, 2023 [Heads Up] Massive Impersonation Phishing Campaign Imitates Over 100 Brands and Thousands of Domains A year-long phishing campaign has been uncovered that impersonates 100+ popular clothing, footwear, and apparel brands using at least 10 fake domains impersonating each brand. reports. "As

Phishing 73

Phishing Security awareness Passwords Computer and Electronics 73

IT Governance

DECEMBER 6, 2023

As privacy professionals, we see consumers exercising their rights to withdraw consent to their data being processed via ‘opt out’ or ‘unsubscribe’ buttons, for example. Free webinar: Building Your Career as a DPO and Privacy Lead This Thursday, 7 December 2023, we’re hosting a 45-minute webinar starting at 3:00 pm (GMT).

Data Privacy 59

Data Privacy Privacy GDPR IT 59

Troy Hunt

JUNE 15, 2023

It was an all or nothing affair that nuked the lot of them whereas now, it's a domain-by-domain exercise. Let me illustrate by example: in January this year, I loaded a rather large breach into HIBP: New scraped data: Twitter had over 200M accounts scraped from a vulnerable API in 2021. 98% were already in @haveibeenpwned.

IT 92

IT Cloud Mining Metadata 92

Robert's Db2

DECEMBER 27, 2023

Take, for example, Db2 12 function level 509. When there is a requirement to take a Db2 catalog to a higher level, that change is accomplished via execution of the Db2 utility called CATMAINT, with a specification of (for example) UPDATE LEVEL(V12R1M509). That is one purpose of the APPLCOMPAT package bind specification.

Libraries 62

Libraries Metadata IT Access 62

ForAllSecure

FEBRUARY 8, 2023

She’ll also be presenting again at RSAC 2023 in April. So that could happen for example, through phishing through fingers, main misconfigured things very well in the rubble. So that could be for example, through our hiding services. It also might be, for example, by hiding yourself in terms of permissions.

Access 40

Access IT Phishing Passwords 40

IBM Big Data Hub

OCTOBER 16, 2023

The focus is on the ability to exercise control, make decisions and enforce legal and regulatory obligations related to the data, regardless of its physical location. The Digital India Bill 2023 aims to replace India’s existing Information Technology Act of 2000 and provide comprehensive oversight of the digital landscape.

Cloud 73

Cloud Compliance Data Privacy Privacy 73

IBM Big Data Hub

AUGUST 7, 2023

For example, organizations typically rely on trust in the cloud provider, expecting them to refrain from intentionally blocking client access to services, despite having the capability to do so. The Orion blockchain database offers a robust solution that enhances transparency, authenticity and integrity across business ecosystems.

Blockchain 68

Blockchain Government Authentication Manufacturing 68

KnowBe4

APRIL 11, 2023

CyberheistNews Vol 13 #15 | April 11th, 2023 [The New Face of Fraud] FTC Sheds Light on AI-Enhanced Family Emergency Scams The Federal Trade Commission is alerting consumers about a next-level, more sophisticated family emergency scam that uses AI which imitates the voice of a "family member in distress." There's a panicked voice on the line.

Passwords 73

Passwords Phishing Ransomware Security awareness 73

ForAllSecure

APRIL 19, 2023

Michael Coden, Associate Director, Cybersecurity, MIT Sloan, along with Michael Stonebreaker will present this novel concept at RSAC 2023. For example, you’d need several different systems, each running just one program, to accomplish a task. I get my exercises online. You can learn more at dbos-project.github.io.

Analytics 40

Analytics Communications Computer and Electronics Cybersecurity 40

ForAllSecure

MAY 30, 2023

VAMOSI: And then there are examples where the ransomware operators are not serious about the ransom-- NotPetya, for example. Does that mean that there was no ransomware occurring? It was still very active within the last year, just not at the volumes that we were seeing in previous years. Are there others like that?

Ransomware 40

Ransomware Encryption Authentication Communications 40

Data Protection Report

NOVEMBER 9, 2023

On October 30, 2023, after recognizing that Artificial Intelligence (AI) is the most consequential technology of our time and anticipating that it will accelerate more technological change in the next five to ten years than witnessed in the past fifty, President Biden issued an Executive Order directing actions to establish new AI standards.

Artificial Intelligence 73

Artificial Intelligence Security Privacy Risk 73

AIIM

JANUARY 10, 2019

billion in revenue by 2023. While a blockchain provides a trusted framework for the integrity and auditability of transactions it stands in stark contrast to the ambition of the GDPR Regulation, the foundation of which is to enable data subjects to exercise greater degree of control over the processing of personally identifiable information.

Blockchain 115

Blockchain GDPR Privacy Personal data 115

Data Matters

MARCH 4, 2021

The VCDPA, which will not enter into effect until January 1, 2023, borrows heavily from the California Consumer Privacy Act (CCPA) and the European Union (EU) General Data Protection Regulation (GDPR). A controller must comply with an authenticated consumer request to exercise a right. Controllers must. 6501 et seq.). Controllers must.

Personal data 74

Personal data GDPR Sales Privacy 74

Schneier on Security

MARCH 19, 2024

In extreme examples, some people have formed close, perhaps even familial, bonds with AI chatbots. The proliferation of open-source AI development in 2023, successful to an extent that startled corporate players, is proof of this. If you think of your AI as a friend or therapist, that can be a powerful form of lock-in.

Artificial Intelligence 113

Artificial Intelligence Marketing Risk Government 113