Troy Hunt

DECEMBER 19, 2017

Yesterday, I wrote the first part of this 5-part series on fixing data breaches and I focused on education. The next few parts of this series all focus on cures - how do we fix data breaches once bad code has already been written or bad server configurations deployed? " I don't know what's in those 42 pages.

Data breaches 53

Data breaches Personal data GDPR Data collection 53

Hunton Privacy

MARCH 14, 2018

On March 14, 2018, the Department of Justice and the Securities and Exchange Commission (“SEC”) announced insider trading charges against a former chief information officer (“CIO”) of a business unit of Equifax, Inc.

Cybersecurity 45

Cybersecurity Data breaches Sales Education 45

DLA Piper Privacy Matters

NOVEMBER 29, 2021

Among the organizations that have designated a DPO, the most represented sectors are, unsurprisingly, the public administration, education and health sectors. Such figures evidence the success of “mutualized” DPOs designated by two or more organizations. The Guide is composed of four main Parts : I. Provide information and advice.

GDPR 116

GDPR Compliance Personal data Communications 116

Hunton Privacy

OCTOBER 27, 2020

China’s Cybersecurity Law, Data Security Law (draft) and Draft PIPL constitute three fundamental laws on cybersecurity and data protection. The definition includes information that can identify data subjects as well as information that is related to the data subjects. Seven Principles for Data Processing.

Cybersecurity 111

Cybersecurity Data breaches Personal data Government 111

eSecurity Planet

OCTOBER 6, 2023

That makes email security software a worthwhile investment for organizations of all sizes. We analyzed the market for email security tools and software to arrive at this list of 7 top email security solutions, including their standout features, limitations and ideal use cases, followed by issues prospective buyers should consider.

Security 131

Security Phishing Compliance Cybersecurity 131

eSecurity Planet

SEPTEMBER 23, 2022

Securities and Exchange Commission (SEC) strongly advised public companies to improve their cybersecurity. While the new security proposals have not yet become law, cybersecurity managers can begin to prepare metrics and audits that will not only help comply with those laws, but can also help create positive change now.

Cybersecurity 121

Cybersecurity Compliance Risk Communications 121

Data Matters

JUNE 29, 2018

It was also the first to enact data breach notification legislation, which all other states have now followed. identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number or passport number.

GDPR 79

GDPR Privacy Sales Data breaches 79

eSecurity Planet

DECEMBER 10, 2023

The consistent implementation of firewall best practices establish a strong defense against cyber attacks to secure sensitive data, protect the integrity and continuity of business activities, and ensure network security measures function optimally.

Security 118

Security Education Access Risk 118

IT Governance

NOVEMBER 28, 2023

Before that, he taught computer systems and network technologies in further and higher education. Now, Cliff supports clients with their cyber security requirements, helping them prevent and manage cyber incidents. Why do you think we’re seeing this problem of financial entities, and other organisations, not being secure on their own?

Risk 52

Risk Compliance Government Security 52

Data Matters

JUNE 29, 2018

It was also the first to enact data breach notification legislation, which all other states have now followed. identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number or passport number.

GDPR 60

GDPR Privacy Sales Data breaches 60

Troy Hunt

NOVEMBER 7, 2018

The first one was about HSBC disclosing a "security incident" which, upon closer inspection, boiled down to this: The security incident that HSBC described in its letter seems to fit the characteristics of brute-force password-guessing attempts, also known as a credentials stuffing attack.

Passwords 94

Passwords Education Data breaches Security 94

eDiscovery Daily

NOVEMBER 26, 2017

While we were preparing to eat turkey and stuff ourselves with various goodies last week, the Cloud Security Alliance (CSA) provided an important guideline for compliance with the European Union General Data Protection Regulation (GDPR).

Cloud 40

Cloud GDPR Personal data Compliance 40

Data Matters

NOVEMBER 4, 2020

This new category includes certain government-issued identifications (such as social security, driver’s license, or passport numbers), account login information, mail and email contents, or data pertaining to precise geolocation, racial origin, religious affiliations, genetics, biometrics, consumer health, and sexual orientation data.

Privacy 122

Privacy B2B Sales Data breaches 122

eSecurity Planet

OCTOBER 24, 2023

The stakes are even higher for businesses, government and other organizations, as successful attacks can be devastating to operations and sensitive data. Exercise Caution with Emails The first two items on this list could be lumped together with a single warning: Don’t click. These scans can detect and eliminate hidden malware.

Passwords 118

Passwords Encryption Authentication Phishing 118

Data Matters

SEPTEMBER 24, 2019

Necessity : Personal data must be adequate, relevant and necessary in relation to the purposes for which they are processed. Accuracy : Personal data must be accurate and, where necessary, kept up-to-date. Retention : Personal data must not be kept for longer than is necessary. Mandatory data breach notification.

Personal data 68

Personal data GDPR Data Privacy Privacy 68

eSecurity Planet

APRIL 9, 2024

SaaS security checklists are frameworks for protecting data and applications in cloud-based environments. They serve as benchmarks for upholding strong security requirements, evaluating existing tools, and assessing potential solutions. Common threats include misconfigurations, cross-site scripting attacks, and data breaches.

Security 86

Security Compliance Cybersecurity Communications 86

IT Governance

DECEMBER 5, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The security researcher Bob Diachenko of SecurityDiscovery first identified the exposed information in mid-September. Data breached: over 300 million records.

Data Privacy 106

Data Privacy Privacy Manufacturing Retail 106

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. This page will enable consumers to exercise the right to opt-out of the sale of their personal information.

Privacy 58

Privacy Sales Education Compliance 58

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. Genetic Data: California Data Breach Notification and Data Security Law Amendment Bill.

Privacy 98

Privacy Insurance Security Data breaches 98

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. This page will enable consumers to exercise the right to opt-out of the sale of their personal information.

Privacy 58

Privacy Sales Compliance Cybersecurity 58

eDiscovery Daily

DECEMBER 10, 2017

In preparing for GDPR, all companies should start by doing the following: Determine Their Role Under the GDPR: Any organization that decides on why and how personal data is processed is essentially a “data controller”, regardless of geographic location. Identify all privacy-related data. Analyze all privacy-related data.

GDPR 34

GDPR e-Discovery IT Compliance 34

IT Governance

FEBRUARY 6, 2024

38,846,799 known records breached in 140 publicly disclosed incidents Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 88

Data Privacy Privacy Insurance Security 88

DLA Piper Privacy Matters

APRIL 23, 2020

These are defined as “decisions that result in the provision or denial of financial and lending services, housing, insurance, education enrollment, criminal justice, employment opportunities, health care services, or access to basic necessities such as food and water, or that impact civil rights of individuals.”

Privacy 52

Privacy Government Insurance IT 52

The Last Watchdog

MARCH 21, 2022

At the same time – in fact, as a direct result of data’s central importance – more adversaries are working harder and finding more nefarious ways to steal or otherwise compromise your data. As just one measure, the number of data breaches in the first nine months of 2021 exceeded all those in 2020, a new record.

Encryption 214

Encryption Cloud Privacy GDPR 214

Security Affairs

APRIL 21, 2023

Phishing-borne threats IBM’s 2022 Data Breach report highlighted how effective phishing-based attacks have become, being the second leading cause of cybersecurity incidents globally, by using a sample instance that affected hundreds of international entities.

Phishing 86

Phishing Security awareness Passwords Education 86

Hunton Privacy

SEPTEMBER 30, 2010

Mr. Vladeck began by reminding the audience that the FTC is aggressively enforcing on privacy and data security matters, having brought 29 cases to date. He stressed the importance of practicing good data hygiene from the beginning, with a focus on information security and data minimization.

Privacy 40

Privacy Data collection Data breaches Access 40

ForAllSecure

FEBRUARY 23, 2021

In a few minutes I’m going to talk to a pentester who’s written a book that can help take your current skills as a sys admin and security engineer and turn them into skills needed to become a great digital pentester. You want to see if they can penetrate your security, and cause it to break in some way. I mean really?

Security 52

Security IT Education Communications 52

ForAllSecure

FEBRUARY 23, 2021

In a few minutes I’m going to talk to a pentester who’s written a book that can help take your current skills as a sys admin and security engineer and turn them into skills needed to become a great digital pentester. You want to see if they can penetrate your security, and cause it to break in some way. I mean really?

Security 52

Security IT Education Communications 52

Thales Cloud Protection & Licensing

SEPTEMBER 30, 2021

The line between our online and offline lives is blurring and in a highly interconnected world, societal well-being, economic prosperity, and national security are impacted by the internet. This is the only way to keep people safe from attacks on their data, personal information, finances, and infrastructure. BeCyberSmart.”.

Ransomware 71

Ransomware Cybersecurity Encryption Education 71

IBM Big Data Hub

FEBRUARY 22, 2024

Artificial intelligence (AI) is transforming society, including the very character of national security. AI literacy is a must-have for security It’s important that personnel know how to deploy AI to improve organizational efficiencies. Data interpretation takes practice and is an interdisciplinary effort.

Artificial Intelligence 103

Artificial Intelligence Metadata Military Government 103

IT Governance

DECEMBER 6, 2023

As privacy professionals, we see consumers exercising their rights to withdraw consent to their data being processed via ‘opt out’ or ‘unsubscribe’ buttons, for example. You can design your data privacy systems such that they meet all these legal requirements. Quality DPO training educates and prepares the person for the role.

Data Privacy 59

Data Privacy Privacy GDPR IT 59

DLA Piper Privacy Matters

MARCH 4, 2021

In contrast, only 70 valid data breach notifications were received under the ePrivacy Regulations and 25 notifications under the Law Enforcement Directive. Around 60% of the data breaches notified occurred in the private sector. Data Protection Officers. support with refresher training and awareness programmes.

GDPR 105

GDPR Compliance Data breaches Marketing 105

John Battelle's Searchblog

JANUARY 25, 2019

Most of my career has been spent evangelizing the power of technology to positively transform business, education, and politics. First, Data. Big data, data breaches, data mining, data science…Today, we’re all about the data. Let The Data Flow. And second… Governance.

Government 92

Government IT Marketing ROT 92

KnowBe4

APRIL 25, 2023

Security researchers are jailbreaking large language models to get around safety rules. Soon, the CEO of security firm Adversa AI had GPT-4 spouting homophobic statements, creating phishing emails, and supporting violence." Security Culture Benchmarking feature lets you compare your organization's security culture with your peers NEW!

Insurance 71

Insurance Security awareness Phishing Ransomware 71

KnowBe4

APRIL 11, 2023

Share with friends, family and co-workers: [link] A Master Class on IT Security: Roger A. Grimes, Data-Driven Defense Evangelist at KnowBe4. This puts the onus on cybersecurity solutions and the users themselves, as the only additional means to keep the org secure. Full text of the alert is at the FTC website.

Passwords 77

Passwords Phishing Ransomware Security awareness 77

Data Matters

MARCH 22, 2022

According to Anne Neuberger, the Deputy National Security Advisor for Cyber and Emerging Technology, Russia has been conducting “preparatory activities”, which she said could include scanning of websites and hunting for software vulnerabilities. Deploy modern security tools to look for and mitigate threats. Encrypt data.

Cybersecurity 88

Cybersecurity Privacy Education Encryption 88

Data Matters

NOVEMBER 21, 2017

On 10 October 2017, Jamaica introduced into its House of Parliament a comprehensive Bill for privacy and data protection, entitled “An Act to Protect the Privacy of Certain Data and for Connected Matters.” If passed, the new law will be named the “Data Protection Act, 2017.” .

Privacy 68

Privacy Personal data Compliance Data breaches 68