Krebs on Security

MARCH 22, 2022

Russian authorities allege Vrublevsky operated several fraudulent SMS-based payment schemes, and facilitated money laundering for Hydra , the largest Russian darknet market. In February 2017, Horohorin was released after serving four years in a U.S. A Google-translated snippet of the hacked ChronoPay Confluence installation.

Risk 201

Risk Marketing Archiving IT 201

DLA Piper Privacy Matters

MAY 31, 2018

There are specific rules on: • marketing calls, emails, texts and faxes; • cookies (and similar technologies); • keeping communications services secure; and. PECR sits alongside the Data Protection Act 2018 and the GDPR and provide data subjects with specific privacy rights in relation to electronic communications. Proposals for change.

Government 40

Government Marketing Communications Privacy 40

Data Protection Report

AUGUST 16, 2017

On the 7 th August 2017, the UK’s Government Department for Digital, Culture, Media and Sport issued a Statement of Intent (the Statement ) outlining its planned reforms of the UK’s data protection laws which are to be implemented by the Data Protection Bill (the Bill ).

Government 40

Government GDPR Personal data Insurance 40

Data Protection Report

AUGUST 3, 2017

On August 1, 2017, US Senators unveiled a bipartisan bill to mandate baseline cybersecurity requirements for internet connected devices purchased by the federal government. Given the federal government’s purchasing power, this bill could move the entire IoT market toward better cybersecurity practices.

IoT 40

IoT Cybersecurity Insurance Marketing 40

IT Governance

JULY 31, 2019

Documenting your processing activities can also support good data governance, and help you to demonstrate your compliance with other aspects of the GDPR. Privacy Notice (Articles 12, 13, and 14). Employee Privacy Notice (Articles 12, 13 and 14). Personal Data Protection Policy (Article 24). Data Retention Schedule (Article 30).

GDPR 77

GDPR Data breaches Personal data Compliance 77

IT Governance

DECEMBER 13, 2018

This week, in our last podcast of the year, we revisit some of the biggest information security stories from the past 12 months. Hello and welcome to the final IT Governance podcast of 2018. million US customers had been affected by 2017’s Equifax breach , bringing the total number of victims to 147.9

Data breaches 71

Data breaches Personal data Access GDPR 71

The Last Watchdog

FEBRUARY 6, 2019

The surveillance regime the UK government has built seriously undermines our freedom,” Megan Golding, a lawyer speaking for privacy advocates, stated. We’re talking about an enormously powerful surveillance capability that no government has ever had in the history of humanity,” Stanley says.

Privacy 157

Privacy Retail Authentication Artificial Intelligence 157

Privacy and Cybersecurity Law

AUGUST 1, 2018

The ICO has been involved in producing significant GDPR guidance in the last 12 months and has also run an internal change management process to ensure it is up to the demands placed upon it by GDPR (think: extra staff, new breach reporting functions and helplines). The Department for Education. Data Sharing Codes of Practice.

GDPR 40

GDPR Data breaches Personal data Privacy 40

IT Governance

JUNE 29, 2018

Hello and welcome to the IT Governance podcast for Friday, 29 June 2018. Exactis, a Florida-based marketing and data aggregation company, has reportedly exposed a database containing 340 million data records via a publicly accessible server. Here are this week’s stories. Information about BetVictor’s back-end systems and portals?—?usernames,

GDPR 76

GDPR Passwords Data breaches Access 76

IBM Big Data Hub

MAY 26, 2023

Cloud computing offers the potential to redefine and personalize customer relationships, transform and optimize operations, improve governance and transparency, and expand business agility and capability. In 2017, 94% of hospitals used electronic clinical data from their EHR.

Cybersecurity 73

Cybersecurity Cloud Compliance Computer and Electronics 73

Preservica

NOVEMBER 7, 2019

Implementing this change became a key part of the organisational mission between 2012 - 2017. In a period of 12-18 months, the experimental alpha-style platform was up and running. In a period of 12-18 months, the experimental alpha-style platform was up and running. Preparing for the digital deluge. What next at the NLA?

Digital preservation 40

Digital preservation Libraries Archiving Government 40

CGI

OCTOBER 12, 2017

Thu, 10/12/2017 - 04:08. However, as attack vectors have evolved, corporations are now recognizing that the financial impact of cyber breaches are not just the potential lost revenue from reputational damage, but also the lower share prices and market valuations. The cyber times they are a-changing. What executives can do.

Cybersecurity 40

Cybersecurity Security awareness Marketing Government 40

eSecurity Planet

FEBRUARY 16, 2021

The internet is fraught with peril these days, but nothing strikes more fear into users and IT security pros than the threat of ransomware. A ransomware attack is about as bad as a cyber attack can get. Here, then, is a comprehensive look at ransomware, what it is, how to prevent it, and what to do if you become one of its unfortunate victims.

Ransomware 97

Ransomware Encryption Insurance Cloud 97

Data Matters

MARCH 10, 2021

On February 10, 2021, the Council of the European Union (which includes representatives of the European Union (EU) member states, hereinafter Council) reached an agreement on the ePrivacy Regulation proposal that governs the protection of privacy and confidentiality of electronic communications services (ePrivacy Regulation).

GDPR 68

GDPR Metadata Communications Privacy 68

Hunton Privacy

OCTOBER 5, 2016

The workshop was attended by almost 120 delegates from businesses, 12 data protection authorities (“DPAs”), four EU Member State governments, the EU Commission and the European Data Protection Supervisor, a non-DPA regulator, several academics and the IAPP. Additional topics will be covered in future phases of the CIPL project.

GDPR 49

GDPR Risk IT Compliance 49

Data Protector

OCTOBER 11, 2017

Data is not just a resource for better marketing, better service and delivery. New technologies have started innumerable economic revolutions, and the pace of change continues to accelerate. Data is used to build products themselves. It has become a cliché that data is the new oil. change it substantially. This is “Hamlet” without the prince.

GDPR 120

GDPR Personal data Government IT 120

Info Source

JUNE 18, 2019

How else can you explain a well-funded ($75 million in venture investment) start-up entering the mature and rather staid market for document scanning services? With the current technology we have, including using vision-guided robots to create quality line-scans, we believe we have leapfrogged the current capture market 10-fold.

Paper 40

Paper Marketing IT Cloud 40

Hunton Privacy

DECEMBER 15, 2017

On December 12, 2017, the Federal Trade Commission hosted a workshop on informational injury in Washington, D.C. Consideration was given to whether the same factors apply in both the privacy and security contexts, the risk of potential injury versus realized injury and when government intervention is warranted.

Privacy 42

Privacy Retail Risk Insurance 42

Data Matters

MAY 9, 2019

state regulators risk federal preemption of state law unless they adopt such reinsurance collateral reforms within 60 months from September 2017 – the date the Covered Agreement with the European Union (EU) was signed. This post summarizes the highlights from this meeting.

Insurance 68

Insurance Blockchain Big data Risk 68

Data Matters

APRIL 23, 2018

Increasingly, thought leaders, professional organizations, and government agencies are beginning to provide answers. Creating an enterprise-wide governance structure. More and more, directors are viewing cyber-risk under the broader umbrella of corporate strategy and searching for ways to help mitigate that risk.

Cybersecurity 60

Cybersecurity Risk Passwords Authentication 60

Data Protection Report

JUNE 9, 2022

On 12 May 2022 EDPB adopted Guidelines on the calculation of administrative fines (the Guidelines ). The Guidelines supplement the Article 29 Working Party’s Guidelines on the application and setting of administrative fines ( WP253 ) adopted in October 2017 and recommends that the two are read together.

GDPR 52

GDPR Compliance Personal data IT 52

eDiscovery Daily

JANUARY 30, 2018

be interviewing several industry thought leaders to see what they think are the significant trends for 2017 and, which of those are evident at LTNY. 11:00 AM – 12:00 PM: The Role of Artificial Intelligence in Legal and Business Processes and How to Defend Its Use. While at the show, we will (for the eighth year in a row!)

e-Discovery 34

e-Discovery Artificial Intelligence GDPR Education 34

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

In the aftermath of the Cambridge Analytica scandal, and in the footsteps of Europe’s General Data Protection Regulation (“GDPR”), California privacy advocates introduced a ballot initiative on October 12, 2017 called “The Consumer Right to Privacy Act of 2018” (No. The CCPA goes into effect January 1, 2020. What Is Covered?

Privacy 58

Privacy Sales Compliance Cybersecurity 58

eDiscovery Daily

JANUARY 29, 2018

Sessions in the main conference tracks include: 12:00 – 1:00 PM: Don’t be a ‘Burden’: Arguments Around Proportionality. How can in-house lawyers ensure that information governance policies and practices adequately address the legal impacts of these data sources? There are plenty of interesting sessions today.

e-Discovery 34

e-Discovery GDPR Compliance Analytics 34

Data Matters

AUGUST 24, 2018

The National Association of Insurance Commissioners (NAIC) held its Summer 2018 National Meeting in Boston, Massachusetts, from August 4 to 7, 2018. This post summarizes the highlights from this meeting. NAIC Continues its Evaluation of Insurers’ Use of Big Data .

Insurance 60

Insurance Big data e-Delivery Risk 60

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

In the aftermath of the Cambridge Analytica scandal, and in the footsteps of Europe’s General Data Protection Regulation (“GDPR”), California privacy advocates introduced a ballot initiative on October 12, 2017 called “The Consumer Right to Privacy Act of 2018” (No. The CCPA goes into effect January 1, 2020. What Is Covered?

Privacy 58

Privacy Sales Education Compliance 58

The Last Watchdog

AUGUST 15, 2019

From a high level, ransomware is essentially an open platform that operates on market principles, around which a thriving ecosystem of suppliers and specialists has taken shape. However, that’s more a function of hackers targeting individuals less, and companies and governments more. “All we know is MONEY! Tik Tak, Tik Tak, Tik Tak!”

Ransomware 196

Ransomware Access Cybersecurity Insurance 196

eSecurity Planet

SEPTEMBER 15, 2021

These claims are lacking in engineering rigor and are seemingly just marketing pitches, but it’s hard to find a major tape vendor that hasn’t pushed this angle. Here are some examples: Quantum. Iron Mountain. Spectra Logic. Since all the system data is encrypted, the hackers have admin/root privileges. A device is a device.

Ransomware 143

Ransomware Libraries Encryption Passwords 143

ForAllSecure

AUGUST 14, 2019

The claims are found in marketing pitches for an enhanced version of NSO Group's Pegasus tool. This effectively limits its market to government customers, and these, indeed, seem to have been NSO Group's principal buyers. Government agencies are also targeted. Equifax receives its judgment. Pegasus is pricey.

Cloud 52

Cloud Energy and Utilities Security Access 52

ForAllSecure

AUGUST 14, 2019

The claims are found in marketing pitches for an enhanced version of NSO Group's Pegasus tool. This effectively limits its market to government customers, and these, indeed, seem to have been NSO Group's principal buyers. Government agencies are also targeted. Equifax receives its judgment. Pegasus is pricey.

Cloud 40

Cloud Energy and Utilities Security Access 40

ForAllSecure

AUGUST 14, 2019

The claims are found in marketing pitches for an enhanced version of NSO Group's Pegasus tool. This effectively limits its market to government customers, and these, indeed, seem to have been NSO Group's principal buyers. Government agencies are also targeted. Equifax receives its judgment. Pegasus is pricey.

Cloud 40

Cloud Energy and Utilities Security Access 40

ForAllSecure

AUGUST 12, 2019

You're obviously in the government space which means you love your acronyms. David Brumley, CEO of ForAllSecure and CMU Professor, sat down with hosts Josh Bressers and Kurt Seifried to discuss the future of automated security. The 30 minute podcast is available for listening below. The full transcript is also available below. Can you fix it?

Security 52

Security IT Marketing IoT 52

Troy Hunt

SEPTEMBER 17, 2018

pic.twitter.com/IYf2Km4LkD — Troy Hunt (@troyhunt) July 14, 2017. That's it - I'm calling it - extended validation certificates are dead. Sure, you can still buy them (and there are companies out there that would just love to sell them to you!), However, if you look at the URL.

Marketing 109

Marketing Phishing Encryption IT 109

ForAllSecure

AUGUST 12, 2019

You're obviously in the government space which means you love your acronyms. David Brumley, CEO of ForAllSecure and CMU Professor, sat down with hosts Josh Bressers and Kurt Seifried to discuss the future of automated security. The 30 minute podcast is available for listening below. The full transcript is also available below. Can you fix it?

Security 40

Security IT Marketing IoT 40

ForAllSecure

AUGUST 12, 2019

You're obviously in the government space which means you love your acronyms. David Brumley, CEO of ForAllSecure and CMU Professor, sat down with hosts Josh Bressers and Kurt Seifried to discuss the future of automated security. The 30 minute podcast is available for listening below. The full transcript is also available below. Can you fix it?

Security 40

Security IT Marketing IoT 40

eSecurity Planet

JANUARY 11, 2022

We’ll start with the top 10 overall and then look at other noteworthy startups in a number of markets. Open Raven analyzes data at rest, classifies inventory, and automates data governance as these become critical capabilities for the hybrid infrastructure’s security posture. Series A SenseOn 2017 London, UK 61 $26.4

Cybersecurity 142

Cybersecurity Cloud Compliance Analytics 142

eSecurity Planet

APRIL 26, 2022

Investments in cybersecurity more than doubled from $12 billion to $29.5 billion in 2021, and growing concerns over data security , software supply chains , and ransomware suggest the market will remain strong through economic ups and downs. Accel’s largest presence is in the Bay Area with sizable teams in London and Bangalore.

Cybersecurity 128

Cybersecurity Cloud Marketing Security 128