Tag: privacy
-
Security leaders top 10 takeaways for 2024
Tags: access, ai, attack, automation, best-practice, breach, business, ciso, cloud, compliance, corporate, crowdstrike, cybercrime, cybersecurity, data, deep-fake, detection, email, finance, fraud, governance, group, guide, hacker, identity, incident response, infosec, ISO-27001, office, okta, phishing, privacy, programming, regulation, risk, risk-management, saas, security-incident, service, software, startup, strategy, technology, threat, tool, training, vulnerabilityThis year has been challenging for CISOs, with a growing burden of responsibility, the push to make cybersecurity a business enabler, the threat of legal liability for security incidents, and an expanding attack landscape.As the year comes to a close, CISOs reflect on some of the takeaways that have shaped the security landscape in 2024.…
-
How companies can address bias and privacy challenges in AI models
In this Help Net Security interview, Emre Kazim, Co-CEO of Holistic AI, discusses the need for companies to integrate responsible AI practices into their business strategies … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/16/emre-kazim-holistic-ai-strategy/
-
Time of Reckoning Reviewing My 2024 Cybersecurity Predictions
Tags: ai, attack, automation, awareness, breach, business, chatgpt, china, compliance, cyber, cyberattack, cybercrime, cybersecurity, data, data-breach, disinformation, election, espionage, exploit, healthcare, incident response, infrastructure, jobs, law, linkedin, malware, monitoring, moveIT, phishing, privacy, ransomware, regulation, risk, russia, service, software, supply-chain, technology, threat, tool, ukraine, update, vulnerability, warfare, zero-dayThe brutal reality is that cybersecurity predictions are only as valuable as their accuracy. As 2024 comes to a close, I revisit my forecasts to assess their utility in guiding meaningful decisions. Anyone can make predictions (and far too many do), but actually being correct is another matter altogether. It is commonplace for security companies…
-
Google Timeline location purge causes collateral damage
Privacy measure leaves some mourning lost memories First seen on theregister.com Jump to article: www.theregister.com/2024/12/13/google_timeline_purge/
-
Texas AG launches investigation into 15 tech companies for violating child privacy law
Paxton has been aggressively enforcing Texas’ new privacy law. He sued General Motors for its data privacy practices in August and more recently has sent violation notices to eight companies he accused of violating Texans’ data privacy rights.]]> First seen on therecord.media Jump to article: therecord.media/texas-ag-launches-investigation-into-tech-firms-child-privacy
-
Thales and Imperva Win Big in 2024
Tags: access, api, application-security, attack, authentication, banking, business, ciso, cloud, communications, compliance, conference, control, cyber, cybersecurity, data, ddos, defense, encryption, firewall, gartner, group, guide, iam, identity, infosec, insurance, intelligence, malicious, mfa, microsoft, monitoring, privacy, risk, saas, service, software, strategy, threat, usaThales and Imperva Win Big in 2024 madhav Fri, 12/13/2024 – 09:36 At Thales and Imperva, we are driven by our commitment to make the world safer, and nothing brings us more satisfaction than protecting our customers from daily cybersecurity threats. But that doesn’t mean we don’t appreciate winning the occasional award. In the year…
-
Texas AG launches investigation into 14 tech companies for violating child privacy law
Paxton has been aggressively enforcing Texas’ new privacy law. He sued General Motors for its data privacy practices in August and more recently has sent violation notices to eight companies he accused of violating Texans’ data privacy rights.]]> First seen on therecord.media Jump to article: therecord.media/texas-ag-launches-investigation-into-tech-firms-child-privacy
-
Security researchers find deep flaws in CVSS vulnerability scoring system
The industrywide method for assessing the severity of vulnerabilities in software and hardware needs to be revised because it provides potential misleading severity assessment, delegates at Black Hat Europe were told Thursday.The Common Vulnerability Scoring System (CVSS) makes use of various metrics to quantify vulnerability severity. A presentation at Black Hat by cybersecurity experts from…
-
Texas adds data broker specializing in driver behavior to list of alleged privacy law violators
Arity, a data broker, is accused by Texas’ attorney general of sharing drivers’ behavior data without clear notice or consent. The notice follows several others to app companies in recent weeks. First seen on therecord.media Jump to article: therecord.media/arity-data-broker-texas-data-privacy-violation-notice
-
3 Common GDPR Challenges and How to Overcome Them
Practical tips for GDPR compliance Responsible for data protection and EU GDPR (General Data Protection Regulation) compliance? Chances are you’ve come across these 3 common challenges: Data privacy trainer Andy Snow hears about these challenges a lot, having trained over 4,000 people on the GDPR. Here are his practical tips for overcoming them. In this…
-
Trump FTC pick seen as mixed bag for data privacy enforcement
Ferguson has voted in favor of every privacy-related enforcement since he began his tenure as a commissioner in April, but a leaked memo he wrote to Trump suggest he will diverge from the current approach in important ways.]]> First seen on therecord.media Jump to article: therecord.media/trump-ftc-pick-ferguson-seen-as-mixed-bag-on-privacy
-
El Salvador’s cyber laws threaten media freedom and privacy, human rights experts warn
New laws in El Salvador “could be used to delete online publications that are critical of the government under the guise of data protection,” said Juanita Goebertus of Human Rights Watch. “This is a recipe for censorship and opacity.”]]> First seen on therecord.media Jump to article: therecord.media/el-salvador-cyber-data-protection-laws-human-rights-concerns
-
Websites and HIPAA: Navigating Online Tracking Technologies
Today, healthcare providers, insurers, and other HIPAA-covered entities are increasingly relying on websites to share information, engage with patients, and streamline operations. While websites offer numerous benefits, it’s crucial to understand the implications of online tracking technologies for the privacy and security of protected health information (PHI). This blog post examines the intersection of websites,…The…
-
Symmetrical Cryptography Pioneer Targets the Post-Quantum Era
Researchers at Cavero have created a correlating numbers mechanism, adding a layer of privacy that even threat actors can’t gain enough information to breach. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/symmetrical-cryptography-post-quantum-era
-
Traveling for the Holidays? Your Digital Identity Is Along for the Ride
Traveling for the Holidays? Your Digital Identity Is Along for the Ride andrew.gertz@t“¦ Tue, 12/10/2024 – 14:20 Identity & Access Management Access Control Thales – Cloud Protection & Licensing Solutions More About This Author > Thales Contributors: Frederic Klat, Sales Acceleration Director, and Ward Duchamps, Director of Strategy and Innovation, CIAM If you’re one…
-
Court Ruling Provides Clarity on Appeals Against ICO Fines
The UK’s privacy regulator the Information Commissioner’s Office has welcomed a Court of Appeal ruling First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/court-clarity-appeals-against-ico/
-
Let’s Encrypt to End Support for Online Certificate Status Protocol (OCSP)
Let’s Encrypt has officially announced its timeline to phase out support for the Online Certificate Status Protocol (OCSP). The nonprofit Certificate Authority (CA) plans to fully transition to Certificate Revocation Lists (CRLs) by mid-2025, citing privacy concerns and efficiency gains as primary reasons for the change. Phased Timeline for Transition Let’s Encrypt rolled out a…
-
Texas flags Sirius XM, three others for data privacy law violations
First seen on scworld.com Jump to article: www.scworld.com/brief/texas-flags-sirius-xm-three-others-for-data-privacy-law-violations
-
WhatsApp fixes bug that let users bypass ‘View Once’ privacy feature
Tags: privacyWeeks after a researcher reported the bug to WhatsApp, the company says it rolled out a long-term fix. First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/09/whatsapp-fixes-bug-that-let-users-bypass-view-once-privacy-feature/
-
Gen AI use cases rising rapidly for cybersecurity, but concerns remain
Tags: ai, attack, automation, awareness, ceo, ciso, compliance, control, cybersecurity, data, detection, finance, framework, fraud, GDPR, governance, grc, group, guide, Hardware, HIPAA, incident response, intelligence, international, malware, middle-east, monitoring, phishing, privacy, RedTeam, regulation, risk, risk-assessment, risk-management, soc, software, strategy, technology, threat, tool, training, usaGenerative AI is being embedded into security tools at a furious pace as CISOs adopt the technology internally to automate manual processes and improve productivity. But research also suggests this surge in gen AI adoption comes with a fair amount of trepidation among cybersecurity professionals, which CISOs must keep in mind when weaving gen AI…
-
Web hosting providers have started to accept crypto payments: Here’s why
Cryptocurrencies, from Bitcoin to altcoins and meme coins, revolutionize payments by offering privacy, reduced fees, faster transactions, enhanced… First seen on hackread.com Jump to article: hackread.com/web-hosting-providers-crypto-payments-heres-why/
-
Microsoft Expands Access to Windows Recall AI Feature
The activity-recording capability has drawn concerns from the security community and privacy experts, but the tech giant is being measured in its gradual rollout, which is still in preview mode. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/microsoft-expands-access-windows-recall-ai-feature
-
Ethyca Raises $10 Million for Data Privacy Platform
Data privacy solutions provider Ethyca has raised $10 million in a funding round led by Aspenwood Ventures and AVP. The post Ethyca Raises $10 Million for Data Privacy Platform appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/ethyca-raises-10-million-for-data-privacy-platform/
-
Experts Warn DHS Surveillance Tech Lacks Privacy Protections
Privacy Advocates Warn of Risks from Expanding DHS Use of AI and Facial Recognition. The U.S. Department of Homeland Security is reportedly expanding its use of emerging surveillance tools, including drones and artificial intelligence, without proper safeguards as experts warn of potential privacy violations and risks involving facial recognition and third-party data usage. First seen…
-
CISA Issues Guidance to Telecom Sector on Salt Typhoon Threat
Individuals concerned about the privacy of their communications should consider using encrypted messaging apps and encrypted voice communications, CISA and FBI officials say. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/cisa-issue-guidance-telecoms-salt-typhoon-threat