837 articles · showing 181–240 of 14 pages
The Cybersecurity and Infrastructure Security Agency (CISA) has finalized a rule requiring critical infrastructure operators to report cybersecurity incidents within 72 hours. This new rule, stemming ...
Trellix, a cybersecurity vendor, suffered a source code breach, potentially exposing vulnerabilities in their products. This incident raises concerns about supply chain security and the trustworthines...
Over 150 malicious RubyGems were discovered to be exfiltrating sensitive data, including environment variables and application code, from unsuspecting developers. The attackers used a technique dubbed...
Cushman & Wakefield suffered a data breach after a vishing attack compromised an employee, granting the ShinyHunters group access to over 500,000 Salesforce records. The incident highlights the risks ...
I am sorry, I need the excerpt from the article to provide an accurate summary. Please provide the content of the article. Then I will give you a concise, factual synopsis....
The move recognizes the growing importance of AI and Cloud services in the EU's digital market and acknowledges the challenges in regulating these emerging technologies. This development highlights th...
The rapid proliferation of AI-related legislation in the healthcare sector signals an industry-wide recognition of the need for regulation, particularly regarding patient safety, transparency, and lia...
FINRA is expected to implement GenAI governance requirements for broker-dealers by 2026, necessitating firms to proactively establish robust frameworks for managing the risks and ethical consideration...
Please provide the excerpt from the cybersecurity article so I can write a concise and factual synopsis....
The UK CMA's guidance is a major breakthrough in regulating AI technology, introducing transparency and accountability in consumer markets. As AI agents become increasingly prevalent, this framework i...
The article highlights the FTC's enforcement action against OkCupid for sharing user photos with an undisclosed third-party company, demonstrating the importance of transparency in data sharing practi...
The OCR's enforcement of 42 CFR Part 2 highlights the importance of HIPAA regulations for protecting sensitive patient information, particularly in the context of substance use disorder treatment. Org...
The fine highlights the importance of robust age verification and the inadequacy of age self-declaration in complying with data protection regulations. Organizations must ensure they have strong safeg...
The CPPA is enforcing CCPA regulations, demonstrating a strengthened commitment to protecting consumer data and privacy. Companies must prioritize compliance efforts, focusing on accurate data categor...
This article highlights the importance of GDPR compliance in France, specifically highlighting common pitfalls, such as failing to obtain clear consent, using coercive or default consent, and inadequa...
The repeal of Colorado's AI law highlights the challenges of regulating AI at the state level. Without a clear framework in place, companies developing and using AI systems in Colorado may be left unc...
Despite a near-miss opportunity to delay its implementation, the EU's AI Act is set to become law in a matter of months, forcing companies to rapidly adapt to new regulations on data protection and tr...
The FTC's ban on Kochava highlights the importance of protecting users' sensitive location data. This ruling demonstrates the need for organizations to ensure they are not inadvertently sharing or sel...
The EU Digital Omnibus package seeks to streamline and standardize data protection regulations, bringing together existing laws under one umbrella. This move may reduce regulatory burdens on businesse...
As consumer privacy laws continue to evolve, businesses face new challenges in ensuring compliance across multiple states. With 20 states enforcing laws, companies need to prioritize data management, ...
Cyber insurance policies often exclude damages caused by emerging technologies like AI, leaving businesses vulnerable to financial losses from AI-related incidents. Companies need to carefully review ...
The article explores the intersection of AI and the law, highlighting the challenges of ensuring accountability and transparency in AI decision-making processes. It suggests that the lack of clear reg...
As digital therapy continues to evolve, compliance with multiple regulatory frameworks becomes increasingly complex, requiring healthcare providers to navigate HIPAA, 42 CFR Part 2, and FTC regulation...
The Sullivan & Cromwell incident demonstrates the potential for AI-generated documents to be used in court cases, which can lead to unintended consequences and damaged professional reputations. Compli...
The proposed changes are designed to address the increasing threats of money laundering, terrorist financing, and other illicit financial activities. By strengthening reporting requirements, increasin...
As the EU AI Act's deadline approaches, enterprises must take immediate action to ensure compliance by conducting thorough risk assessments, implementing mitigations, and maintaining transparent recor...
The ShinyHunters hacking group breached McGraw-Hill and Rockstar Games through a third-party vendor, exposing sensitive data and highlighting supply chain vulnerabilities. The incident raises concerns...
Citizens Bank and Frost Bank experienced data breaches due to a vulnerability in a third-party vendor, demonstrating the ongoing risk of supply chain attacks. The incident highlights a gap in adherenc...
New York's proposed RAISE Act and the White House AI framework create a complex compliance landscape for organizations developing or using AI. Companies must proactively assess their AI systems, prior...
Rituals Cosmetics confirmed a breach of its membership database, potentially exposing customer data and triggering GDPR notification requirements. The incident highlights the risk to loyalty program m...
I am sorry, I do not have enough information to provide an adequate answer. I need the article excerpt to provide a synopsis....
The incident highlights the need for businesses to take a proactive approach to OAuth governance and oversight to prevent security breaches and ensure compliance. Companies must invest in a robust OAu...
I need an excerpt of the article to provide an accurate synopsis. Please provide the text of the article excerpt so I can fulfill your request....
This legislation aims to protect children online by implementing age verification on operating systems, but it presents significant technical challenges and poses privacy risks due to the potential fo...
The Lloyds Bank app glitch highlights the importance of robust data security and the need for financial institutions to prioritize customer protection. The incident raises questions about the bank's a...
Colorado's AI Act presents a significant challenge to companies using AI and machine learning in high-stakes decision-making, requiring disclosure of these systems to improve transparency and fairness...
This incident demonstrates the difficulties high-profile organizations face in preventing repeat breaches, despite increased spending on security and adherence to regulations. As the second data breac...
This article sheds light on a pressing concern for U.S. water systems, which are increasingly susceptible to cyber threats. The revelation of Iranian hackers' presence within these systems underscores...
The Adobe BPO breach highlights the complexities of supply chain risk management in the outsourcing process, where vendor vendors can pose significant compliance and security risks. Companies must imp...
As the COPPA deadline nears, operators must review and implement policies to handle child-directed data, including changes to payment processing, age verification, and consent procedures, to avoid fin...
This incident highlights the potential consequences of inadequate server security and emphasizes the need for robust data protection measures, particularly in industries that handle sensitive financia...
The incident underscores the importance of robust cybersecurity measures in government agencies to prevent unauthorized access and protect sensitive data. The FBI's breach raises questions about the e...
I'm sorry, but I need the Excerpt to provide a 2-sentence synopsis of the cybersecurity article. Once you share the excerpt, I can help you with your request....
MIT's AI Governance Audit reveals significant discrepancies between stated policies and actual practices within organizations, highlighting a critical gap in effective AI governance. The audit emphasi...
The article provides a compliance breakdown of the Mercor data breach litigation, highlighting the importance of proactive data protection measures to prevent such incidents. Companies must take steps...
This case highlights the critical risks associated with AI development, particularly regarding data security and compliance. The alleged theft of credentials and AI secrets underscores the potential f...
This impending HIPAA Security Rule overhaul signifies a proactive step towards bolstering cybersecurity resilience within the healthcare sector. The updates push for a more standardized and robust app...
The White House AI framework is a significant development, calling for increased transparency, accountability, and oversight in AI development and deployment. Compliance teams, legal professionals, an...
Many defense contractors struggle with CMMC compliance due to inadequate planning and a lack of in-depth understanding of the requirements. A proactive approach, including gap assessments, robust trai...
While streamlined NIS2 compliance procedures are welcomed to ease implementation for organizations, DPAs are highlighting the importance of robust collaboration with ENISA. This collaboration is essen...
The FDA's updated guidance sets a new standard for medical device manufacturers' cybersecurity submissions, requiring a detailed risk mitigation approach and prioritizing patient safety and data prote...
The CPRA's cybersecurity audit requirement signifies a proactive push for data protection in California, compelling businesses to adopt robust security measures. The need for independent audits and ri...
The new cybersecurity strategy elevates the role of CISOs and organizations to assume greater accountability for managing cyber risks and responding to incidents. To meet these demands, CISOs must tra...
NYDFS Part 500 aims to protect sensitive consumer data held by financial institutions. The 2026 deadline emphasizes continuous monitoring, risk assessment, and robust incident response plans. Complian...
The CCPA lawsuit, influenced by AI-driven technology, has far-reaching implications for privacy compliance, adding to the complex landscape of data protection regulations. As AI and machine learning c...
As AI-generated fraud continues to rise, financial compliance teams must evolve their strategies to detect and prevent these sophisticated attacks. This requires the adoption of advanced technologies ...
The article highlights the initial struggles of Australia's recent age ban on social media, revealing that many platforms are finding loopholes to avoid compliance. This raises concerns about the effi...
The new regulations in California represent a significant shift in data protection standards, pushing companies to be more proactive in their approach to privacy. This development serves as a precurso...
This article highlights the upcoming requirements for data brokers under California's Delete Act, emphasizing the need for businesses to adapt their practices to provide consumers with the right to de...
These state-level initiatives demonstrate a growing trend towards stricter data protection laws, which may eventually drive federal legislation. As consumer data becomes increasingly valuable, states ...