Schneier on Security

JULY 1, 2021

To overcome these challenges and champion the positive effects of cyber insurance, this paper calls for a series of interventions from government and industry. To date, the UK government has taken a light-touch approach to the cyber insurance industry. Often, that’s paying the ransom.

Insurance 283

Insurance Cyber Insurance Ransomware Marketing 283

Security Affairs

MARCH 1, 2023

The Canadian government announced it will ban the video app TikTok from all government-issued devices over security concerns. The app will be removed from government devices this week. The app “presents an unacceptable level of risk to privacy and security,” explained Canada’s chief information officer.

Mobile 75

Mobile Government Data collection Data privacy 75

CSO Magazine

AUGUST 15, 2022

have questioned its data collection practices and potential ties to the Chinese state. The concerns have deepened after Buzzfeed published a report saying that data of some American users had been repeatedly accessed from China. Both lawmakers and citizens in the U.S. user traffic to servers operated by Oracle.

Data collection 112

Data collection Risk Government 112

Malwarebytes

JULY 5, 2022

In a letter dated June 24, 2022, Carr told Tim Cook and Sundar Pichai that “TikTok poses an unacceptable national security risk due to its extensive data harvesting being combined with Beijing’s apparently unchecked access to that sensitive data.” Excessive data collection.

Risk 145

Risk Data collection Surveillance Media 145

Security Boulevard

JANUARY 18, 2024

How do we gauge how risky it is and how do we ensure that future APIs are not putting the enterprise at risk? This can not be done without major risk unless organizations have created and mandated corporate standards on what a "good" API actually is from a security standpoint. Defining and sharing what good means.

Risk 59

Risk Government Artificial Intelligence Threat Detection 59

Security Boulevard

APRIL 27, 2023

Why Overthinking Risk Will Turn You into Stone Risk is an enabler of Analysis Paralysis. Organizations invest vast amounts of money, time, and human capital in identifying, analyzing, and reporting potential risks within their domain. Risk exists no matter what an organization is involved in.

Risk 64

Risk Data collection CISO Government 64

Schneier on Security

NOVEMBER 9, 2018

The boundaries between research and grey data are blurring, making it more difficult to assess the risks and responsibilities associated with any data collection. Many sets of data, both research and grey, fall outside privacy regulations such as HIPAA, FERPA, and PII.

Data collection 208

Data collection Cyber Risk Risk Government 208

Schneier on Security

DECEMBER 19, 2023

A society where big companies tell blatant lies about how they are handling our data—­and get away with it without consequences­—is a very unhealthy society. A key role of government is to prevent this from happening. On a personal level we risk losing out on useful tools.

Government 264

Government Banking Risk Internet 264

eSecurity Planet

JULY 22, 2021

It’s gained more momentum in recent weeks with the Department of Defense and the Biden Administration , in reaction to such high-profile attacks as those on SolarWinds , Colonial Pipeline and Kaseya , urging government agencies and private companies to adopt a zero-trust architecture. ” Most Devices Communicate in Plaintext.

IoT 145

IoT Risk Architecture Manufacturing 145

Centraleyes

MARCH 27, 2024

However, with its exponential growth comes a pressing need for governance and regulation to ensure its responsible and ethical deployment. The standard provides guidelines for governing and managing AI technologies, ensuring accountability, transparency, and data privacy throughout the AI lifecycle.

Artificial Intelligence 52

Artificial Intelligence Risk Data collection Technology 52

Security Boulevard

FEBRUARY 22, 2024

Data collection and use policies need to be reexamined because of AI. The FTC is trying to address the issue. The post TEGWAR, AI and the FTC – Gov’t Agency Warns of Deceptive AI Contract Language appeared first on Security Boulevard.

Data collection 69

Data collection Data privacy Risk Government 69

SecureWorld News

JANUARY 17, 2024

Artificial intelligence (AI) promises to transform major sectors like healthcare, transportation, finance, and government over the coming years. As adoption accelerates, so too do emerging cybersecurity risks. Continuous risk assessment and governance throughout the AI system lifecycle remains essential.

Artificial Intelligence 90

Artificial Intelligence Data collection Architecture Healthcare 90

CyberSecurity Insiders

FEBRUARY 1, 2022

–( BUSINESS WIRE )–MITRE and DTEX Systems , the Workforce Cyber Intelligence & Security Company , today announced a partnership to elevate insider risk awareness and human-informed cyber defense strategies through behavioral-based research and the launch of the MITRE Inside-R Protect program. . & MCLEAN, Va.–(

Risk 69

Risk Government Data collection Cyber threats 69

Schneier on Security

SEPTEMBER 30, 2022

Users in countries not covered by data protection regulations, such as GDPR in the EU and the California Consumer Privacy Act in the U.S., are at higher privacy risk. One hundred and three apps have differences based on country in their privacy policies.

Mobile 309

Mobile Internet Internet VPN 309

Security Affairs

FEBRUARY 12, 2023

Australia’s Defense Department announced that they will remove surveillance cameras made by Chinese firms linked to the government of Beijing. Australia’s Defense Department is going to replace surveillance cameras made by Chinese firms Hikvision and Dahua, who are linked to the government of Beijing. ” reported The Guardian.

Surveillance 82

Surveillance Government Manufacturing Risk 82

Centraleyes

MARCH 14, 2024

Initially introduced as The NIST Privacy Framework : A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0, The adjustment of the NIST Privacy Framework in response to new frameworks like the NIST’s AI Risk Management Framework (AI RMF) and the update to the NIST Cybersecurity Framework (CSF) to Version 2.0

Government 52

Government Risk Artificial Intelligence Cybersecurity 52

Schneier on Security

JANUARY 14, 2020

The security risks inherent in Chinese-made 5G networking equipment are easy to understand. Because the companies that make the equipment are subservient to the Chinese government, they could be forced to include backdoors in the hardware or software to give Beijing remote access. What's more, U.S.

Data collection 350

Data collection Software Marketing Government 350

SecureWorld News

JUNE 10, 2021

government to evaluate the threats that apps connected to foreign adversaries have. over security concerns due to the personal information the apps could collect on American consumers. Executive Order on Protecting Americans' Sensitive Data from Foreign Adversaries. Trump had previously tried to ban the apps from the U.S.

Computers and Electronics 88

Computers and Electronics Data collection Government Media 88

Malwarebytes

MAY 22, 2024

On Monday, the computing giant unveiled a new line of PCs that integrate Artificial Intelligence (AI) technology to promise faster speeds, enhanced productivity, and a powerful data collection and search tool that screenshots a device’s activity—including password entry—every few seconds.

Artificial Intelligence 111

Artificial Intelligence Passwords Accountability Media 111

Centraleyes

APRIL 1, 2024

Governance, Risk, and Compliance (GRC) platforms help organizations optimize their governance strategies, streamline risk management processes, and ensure compliance with regulatory requirements. G is for Governance Governance is set to take center stage in the GRC world, with the NIST CSF 2.0

Risk 52

Risk Government Artificial Intelligence Software 52

Malwarebytes

MARCH 14, 2024

Since 2020, several governments and organizations have banned, or considered banning, TikTok from their staff’s devices, but a complete ban of an internet app would be a first in the US. For example, TikTok has repeatedly claimed the Chinese government never demanded access to US data and that TikTok would not comply if it did.

Identity Theft 101

Identity Theft Government Media Data collection 101

Krebs on Security

MAY 18, 2022

for “deceptive statements” the company and its founder allegedly made over how they handle facial recognition data collected on behalf of the Internal Revenue Service , which until recently required anyone seeking a new IRS account online to provide a live video selfie to ID.me. ’ ID.me

Government 245

Government Accountability Surveillance Data collection 245

Schneier on Security

SEPTEMBER 26, 2019

There is definitely a national security risk in buying computer infrastructure from a country you don't trust. It's also why the United States has blocked the cybersecurity company Kaspersky from selling its Russian-made antivirus products to US government agencies. The risk of discovery is too great, and the payoff would be too low.

Surveillance 218

Surveillance Wireless Government Internet 218

Centraleyes

NOVEMBER 20, 2023

ESG Disclosures According to the annual survey of sustainability professionals conducted by WSJ Pro in the spring of 2023, nearly 66% of respondents indicated that their respective companies disclosed information about environmental, social, and governance strategies. What is an ESG Audit? Who Performs an ESG Audit?

Government 52

Government Energy and Utilities Risk Technology 52

The Last Watchdog

JANUARY 23, 2024

Between social media, mobile apps, internet-connected devices and the rise of artificial intelligence vast amounts of personal data is being gathered constantly, putting individuals’ privacy at risk,” said Lisa Plaggemier, Executive Director at NCA. Give Data Brokers the Slip! Protect Our Kids’ Privacy!

Data privacy 100

Data privacy Education Artificial Intelligence Cybersecurity 100

SecureWorld News

JUNE 10, 2021

government to evaluate the threats that apps connected to foreign adversaries have. over security concerns due to the personal information the apps could collect on American consumers. Executive Order on Protecting Americans' Sensitive Data from Foreign Adversaries. Trump had previously tried to ban the apps from the U.S.

Computers and Electronics 52

Computers and Electronics Data collection Government Media 52

Security Affairs

JUNE 16, 2020

On Friday, the Norwegian Data Protection Authority (Norwegian: Datatilsynet) issued a warning that it would stop the Norwegian Institute of Public Health from handling data collected via Smittestopp contact tracing app. Only 600,000 citizens out of Norway’s 5.4 million inhabitants had been using the contact tracing app.

Data collection 92

Data collection Advertising Government Technology 92

The Last Watchdog

NOVEMBER 21, 2018

These regulations have certainly contributed to the movement towards consumerism and prompted businesses in the United States to rethink data collection and management, considering how violating these regulations could adversely affect their business and brand. For many, the answer is yes. If the U.S.

Data privacy 133

Data privacy Data collection Big data Government 133

Thales Cloud Protection & Licensing

FEBRUARY 7, 2024

Consumer Expectations Privacy Rights and Seamless Online Experiences An overwhelming 87% of consumers expect privacy rights from online interactions, with the most significant expectations being the right to be informed about data collection (55%) and the right to data erasure (53%).

Media 78

Media Passwords Authentication Digital transformation 78

CyberSecurity Insiders

MARCH 22, 2023

Next, each vulnerability needs to be evaluated and prioritized according to its risk to the system and the organization. If there isn’t a solution available, then teams may have to mitigate the risk with additional security measures. Governments have been cracking down on cyber criminals to avoid a catastrophe.

Data breaches 139

Data breaches Cyber threats Government Cybersecurity 139

Thales Cloud Protection & Licensing

JULY 11, 2019

The GDPR applies to businesses that collect and use personal information from citizens of the EU, regardless of where the business itself is located. The GDPR’s four main areas of focus are: Privacy rights, Data security, Data control and Governance. What you can do as a CISO – A risk-based approach to GDPR is key.

Risk 97

Risk Encryption Accountability Government 97

eSecurity Planet

SEPTEMBER 16, 2022

Businesses are also at risk of fraud attempts. Best Fraud Management Systems & Detection Tools Fraud.net SAS LexisNexis Risk Solutions Sift ClearSale Forter Riskified Signifyd FraudLabs Pro TransUnion. Finally, it also is useful for companies looking for a governance, risk, compliance ( GRC ) solution.

eCommerce 111

eCommerce Risk Financial Services Authentication 111

SecureWorld News

APRIL 29, 2024

"The presence of third-party trackers belonging to advertisers, and the over-sharing of customer information with these trackers, is a pervasive problem in both health tech and government space," said Narayana Pappu, CEO at Zendata. Protecting your information online starts with good cyber hygiene.

Data breaches 85

Data breaches Healthcare Identity Theft Advertising 85

SecureWorld News

AUGUST 19, 2021

Government agencies continue to be hot targets for cybercriminals. The Associated Press says the cyberattack did not involve the 2020 census data. Furthermore, no systems or data maintained and managed by the Census Bureau on behalf of the public were compromised, manipulated or lost," Jarmin said. The data collected by the U.S.

Data collection 97

Data collection Firewall Government Risk 97

SecureWorld News

JUNE 16, 2023

The landmark ruling by European Parliament comes as global regulators are racing to get a handle on AI technology and limit some of the risks to society, including job security and political integrity. "I Government entities should take a risk-based approach to AI," said Michael Gregg, CISO for the State of North Dakota.

Artificial Intelligence 86

Artificial Intelligence Technology CISO Government 86

Security Boulevard

FEBRUARY 10, 2021

Australia: Incidental COVID-19 App Data Collection The Office of the Inspector General of Intelligence and Security conducted a study. They would be right. The post Law Enforcement Eyeing Contact Tracing Apps appeared first on Security Boulevard.

Data collection 122

Data collection Data privacy Risk Government 122

Security Affairs

JUNE 19, 2021

The security breach took place on on May 14, and the institute discovered it only on May 31, then the research institute reported the incident to the government and launched an investigation. Early this month, researchers from Malwarebytes published a report on the Kimsuky APT’s operations aimed at South Korean government.

Hacking 139

Hacking VPN Internet Internet 139