A Feeling Of Foreboding: The Privacy Risks Of Emotion-Reading Wearables
Even as we haemorrhaged our personal data, we could always rely on at least one secret: If we have enough self-control, people can never read our m...
Author: Danny Bradbury
The FTC Reminds Us Of The Right To Be Forgotten
‘The Internet never forgets’ is a warning that what you do online could come back to haunt you later. It’s also a common myth, as...
Experts Call for Ransomware Resilience as Crisis Escalates
It’s been a busy few months for ransomware. At the end of August, multiple US cybersecurity organisations warned of a pernicious ransomware-a...
What CrowdStrike Teaches Us About Supply Chain Management
This summer’s global IT outage, which took down millions of computers and grounded airlines worldwide, demonstrated just how difficult it is ...
Dial B for Breach: How Attackers Slurped 110 Million AT&T Customers’ Phone Logs
Remember back in the early eighties when AT&T’s slogan was ‘Reach Out and Touch Someone’? Apparently cyber criminals took tha...
The Chevron Deference is Dead. Now What?
This summer saw the end of a 40-year legal doctrine that promises to have significant ramifications for cybersecurity—and many other sectors. What ...
Federal Government Moves to Shore Up Critical National Security
The Colonial Pipeline attack in 2021 was a turning point for critical infrastructure in the U.S. When a ransomware attack on a pipeline operator...
CMMC Explained: Unpacking the U.S. Defense Community’s New Cybersecurity Goals
Cybersecurity has become a critical concern in the defence industry, with increasing threats targeting sensitive information and critical infrastru...
What’s in the New US International Cyber Strategy?
At the RSA Conference on May 6, the US unveiled a strategy for building a stronger, more secure digital ecosystem across the world. The United Stat...
How States Are Taking a Lead on AI Regulation
The past year has been one of AI’s biggest since scientists first proposed the concept in the late 1940s. AI vendors have continued to innova...
Data Minimization Just Got Real with the CCPA’s First Enforcement Advisory
There’s a clause in the California Consumer Protection Act (CCPA) on data minimization that the Rolling Stones could have written. It says th...
What Could a Federal Privacy Law Mean for the US?
The US federal government has seen its fair share of proposed broad consumer privacy laws, which all seem to wither. Its latest might be different....
Biden’s AI Progress Report: Six Months On
It has been six months since the US government passed a sweeping executive order (EO) addressing the need for responsible AI. The Executive Order o...
What Biden’s Data Broker EO Means For Your Business
Many data brokers are happy to sell all kinds of personal information about US citizens. Piece this data together and you can get some frighteningl...
Rising Breach Numbers and Shifting Attack Patterns Signal Tough Times Ahead
If you thought data breaches were bad, buckle up; they’re getting worse. In January, the US Identity Theft Resource Center (ITRC) published i...
Is ESG Data the Next Target for Ransomware Actors?
As a famous frog once said, it’s not easy being green. In late January, reports surfaced of a ransomware attack on the Sustainability Busines...
Key Takeaways From NIST’s New Guidance on Adversarial AI Threats
There’s a concept in artificial intelligence (AI) called “alignment,” which ensures that an AI system always follows human intentions and val...
Californian Regulator Tweaks and Clarifies Privacy Rules
December was a milestone month for California’s data privacy watchdog as it moved a set of proposed regulatory revisions into the public comm...
2023: A Busy Year for U.S. Privacy Law
Thanks to a divided House, the U.S. Congress might be in the middle of a dysfunctional malaise, but that didn’t stop representatives from int...
California’s Delete Act Focuses the Lens on Data Brokers
From 2026, life will get much harder for data brokers doing business in California. From August 1 of that year, they must comply with a new law for...
Security Horrors: The NSA and CISA’s List of Top Ten Security Slip-Ups
An insecure network is a cybersecurity defender’s worst nightmare and an attacker’s dream. A single misconfiguration can leave a gaping...
The Ongoing Struggle for Security by Design
When it comes to safety problems with new, complex products, society’s response is typically consistent: first, blame the user. Only later on...
Montana Nudges the Needle on Genetic Security
U.S. states are increasingly giving consumers more privacy rights over their digital information, but what about their biological data? Your email ...
