Data Matters

SEPTEMBER 3, 2020

The National Association of Insurance Commissioners (NAIC) held its Summer 2020 National Meeting (Summer Meeting) from July 27 to August 14, 2020. The NAIC adopted the revised SAT in February 2020, and since that time, several states, including Idaho, Iowa, Kentucky, Ohio and Rhode Island, have begun efforts to adopt the revisions.

Insurance 67

Insurance Paper Artificial Intelligence Big data 67

Hunton Privacy

JUNE 7, 2022

It also urges mobile app providers to adopt robust security and privacy measures to protect reproductive health information.

Privacy 102

Privacy Authentication Information Security Risk 102

Krebs on Security

MARCH 23, 2021

The phishers had access for more than 24 hours, and sources tell KrebsOnSecurity the intruders used that time to steal Social Security numbers and sensitive files on thousands of state workers, and to send targeted phishing messages to at least 9,000 other workers and their contacts.

Phishing 284

Phishing Data breaches Access Passwords 284

Security Affairs

DECEMBER 6, 2020

Cyber Command (@US_CYBERCOM) December 4, 2020. “Cyber mission forces first identified the need for a shared, iterative virtual cyber range during exercise Cyber Flag 2015 and has since galvanized an expedited effort to define the requirement and find technical solutions. Persistent Cyber Training Environment allows U.S. &

Military 110

Military IT Security Information Security 110

Thales Cloud Protection & Licensing

SEPTEMBER 12, 2019

Just a couple of months after that, World Rugby itself announced that one of its training websites had suffered a security breach that exposed subscribers’ account information. Japan, the host country of both the 2019 Rugby World Cup and the 2020 Summer Olympic Games, is well-aware of these previous incidents.

Security 105

Security IoT Personal data Military 105

IT Governance

OCTOBER 13, 2021

Whatever your level of knowledge and expertise, following our certification path will help you develop your career with the knowledge and qualifications you need to practise Azure administration and security management. . Please note that this two-day course includes practical, hands-on lab exercises. . The course covers: .

Cloud 92

Cloud Compliance Government Security 92

Hunton Privacy

NOVEMBER 7, 2022

Trustopia was found to have had access from September 2018 to January 2020, during which it performed over 20,000 searches on children whose personal data was in the LRS database. Following the investigation, the ICO issued the reprimand to the DfE setting out clear measures it needs to act on to improve its data protection practices.

Education 102

Education Personal data Access IT 102

Security Affairs

SEPTEMBER 22, 2020

US Cybersecurity and Infrastructure Security Agency (CISA) is warning of a notable increase in the use of LokiBot malware by threat actors since July 2020. “CISA has observed a notable increase in the use of LokiBot malware by malicious cyber actors since July 2020. Exercise caution when using removable media (e.g.,

Passwords 72

Passwords Authentication Cybersecurity Access 72

Security Affairs

SEPTEMBER 6, 2021

The man has remained stuck in the Asian country since February 2020 due to the COVID-19 lockdown imposed by the local government and the cancelation of international travel. The post TrickBot gang developer arrested at the Seoul international airport appeared first on Security Affairs. Pierluigi Paganini.

Ransomware 137

Ransomware Government IT Security 137

DLA Piper Privacy Matters

MAY 4, 2021

Second drafts of the new overarching national personal data protection and data security laws have just been published, and give a clearer picture of the impending new national frameworks in China. Draft Data Security Law. Authors: Carolyn Bigg , Venus Cheung and Fangfang Song. Draft Personal Information Protection Law.

Compliance 77

Compliance Security Personal data Privacy 77

Security Affairs

JUNE 3, 2021

Researchers from Israeli IoT security firm Vdoo found multiple vulnerabilities in the Realtek RTL8170C Wi-Fi module that could allow to elevate privileges and hijack wireless communications. precise control of the return address can be achieved – this is left as an exercise for the reader.” ” continues the report.

Communications 103

Communications Agriculture IoT Encryption 103

Security Affairs

AUGUST 4, 2020

The FBI, the Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Defense (DoD) released information on a RAT variant, dubbed TAIDOOR, used by China-linked hackers in cyber espionage campaigns targeting governments, corporations, and think tanks. Exercise caution when using removable media (e.g.,

Healthcare 115

Healthcare Passwords Government Systems administration 115

Security Affairs

FEBRUARY 14, 2020

The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) released reports on North Korea-linked HIDDEN COBRA malware. The FBI, the US Cyber Command, and the Department of Homeland Security have published technical details of a new North-Korea linked hacking operation. Pierluigi Paganini.

Passwords 128

Passwords Access Phishing Authentication 128

Security Affairs

JANUARY 20, 2021

Google Project Zero security researcher Natalie Silvanovich found multiple flaws in popular video conferencing apps such as Signal and FB Messenger, that allowed to force a target device to transmit audio of the surrounding environment to an attacker device. . Facebook Messenger addressed the bug in November 2020. Pierluigi Paganini.

Encryption 115

Encryption Security IT Information Security 115

Hunton Privacy

JULY 9, 2020

On July 1, 2020, the Dubai International Financial Centre (“DIFC”) Data Protection Law No. 5 of 2020 came into effect (“New DP Law”). Due to the current pandemic, a three-month grace period, running until October 1, 2020, has been provided for companies to comply. The New DP Law replaces DIFC Law No.

Personal data 127

Personal data GDPR Data breaches Compliance 127

Data Matters

SEPTEMBER 30, 2020

Facebook Ireland and Maximillian Schrems , Case C-311/18 (July 16, 2020). national security law did not provide equivalent privacy protections to those available in the EU. national security law protects EU personal data. In other words, the national security of Europe depends on benefits from U.S. agencies is compelling.

Paper 127

Paper Government Security Privacy 127

Data Matters

NOVEMBER 12, 2019

Many of your new initiative’s provisions could serve to move privacy and data security law in a positive direction. Similar to what is already required with respect to data security incidents under federal financial and health privacy law, and more broadly under all 50 U.S. In this vein, we note the following: Transparency.

Privacy 67

Privacy Data breaches Compliance Personal data 67

Security Affairs

FEBRUARY 14, 2021

“Beyond its legitimate uses, TeamViewer allows cyber actors to exercise remote control over computer systems and drop files onto victim computers, making it functionally similar to Remote Access Trojans (RATs),” states the FBI’s PIN alert. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Passwords 141

Passwords Systems administration Risk Access 141

Hunton Privacy

SEPTEMBER 14, 2020

On September 9, 2020, the UK Information Commissioner’s Office (“ICO”) published an Accountability Framework , designed to assist organizations in complying with their accountability obligations under the EU General Data Protection Regulation (“GDPR”). Feedback may be submitted on the Framework before November 2, 2020.

IT 114

IT Compliance GDPR Records Management 114

Data Protection Report

JUNE 17, 2020

Just when we thought our summers might have been looking a bit dull, it was announced that the Court of Justice of the European Union ( CJEU ) will be making its final ruling in Case C-311/18, Data Protection Commissioner v Facebook Ireland & Schrems on 16 July 2020.

Personal data 119

Personal data Communications Access GDPR 119

Security Affairs

APRIL 2, 2023

A joint research conducted by Mandiant with a collective of media outlets (including Papertrail Media, Der Spiegel, Le Monde, and Washington Post) focused on documents, dated between 2016 and 2020, belonging to NTC Vulkan (Russian: НТЦ Вулкан). ” reads the report published by Mandiant.

Energy and Utilities 96

Energy and Utilities Education Ransomware IT 96

eDiscovery Daily

OCTOBER 11, 2023

In a recent interview CloudNine’s VP of Strategic Partnerships, Rick Clark, conducted with the Securities and Exchange Commission (SEC)’s Jeaneen Kappell, the complexities surrounding government inquiries surfaced as well as what an organization can do in the early days of an investigation.

Communications 36

Communications Marketing Government Security 36

Data Matters

OCTOBER 1, 2020

Securities and Exchange Commission (SEC)’s Division of Trading and Markets issued its first no-action letter (Letter) to the Financial Industry Regulatory Authority, Inc. FINRA), 1 related to digital asset securities. Securities Act of 1933 (Securities Act) and the Exchange Act. On September 25, the U.S. Background.

Security 67

Security Blockchain Marketing Risk 67

Hunton Privacy

JANUARY 2, 2019

The new law is the first in the United States to be enacted based on the data security model law drafted by the National Association of Insurance Commissioners. New cybersecurity rules for insurance companies licensed in South Carolina are set to take effect in part on January 1, 2019.

Insurance 77

Insurance Cybersecurity Data breaches Encryption 77

Hunton Privacy

SEPTEMBER 1, 2020

Not disclosing, subject to specified exceptions, a consumer’s genetic data to certain entities ( e.g. , those responsible for making decisions regarding health insurance, life insurance or employment). Department of Health and Human Services pursuant to HIPAA and the HITECH Act.

Privacy 85

Privacy Insurance Marketing Information governance 85

Security Affairs

MAY 12, 2020

In the same hours an apparently unrelated incident took place in the same area, The Iranian support ship Konarak was hit by a new anti-ship missile being tested by the frigate Jamaran during an exercise on Sunday. The post A cyber attack hit a port on Strait of Hormuz, Iran said appeared first on Security Affairs. Pierluigi Paganini.

Risk 91

Risk IT Security 91

Thales Cloud Protection & Licensing

AUGUST 15, 2019

1, 2020, grants to the state’s over 40 million people a range of rights comparable to the rights given to European citizens with the General Data Protection Regulation (GDPR)–the two legislations are not that similar, but they do share some general features, GDPR is an omnibus law, while CCPA is more limited. Currently, every U.S.

Privacy 92

Privacy GDPR Digital transformation Sales 92

Data Protector

AUGUST 17, 2020

But these organisations are likely to form a small minority of the 738,769 data controllers that registered to pay data protection fees to the Information Commissioner’s Office (ICO) as at 31 March 2020. Enormous amounts of money have been spent in a belated acknowledgement of, in many cases, decades of under investment on privacy issues.

Privacy 156

Privacy GDPR Personal data Computer and Electronics 156

Adam Levin

JUNE 24, 2020

A security breach at Netsential, a Houston-based web hosting company, which primarily serves law enforcement agencies and fusion centers is thought to be the source of the leak. Documents and records in the data span nearly 24 years, from August 1996 to June 2020.

Data collection 75

Data collection Cybersecurity Risk Security 75

Thales Cloud Protection & Licensing

MARCH 1, 2023

Europe Leads the Cybersecurity Regulation Dance divya Thu, 03/02/2023 - 06:58 Europe has emerged as a hub for developing cyber policies, acting to improve software security, and quickly reporting severe breaches. But these regulations provide the incentive and the motivation to enable secure-by-design products and resiliency.

Cybersecurity 71

Cybersecurity Compliance GDPR Manufacturing 71

eDiscovery Daily

JULY 5, 2018

The law is set to take effect on January 1, 2020 (which explains my “clever” blog title)… :o). A consumer whose data is hacked is entitled to recover statutory damages of up to $750 in a civil suit when companies fail maintain reasonable security procedures. Jerry Brown.

Data Privacy 28

Data Privacy Privacy Sales Data collection 28

Data Matters

DECEMBER 2, 2020

On November 20, 2020, the Singapore Personal Data Protection Commission (PDPC) published a set of draft advisory guidelines (the Advisory Guidelines) to provide clarification on recent amendments to the Personal Data Protection Act (the PDPA Amendments). We have summarized the PDPA Amendments in our previous client Update.

Data Privacy 73

Data Privacy Privacy Data breaches Personal data 73

Security Affairs

APRIL 14, 2022

sys “) by triggering the CVE-2020-15368 flaw to execute malicious code in the Windows kernel. Have a cyber incident response plan, and exercise it regularly with stakeholders in IT, cybersecurity, and operations. The US government agencies warned of threat actors that are targeting ICS and SCADA systems from various vendors.

Passwords 128

Passwords Communications Cybersecurity Access 128

DLA Piper Privacy Matters

MARCH 20, 2023

The CNIL will also check the measures implemented to ensure the security of the data. The access to the electronic patient record in health care institutions The security of health data has already been under the CNIL’s scrutiny over the past years and subject to investigations in 2020 and 2021 in health care institutions.

Computer and Electronics 52

Computer and Electronics IT File names Access 52

IG Guru

APRIL 3, 2020

Today (April 2, 2020), the Office for Civil Rights (OCR) at the U.S

Privacy 52

Privacy CMS IT Information governance 52

Hunton Privacy

DECEMBER 1, 2020

On November 26, 2020, the French Data Protection Authority (the “CNIL”) announced that it imposed a fine of €2.25 Between June 8, 2018 and April 6, 2019, the CNIL received 15 complaints from individuals relating to the exercise of their data protection rights with affiliates of the Carrefour Group. Background.

GDPR 91

GDPR Personal data Data collection Marketing 91

Data Matters

NOVEMBER 16, 2020

On November 2, 2020, Singapore’s legislature finally approved amendments to the Personal Data Protection Act (PDPA). The changes become law once a government gazette is passed (possibly before the end of 2020). Carry out data breach drills or tabletop exercises. NEW mandatory data breach notification requirement.

Data Privacy 67

Data Privacy Privacy Data breaches Personal data 67