Archive
(2,175 Total Articles)Page 2 of 17.
This reports regulatory or law-enforcement action tied to alleged data breaches affecting food processing companies in Ghana. For defenders, the issue is exposure and consequence: named organizations in a local industrial sector are now facing official action, which raises the priority of breach investigation, containment, and notification handling.
The piece says Flock can now assign CVE identifiers for its own products, which affects how flaws in its software are tracked and disclosed. The privacy concern matters because it raises questions about whether vendor-run vulnerability handling gives defenders enough independence and visibility.
Coupang is dealing with a major privacy enforcement action and is trying to delay payment through court action. The story matters to defenders and compliance teams because it shows how a large consumer platform is handling regulatory fallout after a privacy violation, including the timing and practical burden of remediation and settlement.
Norway’s privacy enforcement action shows that adtech data-sharing arrangements can draw regulator scrutiny even when the underlying platform is part of a larger technology company. For defenders, the issue is not malware or intrusion but the obligation to handle personal data lawfully and to understand how tracking and audience data move through third-party systems.
ENISA is flagging a rise in cyberattacks across Europe and saying the threat is becoming more sophisticated. For defenders, that points to higher exposure for European organizations and a need to prioritize detection, hardening, and response readiness against more capable campaigns.
Cash App is moving toward settlement payments tied to a data breach, which makes this a consequence story rather than a general finance item. It matters to payment-app operators, compliance teams, and defenders because it shows how breach fallout can turn into direct financial and regulatory cost.
Ghana is treating cybersecurity as an essential service, which raises the bar for government and critical infrastructure operators to maintain and protect cyber capabilities. For defenders, that usually means tighter operational expectations, clearer obligations during incidents, and more scrutiny over resilience across essential systems.
Dutch regulators have agreed how they will split oversight responsibilities under a new cybersecurity law. For defenders and compliance teams, the main issue is not a new attack but a clearer supervisory structure that will shape reporting, audit, and enforcement obligations.
A company has settled a data breach lawsuit, which means the incident has moved from disclosure into financial and legal consequence. For defenders, the main takeaway is that breach response now carries direct litigation and settlement exposure, not just containment and notification obligations.
Anthropic appears to be outlining a new protection plan for critical infrastructure, which puts AI security and operational resilience in focus for defenders. The main question for CISOs and operators is whether this is a concrete defensive control, an industry coordination effort, or guidance that changes how critical systems should be protected.
F5's critical BIG-IP APM overflow, CVE-2026-94127, is under active exploitation; here's what CERT-EU, Cal-CSIC and Rapid7 say to check this week.
F5's critical BIG-IP APM overflow, CVE-2026-94127, is under active exploitation; here's what CERT-EU, Cal-CSIC and Rapid7 say to check this week.
The NSA is publishing guidance on using zero trust principles to protect operational technology environments. For defenders in critical infrastructure, this matters as a control and architecture issue, not just a policy statement, because OT networks are being pulled into the same access and segmentation problems that affect enterprise systems.
This is a federal cyber compliance story, not a breach story. The main issue for defenders is that contractors handling sensitive government data may soon have clearer security obligations, which affects procurement, control baselines, and audit readiness across the federal supply chain.
Cyber experts are urging CISA to move from guidance to mandatory federal rules for operational technology. For defenders, the issue is not a new attack but a change in obligation: more prescriptive OT security requirements would raise the baseline for critical infrastructure operators and likely increase compliance, monitoring, and reporting demands.
Japan’s critical infrastructure cyber regime has reached a new enforcement or implementation point, which matters for operators that must map their controls to government requirements. For defenders, the main impact is on compliance, governance, and the security baseline expected of critical-service providers in Japan.
This is a legal and compliance piece about updated guidance on how GDPR fines are calculated and what that means for businesses. For defenders and risk leaders, the practical issue is how enforcement exposure changes and where compliance programs may need to tighten records, controls, and breach response readiness.
The piece appears to be about what CISA should tell federal agencies to do to better protect operational technology. For defenders, that points to guidance on OT hardening and federal expectations rather than a new incident or vulnerability.
The piece concerns limits on penalties for credit information leaks at South Korean financial firms and the push for tougher enforcement. For defenders and compliance teams, the issue is not just the breach risk but the regulatory gap between the harm of a leak and the maximum sanction available.
McLean Mortgage has settled a data breach case tied to a 2025 incident that affected more than 30,000 people. The main defender takeaway is exposure to notification, legal, and remediation obligations after a customer-data event, especially for a financial services firm.
A multistate enforcement settlement over a vendor breach at a clinical lab shows that third-party incidents can still turn into regulatory exposure long after the breach itself. For defenders, the key issue is not just the original compromise but the downstream obligation to document vendor risk, notify properly, and withstand state-level scrutiny.
Postings at Merck and Wilson Elser, plus pay and budget data from IAPP, Gigamon, Riviera and PwC, show AI governance hiring moving into the core security reporting line.
Postings at Merck and Wilson Elser, plus pay and budget data from IAPP, Gigamon, Riviera and PwC, show AI governance hiring moving into the core security reporting line.
A Texas court has approved a settlement tied to AT&T’s data breach, which makes the incident a resolved legal and financial matter rather than just a disclosure. For defenders, the key issue is that the breach has crossed into enforcement and claims resolution, showing the downstream cost of exposed customer data and the pressure on large telecom operators after a compromise.
California subpoenaing OpenAI signals that AI systems are now drawing regulator attention as potential cybersecurity and governance risks, not just consumer products. For defenders and compliance teams, the practical issue is how AI vendors handle security oversight, incident disclosure, and the controls around model use and customer data.