New York and New York state take the lead again, following the release of its NYDFS cyber regulation. If it gets passed the SHIELD (Stop Hacks and Improve Electronic Data) legislation will put in place stringent data protection laws. Including…
A bill to ensure that members of the US Congress receive and confirm they have received cyber security training was introduced in May 2019. Those that have to legislate on cyber should know about cyber. View Original Post
Investors beware, geopolitical cyber related decisions are increasing tensions globally, with a knock on impact on investors. With cyber attacks cutting across sectors and increasing in sophistication. The tech supply chain is suffering as as tensions rise and stock prices…
Iranians targeted by an Israeli. US cyber attack which takes down an Iranian social security website. View Original Post
Isrealie security firm indentifies a very sophisticated Windows root kit. Exploiting a known vulnerability, delivering multiple payloads, with its own Verisign certificate. Then they go and leave their own infrastructure open for investigation. Makes a good case for patching known…
As is always the case, user beware. The US DHS warns that foreign VPN services pose a security risk. We should all make note, If someone else owns they keys, you cannot guarantee that what you send across them, cannot…
Retaliation, retribution or regulation. China reveals draft cyber laws. Is a cyber arms race in the footing? View Original Post
For those that missed it. Equifax has become the first company to have its credit rating downgraded, follow its 2017 cyber attack. Charges to the balance sheet were cited as the main reason for the down grading. This is a…
Cyber attacks are known to impact share price long after the initial attack. Constructing and communication the right message to the board, can support the executive drive the right risk, cultural, and mitigation strategies. As part of the wider business…
The UKs House of Lords and House of Commons have issued a report which makes it clear that the board of directors of companies have a responsibility to understand cyber risk. Citing that in English court board director cannot delegate…
