CISA Sees Elimination of 'Bad Practices' as Next Secure-by-Design Step by Matt BrackenThe Cybersecurity and Infrastructure Security Agency (CISA) has made significant strides in its secure-by-design initiative, gaining 230 software vendors' commitments to strengthen security features like multi-factor authentication and reducing default passwords. By shifting security responsibilities to software...

As ransomware operators continue to expand the impact of their malware, CISA is proposing new requirements to help protect sensitive data, while the SEC is coming down on organizations that downplayed a historical breach. Learn all about these stories and more in this week's Friday Five.CISA Proposes New Security Requirements to Protect GOVT, Personal Data by BILL TOULASCISA has proposed security...

The General Data Protection Regulation (GDPR) is a regulation enacted by the European Union to protect EU citizens' privacy and personal data. Read this blog to learn more about who's subject to GDPR compliance, data subject rights, and the misconceptions around consent in GDPR compliance.

As ransomware gangs and state-sponsored threat actors wage war against international law enforcement, private organizations, U.S. courts and agencies, and the manufacturing industry are urged to reinforce their cybersecurity measures. Learn all you need to know about these emerging threats in this week's Friday Five

As governments transition to fully digital records, protecting sensitive data has become a critical priority. In the Middle East, Saudi Arabia is leading the way with its National Data Management and Personal Data Protection Standards.

Cybersecurity protects computers, servers, mobile devices, systems, networks, and data from digital attacks, damage, and unauthorized access. Learn all about cybersecurity in this blog.

POPIA, South Africa's Protection of Personal Information Act, establishes rules for the lawful processing of personal information in South Africa. This blog looks at the purpose of the law, POPIA compliance best practices, and more.

This past week's top cybersecurity headlines include an update to the California Consumer Privacy Act, a warning about a potential onslaught of North Korean cyberattacks, CISA's new incident reporting tool, and more. Read all about these stories and more in this week's Friday Five.

As ransomware, misconfigurations, and other vulnerabilities continue to be stubborn threats to mitigate, CISA and the FBI promise election security, and the FAA is pushing for tighter regulations. Learn about these top stories and more in this week's Friday Five!

Stories on rare, albeit encouraging wins against ransomware gangs took the top headlines this past week. Additionally, read about a massive breach involving Americans' sensitive data, the UN's new cybercrime treaty, and more in this week's Friday Five.

As an emerging ransomware group made headlines with their record-setting $75 million payout, Congress moves toward qualifying those groups' actions as terrorism, new attacks target ISPs and Microsoft 365 users, and more. Read more about these headlines in this week's Friday Five.

As ransomware and genAI continue to pose major risks for organizations globally, it was a mere software update that caused major global Microsoft outages this past week. Find guidance on how to respond to these threats and more in this week's Friday Five.

As Congress works to minimize regulatory headaches for compliant organizations, cyberattacks hailing from North Korea and the Kremlin continue, while cyber insurance rates are plummeting. Get caught up to speed on all these stories in this week's Friday Five recap.

Implementing risk taxonomy at your organization can help break down risks into categories and manage potential threats. Learn how it works and the steps required to create risk taxonomy in today's blog.

While this past week brought good and bad news in the world of ransomware, agencies and lawmakers are fighting to keep up with evolving cybercrime trends. Catch up on these stories and more in this week's Friday Five.

Catch up on the ongoing fight against cybercrime platforms, ransomware and other malware, updated compliance rules for healthcare organizations, and more — all in this week's Friday Five.

This past week's headlines were led by stories on upcoming regulatory improvements, why organizations are still struggling to keep up with them, the possibility of a new Cyber Force, and more. Learn all you need to know in this week's Friday Five.

Audit log best practices include defining clear log policies, regularly reviewing logs, and maintaining the integrity and use of management tools. Learn more audit best practices in today's blog.

As more insights continue to be unveiled from Verizon's DBIR report and a recently released report from the ONCD, governments and organizations are fighting to keep up with evolving threats. Get up to speed on these stories, the unmasking of LockBit's top admin, and more in this week's Friday Five.