Learn about the new NYDFS Cybersecurity Regulation and its implications for financial institutions in Data Protection 101, our series on the fundamentals of information security.

Learn how cyber resilience can help you protect your sensitive data in this week's Data Protection 101.

A new survey says GDPR compliant companies are benefiting from their recent privacy investments - as a bonus, they may be less likely to be breached, too.

The French data protection authority said Monday that it has fined Google roughly $57M - the biggest penalty yet under the new law - for failing to acknowledge how its users' data is processed.

There are two imminent Certification of Compliance deadlines with the two-year transition period around NYDFS' Cybersecurity Regulation (23 NYCRR Part 500) set to end on March 1.

A former bank employee - now believed to be a fugitive - is being charged with commercial espionage, among other crimes, after stealing data on the bank's clients.

Former employees at the company are being accused of leaking electronic-grade chemical technologies to a Chinese company.

A set of cybersecurity best practices recently published by the Department of Health and Human Services (HHS) looks at five of the biggest cyber threats to the healthcare industry and how to best mitigate them.

Microsoft unveiled a new sandbox for Windows this week that can allow users to run untrusted software without having to do so in a virtual machine.

A government report released this week says a culture of cybersecurity complacency at Equifax, compounded by a lack of visibility into its complex legacy IT environments, led to last year's breach.

These nine steps can help can help organizations looking to achieve PCI Security compliance detect weak spots in their security systems and evolve in the face of challenges.

Check out our guide to the top resources for information security skill building, from books to bootcamps.

Consumer groups in Europe argue Google doesn't have a valid legal basis for processing users’ location data and is processing personal information that violates the EU's General Data Protection Regulation.

Learn about the MITRE ATT&CK Framework, how it can be used to classify adversary behaviors, and assess an organization's risk in this week's Data Protection 101.

The Department of Homeland Security and the Federal Bureau of Investigation announced this week it disrupted a significant online ad fraud operation, 3ve, that involved 1.7 million IP addresses and caused millions of dollars in losses.

Learn about the Personal Information Protection and Electronic Documents Act (PIPEDA), what type of data it covers, and how to comply with the act's new data breach notification rules, in Data Protection 101, our series on the fundamentals of information security.

More Protected health information (PHI) is leaked by healthcare providers, not hackers, academic research by Michigan State University and Johns Hopkins University released Monday says.

Take a look at the history of ransomware, the most damaging ransomware attacks, and the future for this threat.

A hospital in upstate New York said it recently discovered a former employee inappropriately accessed patient medical records from 2016 to 2017.