Reporting an incident to the correct authorities or vulnerability clearinghouses can be an experience fraught with frustration. You pour time, energy, and resources into fighting an intrusion, all while keeping company officials and stakeholders up to date and preventing sensitive information from getting into the wild. Explaining what happened might seem just like another layer of hard work and exposure to potential embarrassment when the details are out there for all to see.
But legislators have been pushing enterprise executives to share more information about security incidents and they’re creating new requirements in the United States and around the world to mandate the disclosure of such information. Why?
More Stories
The AI Fix #32: Agentic AI, killer robot fridges, and the robosexual revolution
In episode 32 of The AI Fix, our hosts learn the meaning of "poronkusema", Mark discovers his dream job, a...
New Research Highlights Vulnerabilities in MLOps Platforms
New research by Security Intelligence has revealed security risks in MLOps platforms including Azure ML, BigML and Google Vertex AI...
Moxa Urges Immediate Updates for Security Vulnerabilities
Moxa has reported two critical vulnerabilities in its routers and network security appliances that could allow system compromise and arbitrary...
US Treasury Department Sanctions Chinese Company Over Cyberattacks
From the Washington Post: The sanctions target Beijing Integrity Technology Group, which U.S. officials say employed workers responsible for the...
Phishing Click Rates Triple in 2024
Netskope observed a 190% growth in enterprise users clicking phishing links as attackers become more creative in delivering effective lures...
UK Government to Ban Creation of Explicit Deepfakes
The UK government is cracking down on the generation of sexually explicit deepfakes in a bid to protect women and...