Security News

Information Security Incident Reporting Policy
2024-01-23 16:00

This policy from TechRepublic Premium provides guidelines for the reporting of information security incidents by company employees. The goal is to facilitate the security response and remediation process to ensure the least amount of potential damage to systems, networks, customers and business reputation.

2024 brings new risks, with cyber incidents in the spotlight
2024-01-23 04:30

Natural catastrophes, fire, explosion, and political risks and violence are the biggest risers in the latest compilation of the top global business risks. In the United States, cyber has replaced business interruption as the leading risk for the year ahead. Natural catastrophes rose to the third spot.

Without clear guidance, SEC’s new rule on incident reporting may be detrimental
2024-01-22 06:00

The SEC has instituted a set of guidelines "Requiring registrants to disclose material cybersecurity incidents they experience and to disclose on an annual basis material information regarding their cybersecurity risk management, strategy, and governance." These new guidelines went into effect on December 18, 2023, which means 2024 will be an important year for enterprises and how they adhere to current security regulations. Establishing a reporting infrastructure that sheds light on what, how, and when security incidents are disclosed is important for the industry at large and is a huge step toward having cybersecurity seen as a business-wide issue.

If you prepare, a data security incident will not cause an existential crisis
2024-01-09 06:00

Why is it that when a company becomes aware of a potential data security incident, the team working on it have an immediate and overwhelming feeling that the company is doomed? And yet, when there's another kind of high-risk event, such as an ethics investigation, it doesn't cause the same apocalyptic feelings? Cybersecurity professionals in legal and IT security departments have key roles in working through a data security incident, but often fail to build up a trusted relationship in advance.

Copy that? Xerox confirms 'security incident' at subsidiary
2024-01-03 13:15

Xerox has officially confirmed that a cyber baddie broke into the systems of its US subsidiary - a week after INC Ransom claimed to have exfiltrated data from the copier and print giant. Xerox Business Solutions, a subsidiary of Xerox, offers a range of products and services, from managed IT and print services, to robotic process automation solutions, and more.

Unveiling the true cost of healthcare cybersecurity incidents
2023-12-28 06:00

As healthcare organizations increasingly rely on interconnected systems, electronic health records, and telemedicine, the industry becomes a prime target for malicious actors seeking to exploit vulnerabilities. The consequences of a cybersecurity breach in healthcare are not only measured in compromised data but also in jeopardized patient safety and trust.

Yakult Australia confirms 'cyber incident' after 95 GB data leak
2023-12-27 09:10

Cybercrime actor DragonForce which claimed responsibility for the attack has also leaked 95 GB of data that it states, belongs to the company. In a statement to BleepingComputer, Yakult Australia confirmed it was investigating a cyber incident that occurred in mid-December.

China's MIIT Introduces Color-Coded Action Plan for Data Security Incidents
2023-12-16 07:32

China's Ministry of Industry and Information Technology (MIIT) on Friday unveiled draft proposals detailing its plans to tackle data security events in the country using a color-coded system. The...

Incident Reporting and Response Procedures Policy
2023-12-07 16:00

TechRepublic Premium Quick Glossary: Cryptocurrency Cryptocurrency is a popular technological worldwide trend. Be forewarned, scams .... TechRepublic Premium What Is Artificial General Intelligence? Artificial general intelligence, or AGI, is a hypothetical form of AI designed to perform human-level cognitive functions, such as the capacity to self-teach.

Varonis Introduces Athena AI to Transform Data Security and Incident Response
2023-12-06 15:01

Athena AI, the new generative AI layer that spans across the entire Varonis Data Security Platform, redefines how security teams protect data - from visibility to action. Athena AI is embedded within the Varonis Data Security Platform and appears in a variety of user interfaces to speed up security and compliance tasks.