Today the FBI arrested the person they say leaked hundreds of classified documents on US surveillance related to the war in Ukraine. The impact of this leak may rise to the level of the damage caused by Edward Snowden in 2013. They continue to find more classified documents as the investigation continues. What is different […]
Continue reading → [DISPLAY_ACURAX_ICONS]I understand why they want to do this and I hope they have some smart people trying to figure out the rules, but given things move so fast, it is likely that any rule will be obsolete in 6 months and the government is not good at dealing with situations like that. In a document soliciting public […]
Continue reading → [DISPLAY_ACURAX_ICONS]If you sell to the federal government – any agency – you need to pay attention to this. Until now only DoD contractors were going to have to comply with CMMC or NIST SP 800-171. The standard requires 100% compliance with 110 controls; some of them pretty straight forward like having each user having their […]
Continue reading → [DISPLAY_ACURAX_ICONS]As I teased last week, the law is always behind the tech world. Way behind. AI is no different. But that doesn’t mean that the government isn’t going to try. On March 15th the Copyright Office issued registration guidance on works containing material generated by AI. This is probably not something you are thinking about. […]
Continue reading → [DISPLAY_ACURAX_ICONS]This is a secondary problem of vendor cyber risk. The first problem is that you are dependent on a lot of vendors. You have to depend on those vendors. If they screw up, you get sued. And you lose customers. To make matters worse, when one of your vendors gets breached, you are only one […]
Continue reading → [DISPLAY_ACURAX_ICONS]Last week it was revealed that VoIP communications company 3CX was compromised and was distributing a malicious version of their desktop software to hundreds of thousands of paying customers. This is not an attack where users go to find sketchy websites and download “free” software that should be paid for. Rather, this is licensed software […]
Continue reading → [DISPLAY_ACURAX_ICONS]