720-891-1663

Meta Fighting GDPR but Losing

Norway fined Meta for its targeted advertising practices and issued a temporary ban several months ago. Now Norway has gone to the European Data Protection Board (EDPB) and asked for the ban to be made permanent and EU/EEA wide. Since Facebook makes most of its money from targeted ads and untargeted ads fetch a dramatically […]

Continue reading → [DISPLAY_ACURAX_ICONS]

CPPA Publishes New Draft Regs Addressing AI, Risk Assessments and Cyber Audits

California’s privacy regulator has released draft regs covering cybersecurity audit requirements and risk assessments. While they have not started the formal rulemaking process, they are putting out bait to see what kind of comments they get. They also discussed the drafts at their last meeting. The Draft Cybersecurity Audit Regulations make both modifications and additions to […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News for the Week Ending September 29, 2023

Writers Guild Settles Strike With Anti-AI Provision The Writers Guild has tentatively agreed to a new contract with Hollywood that has some sort of anti-AI provision as writers don’t want to be replaced by a computer for much less money. The details have not yet been released, but will likely be copied in many contracts […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Insider Threat Problem is a Growing Issue

A US government worker has been arrested and charged with spying for Ethiopia. The problem is so bad that companies with government contracts have to create an insider threat program, provide annual training for all employees and designate an officer to be the Insider Threat Program Senior Official (ITPSO) – the person who will get […]

Continue reading → [DISPLAY_ACURAX_ICONS]

State Legislatures Keep Losing the Battle on Online Age Verification

That doesn’t mean they will stop trying. Going back to the 1990s and the Communications Decency Act, and then the Child Online Protection Act in 1998, the Supremes keep saying that it is not the government’s role to regulate speech. Of course the government only tries to regulate speech that is unpopular, whether it is […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News for the Week Ending September 8, 2023

Want a .US Domain? Just Lie About It. The .US top level domains are a hotbed for phishing attacks. Apparently, this is due to lax oversight. In theory, the .US is managed by the US government, but the government outsources that to GoDaddy – who doesn’t have a stellar cybersecurity reputation to be polite. See […]

Continue reading → [DISPLAY_ACURAX_ICONS]