Today’s columnist, Steve Dickson of Netwrix, says that staying compliant with data privacy regulations like CCPA and GDPR requires storing sensitive data in secure locations.
In its blog post on critical Exchange Server patches Tuesday, Microsoft pointed to "limited and targeted" exploitation of the vulnerabilities in the wild. But new data suggests that the breaches may not be limited or targeted at all.
Microsoft won praise from security researchers by making its CodeQL queries public so any organization could use the open source tools to analyze if they experienced any vulnerabilities from the SolarWinds hack or similar supply chain attacks.
Continuing a discussion kicked off earlier this week in the Senate, House lawmakers confirmed that legislation is in the works, pushing for answers on the balance between liability protection and the duty to protect consumers.
This week In the Security News, Nvidia tries to throttle cryptocurrency mining, Digging deeper into the SolarWinds breach, now with executive orders, NASA's secret message on Mars, vulnerabilities in Python and Node.js, hacking TVs and AV gear, nation state hacking galore, patch your VMWare vCenter, and is a password manager worth your money!?!
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.