Wednesday, December 16, 2020

Can’t repeat this enough…

https://www.csoonline.com/article/3600793/14-tips-to-prevent-business-email-compromise.html#tk.rss_all

14 tips to prevent business email compromise

Criminals fool victims into clicking on malicious links or assisting in financial theft by sending emails that mimic real senders and real companies. Here's how to stop BEC.





A backgrounder podcast and some links…

https://www.makeuseof.com/what-is-the-dark-web-safe/

What Is the Dark Web, How Do You Reach It, and Is It Safe?





Plan for the worst. If criminals won’t obey the law, perhaps their victims will?

https://www.databreaches.net/regulatory-crackdown-on-ransomware/

Regulatory Crackdown on Ransomware

Seetha Ramachandran, Nolan Goldberg and Hena M. Vora of Proskauer write:

It is increasingly common for Ransomware attacks to be associated with large sophisticated cyber-criminal organizations, with a central entity providing the tools, training, and ability to collect ransoms and sending its “associates” out to cause harm. As long as victims continue to pay ransoms, Ransomware is able to expand. Ransomware is also being adapted for new, criminal purposes. Increasingly, hackers associated with countries like Iran and North Korea are using Ransomware to generate an influx of cash into their economic streams and bypass economic sanctions. Faced with an urgent need to stop the spread of Ransomware, law enforcement is now moving past its old strategy of strongly discouraging victims from paying ransoms. Regulatory agencies – such as OFAC and the SEC – are implementing regulations to prevent victims from paying ransom to buy their way out of a Ransomware attack. These regulations arm law enforcement with a new enforcement mechanism – allowing them to punish companies who choose to pay ransom in the face of a Ransomware attack. Accordingly, they signal a new area of regulatory enforcement that will likely become the government’s most powerful tool to curb the spread of Ransomware.

Read more about the regulatory responses and the takeaways these lawyers see on The Capital Commitment..





The intersection of Security and Privacy…

https://www.csoonline.com/article/3600748/privacy-data-protection-regulations-clamp-down-on-biometrics-use.html#tk.rss_all

Privacy, data protection regulations clamp down on biometrics use

The liabilities associated with biometric information are extremely high because you can’t call God up and say, ‘Hey I need a new fingerprint because mine was stolen,’” says Judy Selby, a Partner at Hinshaw & Culbertson LLP who specializes in privacy and cyber insurance.

In the US, regulations in California, Illinois and New York are considered the gold standard for protecting the collection, use, storage, and reuse of biometric data. In addition, The National Biometric Privacy Act was introduced to Congress in August 2020, with the potential to become federal law. While other acts and laws are in the works, these contain the most comprehensive privacy restrictions similar to the biometrics privacy rules set in European nations under the General Data Protection Regulation (GDPR ).





Will this encourage the UK to create its own version of the GDPR?

https://www.theguardian.com/technology/2020/dec/15/facebook-move-uk-users-california-eu-privacy-laws

Facebook will move UK users to US terms, avoiding EU privacy laws

Facebook will shift all its users in the United Kingdom into user agreements with the corporate headquarters in California, moving them out of their current relationship with Facebook’s Irish unit and out of reach of Europe’s privacy laws.

The change takes effect next year and follows a similar move announced in February by Google. Those companies and others have European head offices in Dublin, and the UK’s exit from the EU will change its legal relationship with Ireland, which remains in the Union.



(Related) An FYI…

https://www.csoonline.com/article/3410039/gdpr-vs-uk-data-protection-act-2018-whats-the-difference.html

GDPR vs UK Data Protection Act 2018: What’s the difference?





A summary…

https://fpf.org/2020/12/15/policy-brief-location-data-under-existing-privacy-laws/

Policy Brief: Location Data Under Existing Privacy Laws

The Future of Privacy Forum released a new policy brief, Location Data Under Existing Privacy Laws.





Perspective.

https://www.pewresearch.org/fact-tank/2020/12/15/people-globally-offer-mixed-views-of-the-impact-of-artificial-intelligence-job-automation-on-society/

People globally offer mixed views of the impact of artificial intelligence, job automation on society

As artificial intelligence (AI) plays a growing role in the everyday lives of people around the world, views on AI’s impact on society are mixed across 20 global publics, according to a recent Pew Research Center survey.

A median of about half (53%) say the development of artificial intelligence, or the use of computer systems designed to imitate human behaviors, has been a good thing for society, while 33% say it has been a bad thing.

Opinions are also divided on another major technological development: using robots to automate many jobs humans have done in the past. A median of 48% say job automation has been a good thing, while 42% say it’s had a negative impact on society.





Reading for shut-ins. It’s the time of year for lists.

https://www.wired.com/gallery/best-books-artificial-intelligence/

The 8 Best Books About Artificial Intelligence to Read Now



(Related)

https://www.pogowasright.org/notable-privacy-and-security-books-2020/

Notable Privacy and Security Books 2020

Professor Daniel Solove is indefatigable when it comes to promoting privacy scholarship and sharing what he knows. Now he has compiled a list of some notable books on privacy and security from 2020. You can access his list here.

But wait… there’s more!”

To see a more comprehensive list of nonfiction works about privacy and security for all years, Professors Paul Schwartz and Daniel Solove maintain a resource page on Nonfiction Privacy + Security Books. Check it out!



(Related) Finding something to read…

https://www.bespacific.com/introducing-the-open-library-explorer/

Introducing the Open Library Explorer

Open Library Blog: “At the Library Leaders Forum 2020 (demo), Open Library unveiled the beta for what it’s calling the Explorer: an immersive digital library which powerfully recreates and enhances the experience of navigating a physical library. If the tagline doesn’t grab your attention, wait until you see it in action. Get Ready to Explore In this article, we’ll give you a tour of the Open Library Explorer and teach how one may take full advantage of its power features. You’ll also get a crash course on the 100 years of library history which led to its innovation and an opportunity to test-drive it yourself…thanks to the new Open Library Explorer, you can experience the joys of a physical library right in your web browser, as well as leverage superpowers which enabling you to explore in ways which may have previously been impossible…



No comments: