Tuesday, March 02, 2021

I just got a “heads up” from Prof Soma regarding the Spring Privacy Foundation Seminar. It will be focused on “US State and EU Recent Privacy Developments.” Not sure of the date yet. If you have some insights into this topic you would be willing to share, you should contact Professor Soma.

https://www.law.du.edu/privacy-foundation





What risks meanwhile? 18 months of “not fixed yet” is the same as inviting the hackers back. Will they be looking for the “next hack” while they struggle to fix the holes the last one took advantage of?

https://www.technologyreview.com/2021/03/02/1020166/solarwinds-brandon-wales-hack-recovery-18-months/

Recovering from the SolarWinds hack could take 18 months

Fully recovering from the SolarWinds hack will take the US government from a year to as long as 18 months, according to the head of the agency that is leading Washington’s recovery.

Brandon Wales, the acting director of CISA, the US Cybersecurity and Infrastructure Agency, says that it will be well into 2022 before officials have fully secured the government networks compromised by Russian hackers. The list includes at least nine federal agencies, including the Department of Homeland Security and the State Department. Even fully understanding the extent of the damage will take months.





What should we think about how this was handled? Disclosure seems a bit weak. They are allowing the Bad Guys to dictate the story.

https://www.databreaches.net/updating-the-maze-attack-on-fairfax-county-public-schools/

Updating the Maze attack on Fairfax County Public Schools

In September, 2020 Fairfax County Public Schools in Virginia was hit with Maze ransomware. The attack was announced on Maze’s dedicated leak site in early September, and after multiple queries by this site, FCPS issued a statement confirming that they had been attacked.

One month later, the threat actors started dumping some data on their leak site. Shortly thereafter, the data was removed, leading to speculation that FCPS had paid ransom for the removal of the data. The district never made any public statement about whether they had paid ransom, but FCPS data was never reuploaded to Maze’s leak site and no additional data was ever dumped.

On November 9, FCPS notified the Maine Attorney General’s office of the breach, reporting that 19,653 people were impacted. They also notified their community that since their initial community notification about the breach in September, they had identified more people who would be receiving notification letters.

This week, FCPS filed a new report indicating that they had notified people of the breach on January 21. Now their estimated total number of people affected by the Maze attack was listed as 172,128. Based on the district’s census, that number likely reflects both students and employees.

DataBreaches.net sent an inquiry to FCPS asking them if they had paid ransom to the attackers, if the attackers had ever given them a copy of all data exfiltrated, and if they had found any evidence that any of the data had shown up on anywhere on the dark web or clear net, other than the original data dump sample the attackers had dumped in October and then removed. No response to the inquiries has been received by the time of this publication. This post will be updated if a reply is received.





Not quite a Terminator, but like that.

https://www.c4isrnet.com/opinion/2021/03/01/who-will-lead-the-world-in-artificial-intelligence/

Who will lead the world in artificial intelligence?

A new report emphasizes why it is urgent that the Department of Defense and Congress work together to modernize the way defense programs and budgets develop, integrate and deploy the latest technologies in support of American national security. Released by the National Security Commission on Artificial Intelligence, a federal body created to review and recommend ways to use artificial intelligence for national security purposes, the report recommends the use of AI to update America’s defense plans, predict future threats, deter adversaries and win wars.





Even lawyers can benefit from competitive intelligence.

https://abovethelaw.com/2021/03/lexisnexis-context-expands-to-ai-driven-attorney-insights/

LexisNexis Context Expands To AI-Driven Attorney Insights

Back in 2018, LexisNexis unveiled their Context application, taking Ravel Law’s AI technology, marrying it to the LexisNexis data, and producing a remarkable “killer application” for legal artificial intelligence. By typing in the name of your judge, the system would show not just their record in adjudicating substantially similar questions but highlight the exact language and case citations that the judge defaults to whenever hearing that issue. The initial launch also gathered expert reports allowing easy reference to root out the mercenary expert who flip-flops on specific issues every time the wind blows. Last year, the company expanded the offering to include company data, providing an easily navigable snapshot of a company’s litigation and news profile.

Today, the company announces the latest extension of the Context universe — Contextiverse? — the ability to search attorneys.





Education future? Teaching students who do not speak the professor’s language?

https://www.zdnet.com/article/ciscos-webex-debuts-free-real-time-translation-from-english-to-100-languages/

Cisco's Webex debuts free, real-time translation from English to 100+ languages

Cisco on Tuesday announced free-real, time translation for Webex, its fast-growing videoconferencing platform. The feature, available in preview this month and generally available in May, will translate spoken English into captions in any one of more than 100 languages.





Developing competitive job-seekers.

https://www.bespacific.com/how-to-identify-and-apply-for-unposted-job-opportunities/

How to identify and apply for unposted job opportunities

Fast Company – “If you’re looking for a job, your first step may be to peruse job boards. While it’s a tried-and-true method, a growing number of jobs are “hidden,” as more companies move to employee referrals and professional networks for sourcing qualified candidates more quickly, according to a study by Jobvite. If you don’t have an inside connection, you may think finding these leads is a matter of pure luck. However, it’s possible to get into the talent pipeline via the hiring manager’s inbox. “The reality is that a lot of markets and industries are in constant flux and chaos,” says Ivan Shovkoplias, head of content for Resume.io, an online résumé builder. “Many companies reorganize slower than needs appear, and openings aren’t anticipated by managers. Also, the infrastructure for job listings is not up to speed with what companies need. The world is changing faster than the tools.” … Once you’ve got a lead on a company that might be hiring, you need to determine the right person to contact. You’ll want to identify a hiring manager as well as the manager of the department in which you’d be working. “A manager may be able to walk your résumé to HR and be an ambassador,” Shovkoplias says. LinkedIn’s search tool is a good place to find appropriate people. Once you’ve got names, use a tool like Hunter.io to dig up their email addresses…”



No comments: