July 2023 – PossibleThreat Articles

This week on Lock and Code, we speak with Thomas Reed about how Apple was able to previously address a security loophole that still persists on Windows, and what both companies get wrong (and right) about security.

Security Sophos

SEC demands four-day disclosure limit for cybersecurity breaches

July 31, 2023 0 Comments data breach, data loss, Opinion, Ransomware, regulation, sec

Credit to Author: Paul Ducklin| Date: Mon, 31 Jul 2023 16:57:27 +0000

When is a ransomware attack a reportable matter? And how long have you got to decide?

ComputerWorld Independent

EEOC Commissioner: AI system audits might not comply with federal anti-bias laws

July 31, 2023 0 Comments Artificial intelligence, Data privacy, Emerging Technology, generative ai, Government IT, IT Leadership

Keith Sonderling, commissioner of the US Equal Employment Opportunity Commission (EEOC), has for years been sounding the alarm about the potential for artificial intelligence (AI) to run afoul of federal anti-discrimination laws such as the Civil Rights Act of 1964.

It was not until the advent of ChatGPT, Bard, and other popular generative AI tools, however, that local, state and national lawmakers began taking notice — and companies became aware of the pitfalls posed by a technology that can automate efficiencies in the business process.

Instead of speeches he’d typically make to groups of chief human resource officers or labor employment lawyers, Sonderling has found himself in recent months talking more and more about AI. His focus has been on how companies can stay compliant as they hand over more of the responsibility for hiring and other aspects of corporate HR to algorithms that are vastly faster and capable of parsing thousands of resumes in seconds.

To read this article in full, please click here

Security Wired

Apple iOS, Google Android Patch Zero-Days in July Security Updates

July 31, 2023 0 Comments Security, Security / Security Advice

Credit to Author: Kate O’Flaherty| Date: Mon, 31 Jul 2023 11:00:00 +0000

Plus: Mozilla fixes two high-severity bugs in Firefox, Citrix fixes a flaw that was used to attack a US-based critical infrastructure organization, and Oracle patches over 500 vulnerabilities.

Security Sophos

Understanding the New SEC Cybersecurity Rules: A Guide for Executives

July 31, 2023 0 Comments Compliance, grc, Incident Response, sec, security operations

Credit to Author: gallagherseanm| Date: Mon, 31 Jul 2023 10:00:38 +0000

The new SEC cybersecurity rules significantly enhance disclosure requirements, emphasize the board’s role in risk management, and introduce a stringent four-day reporting timeline, necessitating that public companies bolster their cybersecurity strategies, improve incident response processes, and ensure robust communication plans are in place.

ComputerWorld Independent