Compliance Management

U.S. announces fresh sanctions against DPRK operatives the same day details emerged of the latest reconnaissance campaign by one of the rogue state’s infamous APT groups.

Google must also increase transparency about its location tracking settings, after a Washington state investigation determined consumers didn’t have control over their data privacy.

Users who already have TikTok installed are exempt from the new law, a major reason security pros believe it will be impossible to enforce, since users can download the app over the next several months before the law goes into effect, download it in another state once the law goes live, or use a VPN.

Cybersecurity bills targeted at addressing vulnerabilities in open-source software and satellites have been approved by the House and Senate Homeland Security Committees, reports The Record, a news site by cybersecurity firm Recorded Future.

In a new policy statement, the FTC vowed to combat deceptive practices tied to biometric data collection and marketing, while proposing to tighten its FTC Health Breach Notification Rule.

It’s the second proposed action taken under the FTC’s Health Breach Notification Rule and third complaint against a health app developer this year, signaling more developer scrutiny ahead.

First-ever action by DOJ’s Disruptive Technology Task Force alleges “hostile nation-states” attempted to smuggles stolen trade secrets to advance authoritarian regimes and facilitate human rights abuses.

Proactive security will consist of good security posture, a focus on prioritization, and extensive practice.