Sydney J. Freedberg Jr. reports: AUSA 2024 — Army undersecretary Gabe Camarillo announced here Tuesday that the service would create a secure online enclave where small businesses can work with sensitive information under the Army’s protection — a potential lifeline for smaller firms struggling to meet Pentagon cybersecurity requirements and defend themselves against high-end threats like China. Known as…
Category: Of Note
Virginia Contractor Settles False Claims Act Liability for Failing to Secure Medicare Beneficiary Data
Here’s today’s reminder that it’s not just HHS OCR that entities need to be concerned about in terms of enforcement of data security requirements for health data. ASRC Federal Data Solutions LLC (AFDS), headquartered in Reston, Virginia, has agreed to resolve False Claims Act allegations in connection with a government contract related to its storage…
Au: Banking giant HSBC loses battle against scam victim
So you hired someone to work for your firm and they turned out to be a sophisticated scammer who scammed your customers? And you think you shouldn’t be held liable for any money your customers lost in the scam? Well, if you’re in Australia, think again. Aisha Dow reports: Banking giant HSBC may have to…
UK Ambulance Services targeted by Kremlin-protected Russian hackers
Richard Holmes reports: UK ambulance services have been targeted by Russian hackers, risking disruption to their communication systems, with the potential to severely hamper Britain’s emergency services. Intelligence material seen by i shows that over the past 12 months, a Kremlin-protected hacking network has targeted key suppliers to The UK Ambulance Services and Ministry of Defence (MoD)….
Do the Marriott cybersecurity settlements send the wrong message to CISOs, CFOs?
A report by Evan Schuman about recent Marriott settlements with the FTC and state attorneys general suggests that the settlements leave much to be desired. Both settlements have cybersecurity requirements, and the state settlement has a monetary component, but neither is strong enough as far as some experts are concerned. Here’s a snippet or two…
Cyber resilience act: Council adopts new law on security requirements for digital products
This is big. From the Council of the EU: The Council adopted today a new law on cybersecurity requirements for products with digital elements with a view to ensuring that products, such as connected home cameras, fridges, TVs, and toys, are safe before they are placed on the market (cyber resilience act). The new regulation…