CYBERSECURITY

CISA Issues Advisory on Black Basta Ransomware

On May 10, 2024, CISA, along with the FBI, HHS, and MS-ISAC, issued a joint Cybersecurity Advisory relating to Black Basta ransomware affiliates “that have targeted over 500 private industry and critical infrastructure entities, including healthcare organizations, in North America, Europe, and Australia.” Read more

ENFORCEMENT + LITIGATION

X Corp Loses Battle Over Public Data Access

In a significant setback for Elon Musk's X Corp (formerly Twitter), a U.S. District Judge has dismissed the company's lawsuit against an Israeli data-scraping firm, Bright Data Ltd. We previously reported on X’s recent spree of lawsuits against data-scraping companies. Read more

DATA PRIVACY

Vermont Data Privacy Act, Most Robust Consumer Protections Since CCPA

Last week, the Vermont legislature passed H. 121, the Vermont Data Privacy Act. This law will make Vermont the 18th state to grant consumers privacy rights similar to those under the California Consumer Privacy Act (CCPA). It is scheduled to go into effect on July 1, 2025. Read more

ARTIFICIAL INTELLIGENCE

Generative AI Poses Unique Risks to Data Security, NIST Warns

Generative artificial intelligence (AI) has opened a new front in the battle to keep confidential information secure. The National Institute of Standards and Technology (NIST) recently released a draft report highlighting the risk generative AI poses to data security. The report, entitled “Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile,” details generative AI’s potential data security pitfalls and suggests actions for generative AI management. Read more

PRIVACY TIP #398

Cybersecurity Agencies Issue Guidance for Civil Society on Mitigating Cyber Threats

The Cybersecurity and Infrastructure Security Agency (CISA) and its partners recently issued helpful guidance for entities that have limited resources to address cyber threats. Although the guidance specifically addresses civil groups who “are targeted by state sponsored threat actors who seek to undermine democratic values and interests,” the information provided could be a beneficial resource to all organizations. Learn more in this week's Privacy Tip. Read more