Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
Comments
Cisco Study Finds Fewer Data Breaches at GDPR-Ready Firms
Threaded  |  Newest First  |  Oldest First
Joe Stanganelli
50%
50%
Joe Stanganelli,
 User Rank: Ninja
1/24/2019 | 5:42:04 PM
GDPR compliance
GDPR is the rare data-stewardship regulation that (1) caused so much panic and (2) was so in-depth and broadly encompassing that it compelled a lot of organizations to do more than "check-the-box compliance" (which is what usually happens).

Things might level out *slightly* in the next, say, 3-5 years, but it appears that all that hype was good for something.
Kelly Jackson Higgins
50%
50%
Kelly Jackson Higgins,
 User Rank: Strategist
1/24/2019 | 6:06:10 PM
Re: GDPR compliance
Seriously! All the angst seems to be replaced by some pretty good outcomes for those who comply, according to this new data.
Dr.T
100%
0%
Dr.T,
 User Rank: Ninja
1/29/2019 | 11:05:29 AM
Re: GDPR compliance
“Seriously! All the angst seems to be replaced by some pretty good outcomes for those who comply, according to this new data.“ Yes it seems so but but I expect that being charging while we gain more experience. Big companies will find loopholes quite easily.
Joe Stanganelli
50%
50%
Joe Stanganelli,
 User Rank: Ninja
1/30/2019 | 11:22:30 PM
Re: GDPR compliance
@Kelly: Well, to look at the other side of things, what's the total cost of compliance in each case? And how many years down the road will the ROI be realized?

Compare the recent Google fine of fifty-something million dollars. They probably have that much in the company swear jar.
Dr.T
50%
50%
Dr.T,
 User Rank: Ninja
1/29/2019 | 11:02:05 AM
Re: GDPR compliance
“GDPR is the rare data-stewardship regulation” I think one reason for that is it just not a regulation but the one that is enforced.
Joe Stanganelli
50%
50%
Joe Stanganelli,
 User Rank: Ninja
1/30/2019 | 11:19:48 PM
Re: GDPR compliance
Well, trust me, a lot of the EU DPAs weren't exactly sitting on their laurels when it came to enforcement/policing.

It's more an issue of the difference between the EU's approach to these matters and the US's approach to these matters (the latter being much more laissez-faire by comparison).
Dr.T
50%
50%
Dr.T,
 User Rank: Ninja
1/29/2019 | 11:03:08 AM
Re: GDPR compliance
“lot of organizations to do more than "check-the-box compliance" (which is what usually happens).” This is really true. Most of the time showing that the box is checked is enough for many organizations.
Dr.T
50%
50%
Dr.T,
 User Rank: Ninja
1/29/2019 | 11:04:06 AM
Re: GDPR compliance
“Things might level out *slightly* in the next, say, 3-5 years, but it appears that all that hype was good for something.” Makes sense. Companies will start firing back and try to win cases in the courts unfortunately.
Dr.T
50%
50%
Dr.T,
 User Rank: Ninja
1/29/2019 | 11:00:08 AM
New study
“a new study already shows that organizations that invested in data privacy to meet GDPR guidelines suffered fewer data breaches in the past year” Positive results of a regulation? This certainly rarely happens. :-))


Malicious USB Drive Hides Behind Gift Card Lure
Dark Reading Staff 3/27/2020
How Attackers Could Use Azure Apps to Sneak into Microsoft 365
Kelly Sheridan, Staff Editor, Dark Reading,  3/24/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "I feel safe, but I can't understand a word he's saying."
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-7599
PUBLISHED: 2020-03-30
All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is publicly ...
CVE-2020-7610
PUBLISHED: 2020-03-30
All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsotype, leading to cases where an object is serialized as a document rather than the intended BSON type.
CVE-2019-17560
PUBLISHED: 2020-03-30
The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" version...
CVE-2019-17561
PUBLISHED: 2020-03-30
The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.
CVE-2020-8509
PUBLISHED: 2020-03-30
Zoho ManageEngine Desktop Central allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure.