After more than a decade of operating under a Security Rule last substantively updated in 2013, US healthcare organizations now face a new compliance baseline.…
November 4, 2025
The European Union’s AI Act entered into force in August 2024. In February 2025, its first enforceable provisions took effect: a ban on AI systems…
September 23, 2025
By: Jeremy Diebert, Chief Architect — Pretty Fluid Technologies When we designed the core infrastructure for Zentinel, we made a decision that added significant engineering…
August 12, 2025
As of mid-2025, more than twenty US states have enacted comprehensive consumer privacy laws. Virginia, Colorado, Connecticut, Utah, Texas, Florida, Montana, Oregon, Delaware, Iowa, Indiana,…
July 1, 2025
In early 2025, the Department of Government Efficiency gained access to a range of federal information systems at agencies including the Social Security Administration, the…
May 20, 2025
By: Christopher Perry, CEO — Pretty Fluid Technologies In March 2025, 23andMe filed for Chapter 11 bankruptcy protection. The company that built a business on…
April 8, 2025
In January 2025, a Chinese AI lab called DeepSeek released an open-weight language model that matched or exceeded the performance of leading American AI systems…
February 25, 2025
In December 2024, PowerSchool — the largest K-12 education software provider in the United States — suffered a data breach that compromised the personal information…
January 14, 2025
In 2024, the European Union’s Artificial Intelligence Act entered into force — the world’s first comprehensive legal framework for regulating AI systems. Like GDPR before…
December 10, 2024
In late 2024, the Department of Health and Human Services proposed the most significant update to the HIPAA Security Rule since it was last revised…
October 8, 2024
In the summer of 2024, a background check company called National Public Data suffered what may be the largest data breach ever recorded by number…
August 13, 2024
In May and June 2024, a wave of breaches hit major companies with a common thread: all of them traced back to stolen credentials for…
June 11, 2024
In March 2024, AT&T confirmed that a dataset containing personal information for approximately 73 million current and former customers had been leaked on a dark…
April 9, 2024
In February 2024, a ransomware group called ALPHV/BlackCat breached Change Healthcare, a subsidiary of UnitedHealth Group that processes roughly one in three US patient records.…
February 6, 2024
When ChatGPT crossed 100 million users in early 2023, it became the fastest-growing consumer application in history. It also became one of the most consequential…
November 14, 2023
In July 2023, the Securities and Exchange Commission adopted new rules requiring public companies to disclose material cybersecurity incidents within four business days of determining…
September 12, 2023
In July 2023, the European Commission formally adopted the EU-US Data Privacy Framework, establishing a new legal mechanism for transferring personal data from the European…
July 11, 2023
In late May 2023, a zero-day vulnerability in MOVEit Transfer — a widely used managed file transfer software — was exploited by a ransomware group…
May 9, 2023
The Federal Trade Commission made its position clear in early 2023: health apps that share sensitive user data without proper consent are violating the law.…
March 14, 2023
In 2023, five comprehensive state privacy laws go live: California’s CPRA (the updated CCPA), Virginia’s CDPA, Colorado’s CPA, Connecticut’s CTDPA, and Utah’s UCPA. Each law…
January 17, 2023
In July 2022, a hacker posted a database on a forum with the personal information of 69 million Neopets users — names, email addresses, birth…
November 8, 2022
IBM’s annual Cost of a Data Breach Report dropped in 2022 with a number that should get the attention of any business leader: $4.35 million.…
August 10, 2022
In July 2022, the HHS Office for Civil Rights wrapped up 11 HIPAA enforcement actions in a single month — all of them for the…
May 3, 2022
In April 2022, Cash App disclosed that a former employee had downloaded sensitive data belonging to more than 8 million customers. Not a hacker with…
February 22, 2022
We have all heard of the great industrial revolutions over time, each responsible for moving society, century by century, into a more productive and comfortable…
April 13, 2021
Guest Post By: Dr. Roméo Farinacci What is the most valuable asset of any company? Understandably, most would say its people. True enough, yet there…
April 4, 2021
Among the many responsibilities that business owners and managers have traditionally held, they are now faced with an increasingly growing challenge – complying with regulations…
March 16, 2021
Every minute of everyday personal data is harvested, segmented, and monetized. This data drives a $227 billion industry, fueled by the digital footprints of millions…
February 16, 2021
As the fallout spreads from the latest cyberattack on U.S. government agencies and companies reportedly perpetrated by Russian interests, a Valley cybersecurity executive looks at…
December 21, 2020
If you are one of the tens of millions of small and mid-size businesses in America, you are at the greatest risk for a cyberattack. …
December 18, 2020
Richard Clarke, a key advisor on intelligence and counterterrorism who worked within the administrations of Presidents Reagan, Clinton and George H. W. Bush, once quipped…
December 16, 2020