The U.K. announced an update to the Network and Information Systems Regulations, including mandatory incident reporting obligations for managed service providers and minimum security requirements with fines of up to 17 million GBP for noncompliance, The Record reports. The government said essential ...

Password manager LastPass announced an investigation into "a security incident" in which customers' personal data, stored in a third-party cloud storage provider, was accessed by an "unauthorized party," TechCrunch reports. In a company blog post, CEO Karim Toubba said the party used information t...

The European Data Protection Supervisor and the European Union Agency for Cybersecurity signed a memorandum of understanding to forge a strategic cooperation on data protection and cybersecurity matters. The entities described the MOU as a partnership for "designing, developing and delivering" aware...

Accounts of more than 5 million Twitter users in Europe and the U.S. may have been compromised, InfoSecurity Magazine reports, citing research from cybersecurity expert Chad Loder. In a Twitter post, Loder said the “breach occurred no earlier than 2021.” His account was suspended after the post. The...

Cyber events are global issues that manifest in many ways and generally impact several countries simultaneously. It is critical to comprehend the requirements and procedures set by each jurisdiction to ensure compliance and, at the same time, the security of personal data and data subjects. This art...