Back To Resource Center

Published: June 12, 2023

Security 3-2-1 Week of 6/9/23

By TalPoint Marketing articles

3 Interesting Articles

Judge Dismisses D.C.’s Privacy Lawsuit Against Meta

NYTimes ($): A Superior Court judge dismissed a privacy lawsuit against Meta by the District of Columbia, stating that Facebook’s policies adequately disclosed how third parties could obtain data and did not mislead consumers. This decision comes as Meta faces multiple legal challenges globally related to privacy, disinformation, and competition. The lawsuit stemmed from the Cambridge Analytica scandal, where Facebook user data was obtained without consent. Despite ongoing criticism, this dismissal is a significant win for Meta in addressing long-standing privacy concerns. The Cambridge Analytica incident shed light on Facebook’s data practices and sparked regulatory scrutiny worldwide.

Don’t Overlook Twitter’s Trove of Threat Intel for Enterprise Cybersecurity

Dark Reading:  Social media posts and data are an underutilized resource for cybersecurity teams to gather threat intelligence, according to experts. Just as cybercriminals use social media for attacks, defenders can leverage it for proactive defense. Utilizing open source intelligence (OSINT) from platforms like Twitter can provide early indicators of potential cyber threats. It is crucial for security teams to actively participate in the infosec community, search for relevant tags, and verify the collected information. External threat intelligence providers can assist in managing and analyzing the overwhelming amount of data.  Leveraging social media for threat intelligence is a valuable and budget-friendly addition to security strategies.

Texas Set to Become the Tenth State with a Comprehensive Privacy Law

Wilmer Hale: Texas is poised to become the tenth state in the US to enact a comprehensive privacy law with the passage of the Texas Data Privacy and Security Act. The law, expected to go into effect on March 1, 2024, broadens the scope of personal data and imposes obligations on businesses processing or selling such data. Similar to other state laws, it grants consumers rights over their data, including access, correction, deletion, and the ability to opt out of targeted advertising. The law also introduces prescriptive notice requirements for the sale of sensitive personal data and incorporates privacy by design principles. The enactment of this law, coupled with the increasing number of state privacy legislations, may spur Congress to revisit federal privacy legislation.

2 Stats You Should Know

The most proactive risk managers are 75% more likely to have the shortest recovery time from app outages due to cyberattack. (source)

AI will create at least 12 million more jobs than it destroys, a sign that in the long run, automation will be a net positive for society. (source)

1 More Thing

Let’s cap off the week with one thought-provoking question:

Our large and diverse network of experts is here to help...

Charles M.

Principal

Charlies is a 14 year cyber security expert. He started his career in the U.S. armed forces and then transitioned into commercial roles. A security engineer by training, he's well-versed in tool deployment and administration.

Ellen K.

GRC Expert

Ellen bring a decade of GRC expertise to the TalPoint community. She's knowledgeable on a variety of frameworks and employs a methodical approach to compliance. She's available for needs assessments, gap assessments, internal audits, and for certain frameworks running independent 3rd party audits.

Zachary C.

Founder and CRO

Zachary bring a 20+ year career in risk management to the TalPoint community. He's worked across healthcare, finance, and supply chain manufacturing. His broad experience offers both a holistic view of risk as well as a common sense approach to risk management.