Data Breach

• newColorado spine group hit with data breach; 21,450 patients may be affected
  Boulder (Colo.) Neurosurgical & Spine Associates experienced a data breach in September that could have exposed the personal information of 21450 ...
  - 5 hours ago 30 Nov 21, 11:05pm -
• newJapanese Electronics Giant Panasonic Discloses Data Breach - BankInfoSecurity
  Japanese multinational conglomerate Panasonic has disclosed a security breach that it says involved unnamed threat actors accessing servers on its ...
  - 7 hours ago 30 Nov 21, 9:33pm -
• newPanasonic Confirms Data Breach After Cyber Attack - IT World Canada
  On Friday, Japanese technology giant Panasonic confirmed that it had been the victim of a cyber attack on November 11 in which attackers accessed ...
  - 7 hours ago 30 Nov 21, 9:18pm -
• newRhode Island Man Charged in Jan. 6 Capitol Breach | Washington, DC News - USNews.com
  PROVIDENCE, R.I. (AP) — A Rhode Island man who federal authorities say was caught on video using what appeared to be a wooden table leg to assault ...
  - 7 hours ago 30 Nov 21, 9:11pm -
• newReport data breaches within 36 hours? Banks are OK with that. | American Banker
  A final ruling by federal regulators on how soon a bank has to report a data breach or computer-security incident gives banks far less time than ...
  - 7 hours ago 30 Nov 21, 8:48pm -

Krebs On Security

• The Internet is Held Together With Spit & Baling Wire

  

  Imagine being able to disconnect or redirect Internet traffic destined for some of the world's largest companies -- just by spoofing an email. This is the nature of a threat vector recently removed by a Fortune 500 firm that operates one of the world…
  - 4 days ago 26 Nov 21, 7:03pm -
• Arrest in ‘Ransom Your Employer’ Email Scheme

  

  In August, KrebsOnSecurity warned that scammers were contacting people and asking them to unleash ransomware inside their employer's network, in exchange for a percentage of any ransom amount paid by the victim company. This week, authorities in Nige…
  - 8 days ago 22 Nov 21, 9:57pm -

Naked Security

• newControversial face matchers Clearview set to be fined over $20m

  

  Scraping data for a facial recognition service? "That's unlawful", concluded both the British and the Australians.
  - 13 hours ago 30 Nov 21, 3:13pm -
• Cloud Security: Don’t wait until your next bill to find out about an attack!

  

  Cloud security is the best sort of altruism: you need to do it to protect yourself, but you help to protect everyone else at the same time.
  - 4 days ago 26 Nov 21, 7:58pm -

CSO Online

• newBrandPost: BlackMatter Ransomware Quickly Fills Void Left by Darkside, REvil

  

  In late July, a new Ransomware as a Service (RaaS), called BlackMatter, appeared on the scene. After the apparent retirement of previously devastating ransomware-as-a-service (RaaS) groups like Darkside and REvil, BlackMatter claims to fill the vo…
  - 6 hours ago 30 Nov 21, 10:07pm -
• newBrandPost: Cybersecurity Steps for the Energy and Utilities Industry

  

  Without a doubt, one of the most game-changing innovations is the Internet of Things (IoT). Industry analyst firm IDC expects there will be over 41 billion connected IoT devices by 2025.The exponential growth of IoT devices in the energy and utili…
  - 6 hours ago 30 Nov 21, 9:44pm -

FierceITSecurity

CIO Online

• newBrandPost: Episode 3: Crafting a Strategy for Agile and Secure Networks

  

  Thinking strategically is key for success in IT. In 2021, IDG saw a significant jump in the number of CIOs calling themselves “strategic.” These are the CIOs who spend the majority of their time driving business innovation and identifying oppo…
  - 12 hours ago 30 Nov 21, 4:29pm -
• Human-based Risks are the Biggest Threat to Your Organization

  

  GettyYour employees are your biggest vulnerability. Often, these are genuine mistakes: people accidentally falling for phishing attacks or mistakenly leaking data. Occasionally, employees also intentionally break the rules.To read this article i…
  - 13 days ago 18 Nov 21, 12:20pm -

Homeland Security Today

• newWife of ‘El Chapo’ Sentenced to Prison for Drug Trafficking and Money Laundering
  From 2011 and continuing to at least Jan. 19, 2017, Coronel Aispuro was a co-conspirator in the activities of the Sinaloa Cartel.The post Wife of ‘El Chapo’ Sentenced to Prison for Drug Trafficking and Money Laundering appeared first on Hstoday.
  - 5 hours ago 30 Nov 21, 11:11pm -
• newTwo Oregon-Based Coast Guardsmen Receive High Honors for Heroism
  Two Coast Guard Sector North Bend service members were recently recognized with high honors for heroic actions taken in 2021 to save lives while serving along Oregon’s coast. Petty Officer 1st Class Trevor Salt, an aviation survival technician at C…
  - 5 hours ago 30 Nov 21, 11:02pm -

Graham Cluley Latest

• Social media firms will be forced to unmask online trolls, says Australia
  The Prime Minister of Australia has said his government will introduce legislation which will compel social media companies to "unmask anonymous online trolls," and allow victims to launch defamation proceedings.Read more in my article on the Hot f…
  - 2 days ago 29 Nov 21, 10:32am -
• Couple arrested for secretly installing cryptomining software on department store PCs
  Police in Tarragona, Spain, have arrested a man and a woman after they allegedly infected computers at high-street stores with malware with the intention of mining cryptocurrency on them.Read more in my article on the Hot for Security blog.
  - 4 days ago 26 Nov 21, 8:41pm -

Multi-State Information Sharing Center

• Multiple Vulnerabilities in Mozilla Firefox Could Allow for Remote Code Execution
  ...
  - -
• Multiple Vulnerabilities in Google Chrome Could Allow for Remote Code Execution
  ...
  - -

Network World

• SmartNICs set to infiltrate enterprise networks

  

  Enterprise infrastructure that supports data center, cloud and edge networks could someday be dominated by one of its tiniest components--the smartNIC or data processing unit (DPU).Use of smartNICs in the enterprise is still evolvinging, but the i…
  - 1 day ago 29 Nov 21, 6:05pm -
• How to buy Wi-Fi 6 access points

  

  Wi-Fi 6 has some impressive improvements over its predecessor Wi-Fi 5 including lower latency, faster speeds, higher throughput, and increased range that can make it a better fit to serve both dense clusters of clients and clients running high-ban…
  - 2 days ago 29 Nov 21, 11:00am -

Packet Storm Latest

• newWapiti Web Application Vulnerability Scanner 3.0.8
  Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities.
  - 13 hours ago 30 Nov 21, 2:51pm -
• newStegano 0.10.1
  Stegano is a basic Python Steganography module. Stegano implements two methods of hiding: using the red portion of a pixel to hide ASCII messages, and using the Least Significant Bit (LSB) technique. It is possible to use a more advanced LSB method b…
  - 13 hours ago 30 Nov 21, 2:49pm -

NIST Latest in IT

• NISTs Network-of-Things Model Builds Foundation to Help Define the Internet of Things
  A new publication from the National Institute of Standards and Technology (NIST) provides a basic model aimed at helping researchers better understand the Internet of Things (IoT) and its security challenges.Credit: Natasha ...
  - 28 Jul 16, 12:10pm -
• Realizing the Potential of Quantum Information Science and Advancing High-Performance Computing
  The White House announced today a new report from the National Science and Technology Council on challenges, opportunities and the path forward in quantum information science, including a plan for high-performance computing.As described ...
  - 27 Jul 16, 2:38pm -

US- CERT Alerts

• AA21-321A: Iranian Government-Sponsored APT Cyber Actors Exploiting Microsoft Exchange and Fortinet Vulnerabilities in Furtherance of Malicious Activities
  Original release date: November 17, 2021 | Last revised: November 19, 2021SummaryActions to Take Today to Protect Against Iranian State-Sponsored Malicious Cyber Activity• Immediately patch software affected by the following vulnerabilities: CVE-2…
  - 14 days ago 17 Nov 21, 2:00pm -
• AA21-291A: BlackMatter Ransomware
  Original release date: October 18, 2021SummaryActions You Can Take Now to Protect Against BlackMatter Ransomware• Implement and enforce backup and restoration policies and procedures.• Use strong, unique passwords.• Use multi-factor authenti…
  - 43 days ago 18 Oct 21, 5:00pm -

Cisco Security Alerts

• ISC BIND Subsequent RDATA Query Processing Remote Denial of Service Vulnerability
  HP has released an additional security bulletin and updated software to address the ISC BIND subsequent RDATA query processing remote denial of service vulnerability.
  - 1 Feb 16, 2:04pm -
• Network Time Protocol decodenetnum() Function Denial of Service Vulnerability
  IBM has released a security advisory and fixes to address the Network Time Protocol decodenetnum() function denial of service vulnerability.
  - 25 Jan 16, 1:43pm -

Cisco Event Responses

• Cisco Event Response: October 2021 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication
  - 35 days ago 27 Oct 21, 4:00pm -
• Cisco Event Response: September 2021 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication
  - 69 days ago 22 Sep 21, 11:00pm -

HIPPA Omnibus Rule

• BlackMatter Claims to Shut Ops; Experts Suspect Rebranding

  

  Criminal Group Announced News on Russian Site, Says Malware Research Organization vx-undergroundRansomware-as-a-service provider BlackMatter has ceased operations due to pressure from local authorities, malware research organization vx-underground sa…
  - -
• FBI Warns of Ransomware Actors Leveraging M&A Data

  

  Bad Actors Learn Victim Firms' Public, Nonpublic Data Before Attack to Increase ImpactThe Federal Bureau of Investigation has issued a notification warning to private sector companies, especially those listed or in the process of being listed on stoc…
  - -

• Ransomware Incidents Among Largest Breaches on Federal Tally

  

  Analysis of Latest Health Data Breaches on the HHS OCR 'Wall of Shame'Ransomware incidents are becoming a major cause of health data breaches affecting millions of individuals that have been reported so far in 2021, according to the latest additions…
  - -
• CISA Directs Federal Agencies to Patch Known Vulnerabilities

  

  BOD 22-01 Imposes Strict Deadlines for Remediation of Publicly Known ExploitsThe U.S. Cybersecurity and Infrastructure Security Agency on Wednesday issued a new directive - BOD 22-01 - requiring federal civilian agencies to patch vulnerabilities know…
  - -
• HIPAA Omnibus Final Rule
  This package of regulations includes modifications to the HIPAA privacy, security, enforcement and breach notification rules, as required under the HITECH Act.
  - -
• HITECH Act Stage 2 EHR Incentive Program Software Certification Final Rule
  This rule establishes criteria for electronic health records software that qualifies for Stage 2 of the HITECH Act Electronic Health Record Incentive Program. The program, part of the economic stimulus package, is providing billions of dollars in Med…
  - -
• HITECH Act Stage 2 EHR Incentive Program Meaningful Use Final Rule
  This rule establishes criteria that hospitals and physicians must meet to qualify as "meaningful users" of electronic health records and receive further financial incentives in Stage 2 of the HITECH Act Electronic Health Record Incentive Program. The…
  - -
• FDA: Unique Device Identification System
  This proposed rule from the U.S. Food and Drug Administration would require unique identifiers on medical devices. While the rule aims to ease the collection and analysis of data about adverse health events and help detect counterfeit products, no pa…
  - -
• Live Webinar | ‘Tis the Season…for Fraud
  - -
• Panel Discussion | The Future of Cybersecurity: Is the US Government Finally Getting Serious About Protecting Supply Chains?
  - -
• Fireside Chat | State of Software Security: The Costly Risks of Open Source Code
  - -
• Live Webinar | The 5 Myths Hindering You From SOC Automation
  - -
• Why Healthcare Entities Fall Short Managing Security Risk
  Why do so many HIPAA -covered entities and their vendors do such a poor job managing security risk and safeguarding patient's protected health information? Many critical factors come into play, say Roger Severino, ex- director of HHS OCR, and Bob Cha…
  - -
• Ransomware Gangs Are Not Infallible
  The latest ISMG Security Report features the fallibility of ransomware gangs and why victims should always seek help from a reputable response firm, law enforcement or other qualified expert. Also featured: Data protection advice and why the remote w…
  - -
• Why Hive Attacks Are the Latest Menace to Healthcare Sector
  Several characteristics of the Hive ransomware group make the threat actor particularly menacing to its victims, which include healthcare sector targets, says Adam Meyers, vice president of intelligence at security firm CrowdStrike.
  - -
• Case Study: Intrusion Prevention, Detection in the Cloud
  Chronic disease management firm Omada Health has been changing its approach to cloud intrusion prevention and detection, which is reducing time spent on investigating false positives, says the company's information security leader, Bill Dougherty.
  - -
• Changing Employee Mindsets During Digital Transformation
  How CISOs Can Ensure That the Business Succeeds While It TransformsWhile doing digital transformation, CISOs tend to look more at technology and try to adapt it without making the distinction between technologies that are must-have and good to have.…
  - -
• Forget Hacking Back: Just Waste Ransomware Gangs' Time
  Time Is Money for Criminals; Some Profits Susceptible to DDoS and Other DisruptionsWho's been launching distributed denial-of-service attacks against ransomware operators' sites and cybercrime markets? Disrupting ransomware operations that rely on To…
  - -
• Memo to Ransomware Victims: Seeking Help May Save You Money
  Flaw in DarkSide and BlackMatter Enabled Security Firm to Decrypt Files for FreeWhile ransomware might be today's top cybercrime boogeyman, attackers aren't infallible. The latest example: Errors in DarkSide - and its BlackMatter rebrand - enabled se…
  - -
• Troublemaker CISO: Do You Know What You Should Be Doing?
  The Rant of the Day From Ian Keller, EricssonIn his second Rant of the Day for the CyberEdBoard Profiles in Leadershop blog, Ian Keller, security director at Ericsson and CyberEdBoard executive member, talks about what a CISO does - and what a CISO s…
  - -

Electronic Frontier Foundation | Deep Links

• newA One-Two Punch for Internet Freedom 👊
  Power Up Your Donation Week is here! Starting on #GivingTuesday, your contribution to EFF will have double the impact on digital privacy, security, and free speech rights for everyone.Power UpDonate today and get an automatic 2x match!A group of p…
  - 13 hours ago 30 Nov 21, 3:12pm -
• newPodcast Episode: Who Should Control Online Speech?

  

  Episode 103 of EFF’s How to Fix the InternetThe bots that try to moderate speech online are doing a terrible job, and the humans in charge of the biggest tech companies aren’t doing any better. The internet’s promise was as a space where ever…
  - 19 hours ago 30 Nov 21, 9:00am -

• Dream Job Alert: Media Relations Director for EFF
  We’ve got an amazing opportunity for a senior media relations person to join the EFF team.Right now, we are hiring for a Media Relations Director role, a leadership role that oversees and directs EFF’s press strategy and engagement. Join EFF and…
  - 1 day ago 29 Nov 21, 8:55pm -
• Our Patent Review System is Ten Years Old. It’s Time to Make It Stronger.
  The U.S. Patent and Trademark Office (USPTO) grants more than 300,000 patents each year.  Some of those patent grants represent genuine new inventions, but many of them don’t. On average, patent examiners have about 18 hours to spend on each appli…
  - 1 day ago 29 Nov 21, 7:25pm -
• Coalition Against Stalkerware Celebrates Two Years of Work to Keep Technology Safe for All
  In this guest post by the Coalition Against Stalkerware marking its second anniversary, the international alliance takes a look back on its achievements while seeing a lot of challenges ahead.Two years ago, in November 2019, the Coalition Against Sta…
  - 6 days ago 25 Nov 21, 9:13am -
• UN Human Rights Committee Criticizes Germany’s NetzDG for Letting Social Media Platforms Police Online Speech
  A UN human rights committee examining the status of civil and political rights in Germany took aim at the country’s Network Enforcement Act, or NetzDG, criticizing the hate speech law in a recent report for enlisting social media companies to carry…
  - 7 days ago 23 Nov 21, 9:56pm -
• Indonesian Court Allows Internet Blocking During Unrest, Tightening Law Enforcement Control Over Users’ Communications and Data
  Indonesia’s Constitutional Court dealt another blow to the free expression and online privacy rights of the country’s 191 million internet users, ruling that the government can lawfully block internet access during periods of social unrest. The O…
  - 7 days ago 23 Nov 21, 9:27pm -
• Podcast Episode: The Revolution Will Be Open Source

  

  Episode 102 of EFF’s How to Fix the InternetThe open source movement focuses on collaboration and empowerment of users. It plays a critical role in building a better digital future, but the movement is changing as more people from around the world…
  - 8 days ago 23 Nov 21, 9:35am -
• EU Parliament Takes First Step Towards a Fair and Interoperable Market
  The EU’s Proposal for a Digital Market Act (DMA) is an attempt to create a fairer and more competitive market for online platforms in the EU. It sets out a standard for very large platforms, which act as gatekeepers between business users and end u…
  - 8 days ago 23 Nov 21, 8:00am -
• Manifest V3: Open Web Politics in Sheep's Clothing
  When Google introduced Manifest V3 in 2019, web extension developers were alarmed at the amount of functionality that would be taken away for features they provide users. Especially features like blocking trackers and providing secure connections. Th…
  - 8 days ago 23 Nov 21, 12:29am -
• Police Aerial Surveillance Endangers Our Ability to Protest
  The ACLU of Northern California has concluded a year-long Freedom of Information campaign by uncovering massive spying on Black Lives Matter protests from the air. The California Highway Patrol directed aerial surveillance, mostly done by helicopters…
  - 8 days ago 22 Nov 21, 11:58pm -
• Digital Rights Updates with EFFector 33.7
  Want the latest news on your digital rights? Then you’ve come to the right place! Version 33, issue 7 of EFFector, our monthly-ish newsletter, is out now! Catch up on the latest EFF news, from how Apple is listening and retracting some of its phone…
  - 11 days ago 19 Nov 21, 7:02pm -
• Apple’s Self Service Repair Program Must Live Up To Its Promises
  The Right to Repair movement got a boost this week, when Apple announced a new program, Self Service Repair, that will let people buy genuine Apple parts and tools to make some of their own repairs to limited Apple products such as newer iPhones and…
  - 12 days ago 19 Nov 21, 1:12am -
• EFF Tells Court to Protect Anonymous Speakers, Apply Proper Test Before Unmasking Them In Trademark Commentary Case
  Judges cannot minimize the First Amendment rights of anonymous speakers who use an organization’s logo, especially when that use may be intended to send a message to the trademark owner, EFF told a federal appeals court this week.EFF filed its bri…
  - 12 days ago 18 Nov 21, 9:45pm -
• Podcast Episode: What Police Get When They Get Your Phone

  

  Episode 101 of EFF’s How to Fix the InternetIf you get pulled over and a police officer asks for your phone, beware. Local police now have sophisticated tools that can download your location and browsing history, texts, contacts, and photos to kee…
  - 15 days ago 16 Nov 21, 10:00am -
• EFF’s New Series of How to Fix the Internet Podcast Tackles Toughest Issues in Tech
  Episodes Feature Innovators Seeking Creative Solutions to Build a Better Online WorldSan Francisco—Troubled when Twitter takes down posts of people or organizations you follow? Concerned about protecting yourself and your community from surveillanc…
  - 15 days ago 16 Nov 21, 9:00am -
• EFF’s How to Fix the Internet Podcast Offers Optimistic Solutions to Tech Dystopias

  

  It seems like everywhere we turn we see dystopian stories about technology’s impact on our lives and our futures—from tracking-based surveillance capitalism to street level government surveillance to the dominance of a few large platforms choking…
  - 15 days ago 16 Nov 21, 8:00am -
• Federal Agencies Need to Be Staffed to Advance Broadband and Tech Competition

  

  In the U.S., we need better internet. We need oversight over Big Tech, ISPs, and other large companies. We need the federal agencies with the powers to advance competition, protect privacy, and empower consumers to be fully staffed and working. New…
  - 15 days ago 15 Nov 21, 8:13pm -
• After Facebook Leaks, Here Is What Should Come Next
  Every year or so, a new Facebook scandal emerges. These blowups follow a fairly standard pattern, at least in the U.S. First, new information is revealed that the company misled users about an element of the platform—data sharing and data privacy,…
  - 15 days ago 15 Nov 21, 5:28pm -
• EFF to Supreme Court: Warrantless 24-Hour Video Surveillance Outside Homes Violates Fourth Amendment
  Police in Illinois Filmed Defendant’s Home Nonstop for 18 MonthsWashington, D.C.—The Electronic Frontier Foundation (EFF) today urged the Supreme Court today to review and reverse a lower court decision in United States v. Tuggle finding that po…
  - 18 days ago 12 Nov 21, 9:23pm -
• Apple Has Listened And Will Retract Some Harmful Phone-Scanning
  Since August, EFF and others have been telling Apple to cancel its new child safety plans. Apple is now changing its tune about one component of its plans: the Messages app will no longer send notifications to parent accounts.That’s good news. As…
  - 18 days ago 12 Nov 21, 7:49pm -
• Remembering Aaron Swartz: Aaron Swartz Day 2021
  EFF invites everyone to participate this Saturday, Nov. 13, in this year's (virtual) Aaron Swartz Day and International Hackathon—an annual event celebrating the life and continuing legacy of activist, programmer, and entrepreneur Aaron Swartz.…
  - 18 days ago 12 Nov 21, 5:50pm -
• The Public Should Know Who Profits From Patent Troll Lawsuits
  It’s often impossible to find out who owns a United States patent.Even people who get sued over patents often can’t figure out who is demanding money from them. That’s even more true when the lawsuit comes from a patent troll wielding a vague…
  - 19 days ago 11 Nov 21, 7:21pm -
• Lawmakers Choose the Wrong Path, Again, With New Anti-Algorithm Bill
  - 19 days ago 11 Nov 21, 7:08pm -
• Ninth Circuit: Surveillance Company Not Immune from International Lawsuit
  Vendors of surveillance technology can make big money on the global market, frequently by enabling authoritarian governments to spy on journalists and activists. That’s why, for years, EFF has called for more accountability against technology compa…
  - 20 days ago 10 Nov 21, 8:55pm -
• Certbot’s Instructions Generator now available in Farsi
  EFF’s Certbot tool helps to automate TLS/SSL certificates for web servers—and we believe that should be a global right. Certbot is a free, open source software tool for automatically using Let’s Encrypt certificates, and is part of EFF’s larg…
  - 20 days ago 10 Nov 21, 5:15pm -
• European Parliament’s Plans Of A Digital Services Act Threaten Internet Freedoms
  The EU's Digital Services Act is a chance to preserve what works and to fix what is broken. EFF and other civil society groups have advocated for new rules that protect fundamental rights online, while formulating a bold vision to address today's mos…
  - 20 days ago 10 Nov 21, 5:03pm -
• Data Broker Veraset Gave Bulk Device-Level GPS Data to DC Government

  

  In the first weeks of the COVID-19 pandemic, a location data broker called Veraset offered officials in Washington, DC full access to its proprietary database of “highly sensitive” device-level GPS data, collected from cell phones, for the entire…
  - 21 days ago 10 Nov 21, 12:30pm -
• Brazil’s Fake News Bill: Perils and Flaws of Expanding Existent Data Retention Obligations
  This post is the second of two analyzing the risks of approving dangerous and disproportionate surveillance obligations in the Brazilian Fake News bill. You can read our first article here.Following a series of public hearings in Brazil's Chamber of…
  - 21 days ago 9 Nov 21, 4:24pm -
• Brazil’s Fake News Bill: Congress Must Stand Firm on Repealing Dangerous and Disproportionate Surveillance Measures
  This post is the first of two analyzing the risks of approving dangerous and disproportionate surveillance obligations in the Brazilian Fake News bill. You can read our second article here.The revised text of Brazil’s so-called Fake News bill (dra…
  - 22 days ago 9 Nov 21, 4:07pm -
• Senators Push To Study “Unstable” Patent Law, While Patent Trolls Cheer Them On
  Led by a group of senators that spent much of 2019 trying to change U.S. patent law for the worse, the U.S. Patent and Trademark Office (PTO) has agreed to study the “current state of patent jurisprudence.” The details of the study make it clear…
  - 26 days ago 5 Nov 21, 2:36am -
• Face Recognition Is So Toxic, Facebook Is Dumping It
  Facebook announced it is, for now, shutting down its face recognition program, which created face prints of users and automatically recognized them in uploaded photos. The decision to end the program comes at a time when face recognition technology i…
  - 28 days ago 2 Nov 21, 11:24pm -
• PDX Privacy: Building Community Defenses in Difficult Times
  The Electronic Frontier Alliance is made up of more than seventy groups of concerned community members, often including workers in the tech industry who see issues of the industry from the inside. One of the Alliance’s most active members is PDX Pr…
  - 29 days ago 1 Nov 21, 8:02pm -
• Copyright Regulator Eases Restrictions on Research, Education, and Repair
  The Digital Millennium Copyright Act (DMCA) has interfered with a staggering array of speech and innovation, from security research to accessibility for those with disabilities to remix and even repair. By forbidding unauthorized access to a copyrigh…
  - 33 days ago 29 Oct 21, 12:30am -
• Inequitable Access: An Anti-Competitive Scheme by Textbook Publishers
  Update: An earlier version of this post described the UC Davis 'Equitable Access' program as it was implemented in Fall 2020. We have updated this post to clarify the changes made to the program in August 2021.It goes by many names, but no matter ho…
  - 33 days ago 28 Oct 21, 10:49pm -
• The Internet Archive Transforms Access to Books in a Digital World
  In honor of Open Access Week, and particularly this year’s theme of structural equity, we wanted to highlight a project from the Internet Archive that is doing extraordinary work promoting access to knowledge. The bad news: that project is also und…
  - 33 days ago 28 Oct 21, 10:22pm -
• Europe's Digital Services Act: On a Collision Course With Human Rights
  Last year, the EU introduced the Digital Services Act (DSA), an ambitious and thoughtful project to rein in the power of Big Tech and give European internet users more control over their digital lives. It was an exciting moment, as the world’s larg…
  - 34 days ago 27 Oct 21, 7:50pm -
• A Universal Gigabit Future Depends on Open Access Fiber

  

  The future is online. Actually, the present is online, and the future more so. The COVID-19 pandemic, and the constant refrain about the “new normal” prove that not only is internet access vital to 21st century life; high-speed access is a necess…
  - 34 days ago 27 Oct 21, 7:01pm -
• Open Access Fiber Networks Will Bring Much-Needed High-Speed Internet Service and Competition to Communities More Efficiently and Economically: Report
  Wholesale Networks Will Build Future-Proof Communications NetworksSan Francisco—Public investments in open access fiber networks, instead of more subsidies for broadband carriers, will bring high-speed internet on a more cost-efficient basis to mil…
  - 35 days ago 27 Oct 21, 10:42am -
• Resisting the Menace of Face Recognition
  Face recognition technology is a special menace to privacy, racial justice, free expression, and information security. Our faces are unique identifiers, and most of us expose them everywhere we go. And unlike our passwords and identification numbers,…
  - 35 days ago 26 Oct 21, 7:41pm -
• Honoring Elliot Harmon—EFF Activism Director, Poet, Friend—1981-2021

  

  It is with heavy hearts that we mourn and celebrate our friend and colleague Elliot Harmon, who passed away peacefully on Saturday morning following a lengthy battle with melanoma. We will deeply miss Elliot’s clever mind, powerful pen, generous he…
  - 35 days ago 26 Oct 21, 7:32pm -
• What About International Digital Competition?
  EFF Legislative Intern Suzi Ragheb wrote this blog postAntitrust has not had its moment since the 1911 breakup of Standard Oil. But this past year, policymakers and government leaders around the globe have been taking a hard look at the technology m…
  - 35 days ago 26 Oct 21, 6:03pm -
• John Gilmore Leaves the EFF Board, Becomes Board Member Emeritus
  Since he helped found EFF 31 years ago, John Gilmore has provided leadership and guidance on many of the most important digital rights issues we advocate for today. But in recent years, we have not seen eye-to-eye on how to best communicate and work…
  - 39 days ago 22 Oct 21, 7:00pm -
• Police Can’t Demand You Reveal Your Phone Passcode and Then Tell a Jury You Refused
  The Utah Supreme Court is the latest stop in EFF’s roving campaign to establish your Fifth Amendment right to refuse to provide your password to law enforcement. Yesterday, along with the ACLU, we filed an amicus brief in State v. Valdez, arguing t…
  - 40 days ago 21 Oct 21, 10:29pm -
• Victory! Oakland’s City Council Unanimously Approves Communications Choice Ordinance
  Oakland residents shared the stories of their personal experience; a broad coalition of advocates, civil society organizations, and local internet service providers (ISPs) lifted their voices; and now the Oakland City Council has unanimously passed O…
  - 40 days ago 21 Oct 21, 6:23pm -
• Why Is It So Hard to Figure Out What to Do When You Lose Your Account?
  We get a lot of requests for help here at EFF, with our tireless intake coordinator being the first point of contact for many. All too often, however, the help needed isn’t legal or technical. Instead, users just need an answer to a simple question…
  - 40 days ago 21 Oct 21, 6:03pm -
• Crowd-Sourced Suspicion Apps Are Out of Control
  Technology rarely invents new societal problems. Instead, it digitizes them, supersizes them, and allows them to balloon and duplicate at the speed of light. That’s exactly the problem we’ve seen with location-based, crowd-sourced “public safet…
  - 40 days ago 21 Oct 21, 5:51pm -
• On Global Encryption Day, Let's Stand Up for Privacy and Security
  At EFF, we talk a lot about strong encryption. It’s critical for our privacy and security online. That’s why we litigate in courts to protect the right to encrypt, build technologies to encrypt the web, and it’s why we lead the fight against an…
  - 41 days ago 21 Oct 21, 12:52pm -
• New Global Alliance Calls on European Parliament to Make the Digital Services Act a Model Set of Internet Regulations Protecting Human Rights and Freedom of Expression
  The European Parliament’s regulations and policy-making decisions on technology and the internet have unique influence across the globe. With great influence comes great responsibility. We believe the European Parliament (EP) has a duty to set an e…
  - 41 days ago 21 Oct 21, 12:00pm -
• EFF to Federal Court: Block Unconstitutional Texas Social Media Law
  Users are understandably frustrated and perplexed by many big tech companies’ content moderation practices. Facebook, Twitter, and other social media platforms make many questionable, confounding, and often downright incorrect decisions affecting s…
  - 41 days ago 21 Oct 21, 6:51am -

• Cloud Security Alliance News
  Click for More Info on Cloud Security Alliance News