Application and AI roundup - Jan 2024
A busy month+ in appsec, AI, and regulation.
Shostack + Friends Blog
Posts in category “breach laws”
SEC Cybersecurity Rules
The SEC has important new cybersecurity rules
The National CyberSecurity Strategy: Liability is Coming
After months of signals, the new US National CyberSecurity Strategy is out, and I can stop beating around the bush and be explicit:
The Uber CSO indictment
Thoughts on Mark Rasch's essay, Conceal and Fail to Report - The Uber CSO Indictment
$35M for Covering up A Breach
[no description provided]