Stacker-Cybersecurity & Privacy

The United States still does not have a single comprehensive federal privacy law resembling the GDPR. That does not mean Congress is standing still. Quite the opposite. By September 2026, lawmakers in the 119th Congress had introduced a sprawling collection of federal proposals addressing consumer privacy, artificial intelligence, children’s data, employee surveillance, reproductive information, precise

Privacy management used to be a one-time compliance exercise. As privacy regulations, AI use and third-party ecosystems expand, it’s now an ongoing operational function. Many privacy regulations today expect organizations to demonstrate accountability, including what governance, technical, and organizational safeguards they use to protect personal information. The specifics may vary across jurisdictions, but the takeaway

A customer came into a Florida branch concerned about her bank account. She had received an email from an antivirus software company she recognized, saying she was going to be charged a payment unless she called a specific phone number. When she did, she was immediately talked into giving control of her computer to an

The scariest time of year is right around the corner, but the biggest threat to your privacy may have been silently looming in the background all year long.  October is the perfect time to conduct a quick audit of one of the most commonly overlooked threats to your privacy: your public digital footprint. Any sensitive

You’ve probably deleted a shady text message or two without a second thought, and blocking spam email from strangers feels second nature by now. But would you recognize the signs of a SIM swap scam? Also called SIM hijacking, this form of account takeover is more common than ever.  The scale isn’t small, either. In 2025, authorities charged a cybercrime ring with

Corporate America has been gung-ho about AI, but it hasn’t brought all employees up to speed on how to use it safely. The result is that many employees may be playing fast and loose with company data. Nearly all (89%) workers have entered company data into AI. Sometimes that’s just a workplace address or phone

Many organizations still treat continuous risk monitoring as an advanced and optional part of GRC. When managing third-party risk, security questionnaire-based procurement and point-in-time vendor reviews are still the norm. Modern vendor ecosystems are complex, and risk changes faster than traditional review cycles can keep up. Information from the last review goes stale fast, creating

Without a cybersecurity plan, your business is more vulnerable to cyberattacks, data breaches, financial losses, operational downtime and reputational damage. When an incident happens, the lack of a clear plan can leave teams scrambling to identify the problem, protect affected systems and keep the business moving while costs and risks continue to grow. Over the

Parents often tell their kids, “If something sounds too good to be true, it probably is.” And today’s online scams may come from a hacked friend’s account, an AI-generated voice that sounds like someone they know or a message shared by someone who believes the information is real. That can make scams especially difficult for

  A new study from Credit One Bank shows that Americans have lost trust in the voice on the other end of the phone. Nearly 84% of respondents have changed at least one financial behavior because of artificial intelligence scam concerns. The most visible change: Over half have stopped answering calls from numbers they don’t

  Healthcare is one of the most cautious industries when it comes to artificial intelligence, but caution hasn’t prevented failures. Three in 4 providers have already had to switch off an AI agent handling patient messages. What actually fails sits deeper than the AI. It’s a couple of days before your doctor’s appointment and, “Ding!”,

  When shoppers walk into a grocery store, they expect security cameras. Few expect the store to analyze their faces, eyes, and voices. Earlier this year, customers entering some Wegmans stores in New York City learned that the retailer was using facial recognition technology in its locations and storing customers’ biometric data. The disclosure, required

  American students returning to classrooms this fall are logging into an online environment governed by a children’s privacy framework that has changed substantially in the past year, even though Congress has yet to complete its biggest proposed overhaul. Clym reviewed federal legislation, FTC rulemaking, enforcement actions, and education technology data to examine how children’s

  As AI and automation increasingly become embedded into healthcare operations, securing these technologies becomes critical, especially for organizations managing protected health information (PHI), which are frequent targets for cybersecurity threats such as data breaches and unauthorized access. ‍To safeguard this sensitive data, regulatory agencies like the U.S. Department of Health and Human Services (HHS)

  There’s something especially romantic about a summer love. Maybe it’s the heat, the long days, or the extra free time. Or perhaps it’s the fact that many summer flings happen in places far removed from people’s usual routines. Whether you meet someone new while on a trip, exploring new activities, or even on an

  Your team logs into dozens of apps every day. Sales works in one CRM, support in another ticketing system, and finance in yet another ERP platform. Each department chooses the “best tool for the job,” but no one stops to ask what happens when those tools can’t communicate with each other. The answer is

  Everything has a peak season, and just like heirloom tomatoes, identity theft seems to ripen during the summer. While identity thieves prey on people every day of the year, summer creates an environment in which victims are more susceptible to a number of scams. Below, PeopleFinders breaks down why particular scam attacks increase during the summer,

  On July 1, Connecticut lowered the number of residents’ data a business has to handle before the state’s privacy law applies. The threshold dropped from 100,000 consumers to 35,000, a 65% cut, according to Clym’s analysis of Connecticut’s updated privacy law. Connecticut also removed the threshold entirely for two kinds of businesses: any company