????? FILED Headlines: New AI guidelines in AU, hockey stick growth for ransomware-as-a-service platform, and Yubikeys can now be copied

Hi there,?

Welcome to FILED Headlines, the weekly edition of the FILED Newsletter focused on the latest, most essential news from the intersection of data privacy, data security, and governance.?This week:?

• New AI rules proposed by the Australian Federal Government

• A new vulnerability makes it possible to clone Yubikeys

• A day in the life of a ransomware negotiator

??? Privacy & governance??

Australia's delay in privacy reform has left businesses vulnerable, according to this op-ed from the Chief Data Officer of Publicis Groupe Australia & New Zealand.??

But attorney-general Mark Dreyfus says the overhaul of the Privacy Act will be introduced this month, though he wouldn’t specify a date.?

The Australian Federal Government has proposed 10 voluntary guidelines for AI usage. The guardrails are subject to a public consultation process until October 4, to determine whether they should be made mandatory in high-risk settings.?

Ireland's Data Protection Commission (DPC) has closed its case against X over its Grok AI bot, after the social media platform agreed to permanently stop processing personal data gleaned from European users,

Generative AI chatbots are all the rage in financial services, but concerns over data privacy and security remain.

The class action on HWL Ebsworth in relation to a ransomware attack last year has grown to 12 National Disability Insurance Scheme participants.??

?? Security?

How RansomHub — the "ransomware-as-a-service" organization — went from 0 to 210 victims in six months.??

The number of active ransomware groups expanded 55%, and other results from Forescout's FY24H1 report.??

Tewkesbury Borough Council in Gloucestershire, England, warned residents on Wednesday it had discovered a cyberattack, which it assumed had been successful. The borough is home to the headquarters of Britain’s signals and cyber intelligence agency GCHQ.?

A hacker has released limited personal details of 390m users of popular Russian messaging app VK, as part of an alleged data breach. VK denies any hack.?

YubiKey security keys can be cloned via a side-channel attack that leverages a vulnerability in a cryptographic library. Yubikeys are popular authentication devices.?

A day in the life of a ransomware negotiator.?

?? The latest from RecordPoint??

?? Listen: ?

An oldie but a goodie today: Andrew Ysasi, Vital Records Control VP of advocacy, ARMA volunteer, San Jose State University teacher, and IG Guru blogger, goes deep on the opportunities for information governance experts to partner with security teams to improve organizations’ security and lower risk. A classic illustration of what can happen at the intersection of information governance and cybersecurity.?