The groundbreaking lawsuit’s claims about inadequate disclosures related to the historic Sunburst attack were thrown out Thursday.

The early application of the regulatory agency’s new cybersecurity reporting rules reveal that materiality is in the eye of the beholder.

In wake of SEC breach, federal policymakers, agencies, and experts can't seem to agree on whether agencies must use MFA on social media.

Multifactor authentication was disabled at the SEC’s request last year after staff had difficulties accessing the social media account.

A breach of the Securities and Exchange Commission's account on the platform formerly known as Twitter caused bitcoin prices to spike.

The controversial rule requires publicly traded companies to report such events to the agency within four business days.

But who's in charge has become a game of hot potato.

The amendments follow a similar proposal the agency released last month aimed at tightening security for investment firms and advisers.

The proposed rule would give institutions 48 hours to report a cyber incident to the agency.

The SEC joins TSA, the FCC and other feds who have imposed or are considering imposing additional disclosure requirements.