SEC

"The SEC has not approved the listing and trading of spot bitcoin exchange-traded products"

Firms need to disclose any cybersecurity incident they determine to be material and to describe the material aspects of the incident's nature, scope, and timing within four days.

'Do not state anything that is subjective and avoid adjectives (e.g., "state of the art," "mature," "advanced," "appropriate," "comprehensive," or "reasonable")' say experts.

SolarWinds’ poor controls... false and misleading statements and omissions, and the other misconduct... would have violated the federal securities laws even if SolarWinds had not experienced a major, targeted cybersecurity attack"

Asset managers are playing fast and loose...

UK government's self-deleting WhatsApp message use was legal, meanwhile...

XBRL filings would help investors evaluate public companies' resilience, incident reporting