The Associated Press also reported that the breach stemmed from a flaw in Microsoft's SharePoint software. Jan. 28: The US Securities and Exchange Commission (SEC) published a 10-page document outlining the cybersecurity practices used in the financial industry, highlighting different approaches taken by those who work in "governance and risk management, access rights and controls, data loss prevention, mobile security, incident response and resiliency, vendor management, and training and awareness," Infosecurity magazine reported. Jan. 27: Politico reported, "Bipartisan efforts in the House and Senate to kill what's known as the call detail records program reflects a remarkable political shift from a few years ago, when the Obama administration and national security hawks were able to keep the program, exposed by NSA leaker Edward Snowden, alive in an altered form."