SEC just approved new rules mandating publicly traded companies to disclose cyber attacks with "material" impact on their finances within 4 days.