News & Analysis as of September 18, 2024

Cybersecurity › Homeland Security Cybersecurity & Infrastructure Security Agency (CISA) › Cyber Threats

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Federal Agencies Issue Warning Regarding Iran-Based Cyber Security Threats to U.S. Healthcare Entities

King & Spalding on 9/9/2024

On August 28, 2024, the U.S. Cybersecurity & Infrastructure Security Agency (CISA), together with the FBI and Department of Defense Cyber Crime Center, issued an advisory to U.S. organizations, including healthcare...more

New Cyber Regulations Define Battle Lines in Corporate and Infrastructure Security

HaystackID on 5/30/2024

Amidst an ever-evolving cyber threat landscape, a recent slew of regulatory updates and cybersecurity standards are defining a new battlefront for securing critical infrastructure and corporate data across varying sectors....more

New CISA Cybersecurity Incident Reporting Requirements Proposed for Critical Infrastructure Companies

Akin Gump Strauss Hauer & Feld LLP on 4/24/2024

On April 4, 2024, the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) officially published its Notice of Proposed Rulemaking (NPRM) detailing significant new cybersecurity...more

Critical Infrastructure Cybersecurity – Evolving Incident Response Obligations, Integral to Effective Risk Management

Polsinelli on 4/23/2024

Just over a year ago, the White House issued its long-awaited National Cybersecurity Strategy, with an emphasis on defending Critical Infrastructure, promoting public and private collaboration, and safeguarding...more

Shifting Left in eDiscovery: Embracing Secure-by-Design and AI for Enhanced Cybersecurity

HaystackID on 4/16/2024

Editor’s Note: In this exploration of cybersecurity in the digital era, the article “Shifting Left in eDiscovery: Embracing Secure-by-Design and AI for Enhanced Cybersecurity” considers the crucial intersection of...more

White House Issues Dire Warning Regarding Drinking Water Supply and Wastewater System Cyberattacks

Nossaman LLP on 4/2/2024

The Biden-Harris Administration is redoubling its efforts to improve cybersecurity for the nation’s water systems. In March, the EPA and the White House issued a dire warning to state governors alerting them of the need to...more

Mozilla Releases Security Updates for Thunderbird and Firefox

Robinson+Cole Data Privacy + Security Insider on 1/25/2024

Mozilla recently released security updates to address known vulnerabilities in their Thunderbird and Firefox products. The Cybersecurity & Infrastructure Security Agency (CISA) is recommending that the patches be applied...more

CISA, UK NCSC, and 17 Other Countries Issue Landmark Joint Guidelines for Secure AI System Development

Davis Wright Tremaine LLP on 12/5/2023

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the UK National Cyber Security Centre (UK NCSC), along with partner agencies from 17 nations, have released Guidelines for Secure AI System Development (the...more

CISA Issues Three Advisories for Industrial Control Systems

Robinson+Cole Data Privacy + Security Insider on 5/19/2023

On May 16, 2023, the Cybersecurity & Infrastructure Security Agency (CISA) released three advisories applicable to Industrial Control Systems (ICS). The Alerts cover vulnerabilities of Snap One OvrC Cloud, Rockwell...more

FDA Authorized to Establish New Cybersecurity Standards for Medical Devices: What it Means for Industry

Ankura on 4/26/2023

On December 29, 2022, President Biden signed a new statute that will significantly impact medical device cybersecurity regulation. Section 3305 of the Consolidated Appropriations Act of 2023 (“Section 3305”) authorizes the...more

FBI, CISA + MS-ISAC Warn of LockBit 3.0 Ransomware

Robinson+Cole Data Privacy + Security Insider on 3/24/2023

The FBI, CISA and the Multi-State Information Sharing and Analysis Center (MS-ISAC) recently released a joint cybersecurity advisory, warning organizations about indicators of compromise, and tactics, techniques, and...more

The Breaches and Threat Actors that Defined 2022

Ankura on 3/22/2023

In 2022, threat actors and hacker groups made their mark on the digital world by causing unprecedented data breaches that left organizations of all sizes and sectors vulnerable. Even with improved cybersecurity measures in...more

Joint Advisory Outlines Attacks by Daixin Team

Robinson+Cole Data Privacy + Security Insider on 11/4/2022

The Cybersecurity & Infrastructure Security Agency, the FBI and the U.S. Department of Health & Human Services released a Joint Advisory last week warning organizations, particularly those in the health care and public health...more

CISA Lists Top CVEs Exploited by Chinese State-Sponsored Cyber Actors

Robinson+Cole Data Privacy + Security Insider on 10/20/2022

The Cybersecurity & Infrastructure Security Agency (CISA) recently issued an Alert outlining the top Common Vulnerabilities and Exposures (CVEs) that have been used by the People’s Republic of China (PRC) state-sponsored...more

CISA Recommends Following Microsoft’s Mitigation for Zero Day Exploits

Robinson+Cole Data Privacy + Security Insider on 10/13/2022

Microsoft recently issued mitigation steps for vulnerabilities that are being actively exploited by threat actors. Microsoft stated that it is aware that two vulnerabilities are being actively exploited to access users’...more

A Warning to Critical Infrastructure: Russia May Launch a Cyberattack Against U.S. Companies

Davis Wright Tremaine LLP on 3/24/2022

On Monday, March 21, 2022, the White House issued a statement warning of "evolving intelligence" that the Russian government may launch cyberattacks aimed at the United States in response to sanctions arising from Russia's...more

Biden Administration Issues Another Stark Warning on Cybersecurity

Akin Gump Strauss Hauer & Feld LLP on 3/23/2022

On Monday, March 21, 2022, President Biden issued a statement “reiterating [prior] warnings based on evolving intelligence that the Russian Government is exploring options for potential cyberattacks” against the United States...more

The US Government Has a New Stopwatch for Cyber Incident Reporting: What You Need to Know Now

Bracewell LLP on 3/17/2022

Amid the escalating conflict in Ukraine and concerns of Russian cyber threats to the United States, President Joe Biden recently signed a $1.5 trillion government spending deal with serious cybersecurity reporting obligations...more

Department of Homeland Security Issues “SHIELDS UP” Advisory for All Organizations Regardless of Size

Stinson - Government Contracting Matters on 2/21/2022

This week the Department of Homeland Security (DHS) Cybersecurity and Infrastructure Agency (CISA) issued a “SHIELDS UP” advisory. While it does not identify specific threats in the advisory, CISA states that the “Russian...more

FINRA Urges Firms to Heed CISA/FBI “Shields Up” Warning on Russia

Burr & Forman on 2/17/2022

The regular “Weekly Update” email from the Financial Industry Regulatory Authority (“FINRA”) had an eye-catching warning February 16, urging broker-dealer member firms to heed the “Shields Up” cyber threat warning from the...more

Tensions with Russia Prompts CISA Warning to Critical Infrastructure

Robinson+Cole Data Privacy + Security Insider on 1/14/2022

The Cybersecurity & Infrastructure Security Agency (CISA), jointly with the FBI and NSA, issued a Cybersecurity Advisory on January 22, 2022, to warn organizations, especially critical infrastructure operators, to be on...more

Log4j: Questions and Considerations for Companies and Their Vendors

McDermott Will & Emery on 12/20/2021

As highlighted in our December 10, 2021, article, the Apache Log4j vulnerability is garnering significant attention throughout the public and private sectors. There are reportedly upwards of 100 million devices and servers...more

Identifying and Remediating the Critical Apache Log4j Cybersecurity Vulnerability

Polsinelli on 12/17/2021

On December 9th, 2021, a critical zero-day vulnerability, which has the potential of providing threat actors access to millions of computers worldwide, was discovered. Due to the critical nature of this vulnerability, and the...more

Update on Apache log4j and Kronos Security Incidents

Robinson+Cole Data Privacy + Security Insider on 12/17/2021

It was a crazy weekend for cyberattacks. People seem surprised, but those of us in the industry aren’t surprised one bit. It is very logical and foreseeable that hackers are leveraging attacks that have maximum disruption on...more

Log4Shell Vulnerability Poses Massive Cybersecurity Threat

Lewis Roca on 12/17/2021

A widely reported flaw in popular software known as Log4j poses a severe cybersecurity threat to organizations around the globe, with hundreds of millions of devices at risk. Over the past week, government agencies,...more

37 Results

/

View per page

Page: of 2

Next »