Popular, Cyber Attacks, Software

Immediate vs. Slow Burn Risks: A Balanced Cybersecurity Strategy

NAVEX on 4/25/2024

The consequences of a cyberattack can be catastrophic, as we saw in the previous blog of this series. Cybersecurity is a business-wide responsibility that demands a proactive strategy extending far beyond technical solutions...more

Caution! Credential Stuffing on the Rise

Mitratech Holdings, Inc on 4/12/2024

If you have a tendency to reuse the same password across multiple accounts, you could be leaving yourself (and your organization) exposed to risk. Credential stuffing, the stealthy technique fueling a recent explosion of...more

Change Healthcare Ransomware Attack: 10 Lessons Learned

Guidepost Solutions LLC on 4/2/2024

Why does it matter to you? In February of 2024, Change Healthcare, a prominent player in the healthcare industry, fell victim to a ransomware attack that sent shockwaves through its systems and networks. The incident...more

Emerging Theories of Liability in the Internet of Things Era

Mitchell, Williams, Selig, Gates & Woodyard,... on 3/26/2024

The Internet of Things (“IoT”) has ushered in a new era of connectivity and convenience, but with it comes a host of legal issues and emerging theories of liability. As IoT devices become increasingly ubiquitous in our daily...more

Critical Infrastructure Organizations Warned to Upgrade Systems and Software

Nossaman LLP on 2/9/2024

In one of the most clear-eyed and sobering assessments of the cyberthreat China poses to our nation’s critical infrastructure, the country’s foremost cybersecurity leaders recently testified that the Chinese Communist Party...more

The SEC’s Charges Against SolarWinds and its Chief Information Security Officer Provide Important Cybersecurity Lessons for Public...

White & Case LLP on 11/15/2023

On October 30, 2023, the US Securities and Exchange Commission ("SEC") announced that it filed charges against SolarWinds Corp. ("SolarWinds" or the "Company") and its Chief Information Security Officer ("CISO") in connection...more

Privacy Briefs: October 2023

Health Care Compliance Association (HCCA) on 10/6/2023

Report on Patient Privacy 23, no. 10 (October, 2023) Kaiser Foundation Health Plan Inc. and Kaiser Foundation Hospitals will pay California $49 million to resolve allegations that they unlawfully disposed of hazardous waste,...more

Technical Elements of a Cybersecurity Compliance Program (IV of IV)

The Volkov Law Group on 7/14/2023

The term cybersecurity is thrown about because it covers so many risks. There is no common definition of cybersecurity and the technical elements included in the term. From a technical standpoint, cybersecurity covers...more

How a Zero-Day Flaw in MOVEit Led to a Global Ransomware Attack

Bradley Arant Boult Cummings LLP on 6/19/2023

In an era where our lives are ever more intertwined with technology, the security of digital platforms is a matter of national concern. A recent large-scale cyberattack affecting several U.S. federal agencies and numerous...more

Privacy Briefs: June 2023

Health Care Compliance Association (HCCA) on 6/9/2023

Privacy Briefs: June 2023 - Long-term care pharmacy network PharMerica disclosed a breach involving more than 5.8 million patients, making it the largest breach reported to the HHS Office for Civil Rights (OCR) in the last...more

Ransomware: The Top 5 Myths and Misconceptions

Ankura on 5/15/2023

Ransomware has become a major threat to businesses across the world as cyber-attacks are becoming increasingly sophisticated, resulting in devastating financial damage for companies that fall victim. Not only are important...more

Decoded: Technology Law Insights - V 4, Issue 4, April 2023

Spilman Thomas & Battle, PLLC on 4/25/2023

Tech Vendors and Cybersecurity – Are They Responsible? It has long been recommended that when you contract with a technology vendor that you include an indemnity clause in the contract wherein the vendor will indemnify you...more

FBI Issues Notice to Health Industry Highlighting Risks of Unpatched Medical Devices

Robinson+Cole Data Privacy + Security Insider on 9/16/2022

The FBI issued a Private Industry Notification targeted to the health care sector on September 12, 2022, warning that it has “identified an increasing number of vulnerabilities posed by unpatched medical devices that run on...more

Discerning Data Cyber Vulnerability Alert: Log4j

Faegre Drinker Biddle & Reath LLP on 12/22/2021

According to numerous government and media sources, malicious cyber actors are targeting a new “zero day” vulnerability on a massive scale. This vulnerability, referred to as “Log4j” or “Log4Shell,” has resulted in widespread...more

Update on Apache log4j and Kronos Security Incidents

Robinson+Cole Data Privacy + Security Insider on 12/17/2021

It was a crazy weekend for cyberattacks. People seem surprised, but those of us in the industry aren’t surprised one bit. It is very logical and foreseeable that hackers are leveraging attacks that have maximum disruption on...more

Log4Shell Vulnerability Poses Massive Cybersecurity Threat

Lewis Roca on 12/17/2021

A widely reported flaw in popular software known as Log4j poses a severe cybersecurity threat to organizations around the globe, with hundreds of millions of devices at risk. Over the past week, government agencies,...more

New Zero-Day Vulnerability for Log4j is the Next Cybersecurity Nightmare

McDermott Will & Emery on 12/13/2021

On December 10, 2021, multiple media outlets, the Cybersecurity and Infrastructure Security Administration (CISA), and the director of cybersecurity at the National Security Agency (NSA) began alerting to a significant...more

Apple Issues Patches: Apply Them Now and Alert Your Employees to Do the Same

Robinson+Cole Data Privacy + Security Insider on 7/30/2021

Earlier this week, Apple issued another patch—this one is said to address a reported vulnerability that “an application may be able to execute arbitrary code with kernel privileges.” According to Apple, it “is aware of a...more

The Private Sector Should Heed White House Warning On Cyber Resilience Because Compliance Is Coming

Husch Blackwell LLP on 7/27/2021

The increased concern about ransomware incidents from both quantitative and severity standpoints, spurred the White House to urge corporate business leaders to improve their defenses and resilience posture against ransomware...more

U.S. CISA + Cyber Command Warns of Critical Flaw in VMware

Robinson+Cole Data Privacy + Security Insider on 6/11/2021

Although a patch has been available by VMware since May 25, 2021, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) and Cyber Command this week urged users of VMware to update and...more

New Federal Cybersecurity Guidelines – How Does Your Organization Stack Up?

Kilpatrick on 6/2/2021

In the wake of recent cybersecurity incidents of historical significance on May 12, 2021, President Biden issued an executive order to improve the federal government’s efforts to “identify, deter, protect against, detect, and...more

Biden Administration Issues Cybersecurity Executive Order Following Colonial Pipeline Cyberattack

Jackson Lewis P.C. on 5/17/2021

On May 12, 2021, the Biden Administration issued an Executive Order on “Improving the Nation’s Cybersecurity” (EO). The EO was in the works prior to the Colonial Pipeline cyberattack, reportedly a ransomware incident that...more

SAP Issues Cybersecurity Alert: What You Can Do To Protect Your ERP

Opportune LLP on 4/21/2021

Here’s how the SAP Community can mitigate the risk of a widespread cybersecurity incident involving their SAP systems....more

Buyer Beware: The Internet of Things Comes Under New Cyber Attack from Multiple Fronts

Faegre Drinker Biddle & Reath LLP on 12/16/2020

It is estimated that by the end of 2020, there will be more than 50,000,000,000 (yes, billion) connected devices that are part of the Internet of Things (IoT). This is a five million percent increase in IoT devices over the...more

Are You Covered for California’s New Iot Laws?

Farella Braun + Martel LLP on 1/7/2019

In November, Tyler wrote about insurance issues raised by both the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, which goes into effect on January 1, 2020. California’s...more

Today's Popular Updates › Cyber Attacks › Software

"My best business intelligence, in one easy email…"