Popular, Data Breach, Critical Infrastructure Sectors

New Cyber Regulations Define Battle Lines in Corporate and Infrastructure Security

HaystackID on 5/30/2024

Amidst an ever-evolving cyber threat landscape, a recent slew of regulatory updates and cybersecurity standards are defining a new battlefront for securing critical infrastructure and corporate data across varying sectors....more

Hacking and Healing: Nation-States, Cyber Attacks, and Healthcare Law

Nelson Hardiman, LLP on 4/25/2024

Modern warfare is no longer restricted to physical battlefields and professional military. Countries like North Korea and Russia have few qualms about using cyberspace to reach well beyond their physical borders to target...more

Navigating Profound Change: CISA Announces Proposed Rule for Mandated Cyber Incident Reporting

Hinckley Allen on 4/10/2024

In 2025, new federal reporting requirements will require hundreds of thousands of organizations to report cyber incidents within hours of discovery to the United States Government, marking a significant impact on how...more

CISA Proposes Sweeping Cybersecurity Incident Reporting for U.S. Companies

Paul Hastings LLP on 4/2/2024

On March 27, 2024, the Cybersecurity & Infrastructure Security Agency (“CISA”) released proposed regulations requiring expansive new cybersecurity incident and ransomware payment reporting across sixteen “critical...more

Privacy Briefs: January 2024

Health Care Compliance Association (HCCA) on 1/17/2024

New York has released proposed cybersecurity regulations for hospitals. The regulations, which were published in The State Register on Dec. 6 and will undergo a 60-day public comment period ending on Feb. 5, are designed to...more

Cybersecurity in 2024: Ten Top Issues to Consider

Wiley Rein LLP on 1/3/2024

As we enter the New Year, Wiley has looked back at the top cyber issues for 2023 and what they mean for 2024. Last year, we saw the rollout of the National Cybersecurity Strategy—which outlined a new era of cyber oversight—as...more

U.S. Electrical Grid and Renewables – Vulnerability to Cyber Attacks

Husch Blackwell LLP on 10/2/2023

As discussed previously in this blog, physical attacks against substations have been on the rise. However, the U.S. power grid is also vulnerable to cyberattacks from U.S. adversaries, which includes hostile foreign...more

CISA Issues Three Advisories for Industrial Control Systems

Robinson+Cole Data Privacy + Security Insider on 5/19/2023

On May 16, 2023, the Cybersecurity & Infrastructure Security Agency (CISA) released three advisories applicable to Industrial Control Systems (ICS). The Alerts cover vulnerabilities of Snap One OvrC Cloud, Rockwell...more

FBI, CISA + MS-ISAC Warn of LockBit 3.0 Ransomware

Robinson+Cole Data Privacy + Security Insider on 3/24/2023

The FBI, CISA and the Multi-State Information Sharing and Analysis Center (MS-ISAC) recently released a joint cybersecurity advisory, warning organizations about indicators of compromise, and tactics, techniques, and...more

Cyber Incident Reporting for Critical Infrastructure Act: Significant Changes to Incident Reporting Are on the Horizon

Polsinelli on 3/7/2023

In May 2021, Colonial Pipeline, a privately held oil pipeline responsible for nearly half of the oil supply for the U.S. East Coast, was crippled by a DarkSide ransomware attack. DarkSide is widely believed to be a...more

Dechert Cyber Bits - Issue 24

Dechert LLP on 11/11/2022

U.S. Government Releases Guide of ‘Minimum Baseline’ Cybersecurity Practices for Protecting Critical Infrastructure - The Cybersecurity & Infrastructure Security Agency (“CISA”) has released a guide to help organizations...more

China Enhances Scrutiny for Cross-Border Data Transfer that would Impact Multinational Companies

Paul Hastings LLP on 7/20/2022

1. Introduction- China’s cross-border data transfer rules are unfolding in real time and taking clearer shape. On July 7, 2022, China’s cybersecurity regulatory agency, the Cyberspace Administration of China (“CAC”), issued...more

Dechert Cyber Bits - Issue 12

Dechert LLP on 4/29/2022

FTC Chair Lina Khan Questions Current Data Collection Practices by Private Industry at IAPP Global Privacy Summit, Suggests New Rulemaking May Be Necessary - In her first major privacy address since taking the helm of the...more

Ransomware Attacks Case Studies Provide Rare Learning Opportunities

Patterson Belknap Webb & Tyler LLP on 4/5/2022

Ransomware attacks have become headline news in the mainstream media, and a hot topic not only on this blog but in government circles. And with good reason as the United States suffered a staggering 421.5 million ransomware...more

Increase in Cyber-Attacks Leads to Influx of New Reporting Obligations

Fisher Phillips on 4/1/2022

In the wake of Russia’s invasion of Ukraine, and amid growing concerns regarding the threat of increased cyberattacks targeting infrastructure and other critical industries, there has been a flurry of federal activity to...more

The Private Sector Should Brace for New Mandatory Cyber Incident Reporting Obligations

Wiley Rein LLP on 3/21/2022

Late 2021 and early 2022 have been full of federal government activity related to cybersecurity incident reporting. Congress passed the Cyber Incident Reporting for Critical Infrastructure Act of 2022 to require mandatory...more

President Biden Signs Cyber Incident Reporting for Critical Infrastructure Act

Jones Day on 3/18/2022

On March 15, 2022, President Biden signed into law the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (the "Act"), creating new requirements for organizations operating in critical infrastructure sectors to...more

Department of Homeland Security Issues “SHIELDS UP” Advisory for All Organizations Regardless of Size

Stinson - Government Contracting Matters on 2/21/2022

This week the Department of Homeland Security (DHS) Cybersecurity and Infrastructure Agency (CISA) issued a “SHIELDS UP” advisory. While it does not identify specific threats in the advisory, CISA states that the “Russian...more

FBI and DHS Warn of Russian Cyberattacks Against Critical Infrastructure

Robinson+Cole Data Privacy + Security Insider on 2/17/2022

U.S. officials this week warned government agencies, cybersecurity personnel, and operators of critical infrastructure that Russia might launch cyber-attacks against Ukrainian and U.S. networks at the same time it launches...more

Report on Patient Privacy Volume 22, Number 2. Privacy Briefs: February 2022

Health Care Compliance Association (HCCA) on 2/15/2022

Report on Patient Privacy 22, no. 2 (February, 2022) - Tensions between the U.S. and Russia could lead to a heightened risk of Russian state-sponsored cyberattacks on U.S. interests, including health care organizations,...more

Feds Hope to Tighten Timeline for Agency Reporting of Cyberattacks as Congress Debates Federal Data Breach Notification Law

Faegre Drinker Biddle & Reath LLP on 12/20/2021

On December 6, 2021, in the Memorandum for the Heads of Executive Departments and Agencies, the Office of Management and Budget took a more aggressive position on strengthening the nation’s cybersecurity posture. Under this...more

Today's Popular Updates › Data Breach › Critical Infrastructure Sectors