News & Analysis as of May 5, 2025

Cyber Attacks

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

World Password Day: Increasing Security in Two Steps

K2 Integrity on 5/1/2025

May 1 is World Password Day, a day for organizations to remind their employees of the importance of using strong passwords and practicing good password hygiene to protect personal and work accounts. It’s a time for...more

OCC provides an update on its security breach given institutional risk

Orrick, Herrington & Sutcliffe LLP on 4/21/2025

On April 14, the OCC released a letter providing more details on the recent security breach involving its email systems. The breach — identified as a major incident under the Federal Information Security Modernization Act...more

CISA Issues Alert on Potential Legacy Oracle Cloud Compromise

Robinson+Cole Data Privacy + Security Insider on 4/17/2025

BleepingComputer has confirmed the rumor that Oracle has suffered a compromise affecting its legacy environment, including the compromise of old customer credentials (originally denied by Oracle). Oracle notified some...more

Cybersecurity in Business Ownership: What Your Start-Up Should Know

Mandelbaum Barrett PC on 4/16/2025

Cybersecurity is no longer a luxury; it’s a necessity. For start-ups and established businesses alike, protecting sensitive information and maintaining customer trust relies heavily on strong cybersecurity measures. With...more

OCC announces major information security incident

Orrick, Herrington & Sutcliffe LLP on 4/14/2025

On April 8, the OCC announced it had notified Congress of a major information security incident, as required by the Federal Information Security Modernization Act. The incident involved unauthorized access to emails and their...more

WhatsApp Patches Vulnerability That Facilitates Remote Code Execution

Robinson+Cole Data Privacy + Security Insider on 4/11/2025

WhatsApp users should update the application for vulnerability CVE-2025-30401, which Meta recently patched when WhatsApp was released for Windows version 2.2450.6....more

OCC Notifies Congress of Major Email System Security Breach

Troutman Pepper Locke on 4/11/2025

On April 8, the Office of the Comptroller of the Currency (OCC) officially notified Congress of a significant information security incident involving its email system. This notification, mandated by the Federal Information...more

Innovation or Insecurity? Rethinking Cybersecurity in the Age of AI

Morris, Manning & Martin, LLP on 4/8/2025

In boardrooms, C-suites, and conference rooms across the country, the rapid pace of AI innovation is capturing the imagination of business leaders. Yet, amid this enthusiasm, there is a concerning trend, namely that many...more

10 Key Questions to Guide Cyber Risk Management

Bennett Jones LLP on 4/4/2025

Asking the right questions within your organization is key to effectively managing cyber risk. Here are 10 questions that you should ask your team...more

Dating App Breach Exposes 900K Users: A Wake-Up Call for Cybersecurity

HaystackID on 4/2/2025

In a critical revelation within the realm of digital privacy, a significant data breach was uncovered involving key players in the dating app industry. Approximately 1.5 million explicit images from users of BDSM People,...more

Zooming in on AI #18: Cybersecurity requirements for AI systems

A&O Shearman on 4/1/2025

The Artificial Intelligence Act (AI Act) is the world's first comprehensive legal framework for AI regulation, which entered into force on August 1, 2024. The AI Act aims to ensure that AI systems are trustworthy, safe and...more

Phishing Attacks – Anyone Can Get Pwned

Robinson+Cole Data Privacy + Security Insider on 3/28/2025

HaveIBeenPwned is a website that allows users to check whether their data has been involved in data breaches. The website’s creator, Troy Hunt, was the subject of a phishing attack earlier this week....more

Privacy and Data Security in Community Associations: Navigating Risks and Compliance

Ward and Smith, P.A. on 3/28/2025

For community associations, this is especially important as these organizations often manage large amounts of PII of homeowners and residents (e.g., name, address, phone number, etc.), including certain categories of...more

Warning! ChatGPT Exploit Used by Threat Actors in Cyber Attacks

Quarles & Brady LLP on 3/24/2025

Members of the health care and financial industries, along with other industries that hold sensitive data, are warned that a ChatGPT vulnerability is being actively exploited by threat actors to attack security flaws in AI...more

Joint Alert Warns of Medusa Ransomware

Robinson+Cole Data Privacy + Security Insider on 3/21/2025

On March 12, 2025, a joint cybersecurity advisory was issued by the Cybersecurity and Infrastructure Security Agency, the Federal Bureau of Investigation, and the Multi-State Information Sharing and Analysis Center to advise...more

When to Notify Your Cyber Carrier of a Security Incident - Dear Mary – Incidents + Investigations Cybersecurity Advice Column

Troutman Pepper Locke on 3/20/2025

Our company experienced a cybersecurity incident. It seemed pretty minor — just a few suspicious emails and an employee’s account being locked. To my dismay, we’re now hearing from our IT team that the issue is more serious....more