News & Analysis as of May 5, 2025

Cybersecurity › Hackers › Software

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

SAP NetWeaver Visual Composer Requires Urgent Patch

Robinson+Cole Data Privacy + Security Insider on 5/2/2025

SAP Netweaver Visual Composer users are urged to patch a critical vulnerability that attackers are actively exploiting. According to ReliaQuest, which detected the vulnerability, the attacks allow full system compromise...more

Rolling With the Punches in a Networked World: CCOE Cybersecurity Panel Discussion

Foley & Lardner LLP on 6/14/2024

Whether the game is football, baseball, hockey, or Indy Car racing, no team goes into their major championship matchup without training. Companies need to train as well if they intend to operate on the internet and expect to...more

Immediate vs. Slow Burn Risks: A Balanced Cybersecurity Strategy

NAVEX on 4/25/2024

The consequences of a cyberattack can be catastrophic, as we saw in the previous blog of this series. Cybersecurity is a business-wide responsibility that demands a proactive strategy extending far beyond technical solutions...more

Caution! Credential Stuffing on the Rise

Mitratech Holdings, Inc on 4/12/2024

If you have a tendency to reuse the same password across multiple accounts, you could be leaving yourself (and your organization) exposed to risk. Credential stuffing, the stealthy technique fueling a recent explosion of...more

Hackers Can Securely Enter Your Networks with XZ

Baker Donelson on 4/4/2024

A security researcher found an intentionally placed backdoor in a software library called XZ Utils on April 2. This backdoor allows hackers to hijack secure sessions, or create their own, on devices within an organization's...more

Supply Chain Optimization and Weather Impacts with Alteryx

Opportune LLP on 3/20/2024

In today's interconnected global economy, supply chain optimization plays a critical role in driving business success. However, unpredictable weather events such as hurricanes, tropical storms, and extreme weather conditions...more

Critical Infrastructure Organizations Warned to Upgrade Systems and Software

Nossaman LLP on 2/9/2024

In one of the most clear-eyed and sobering assessments of the cyberthreat China poses to our nation’s critical infrastructure, the country’s foremost cybersecurity leaders recently testified that the Chinese Communist Party...more

Evolving Caremark Duties Related to Cybersecurity Risks

Jenner & Block on 5/18/2023

In the recent case Construction Industry Laborers Pension Fund on behalf of SolarWinds Corporation, et. al v. Mike Bingle, et al. (2022), the Delaware Chancery Court considered whether the directors of SolarWinds Corporation,...more

Ransomware: The Top 5 Myths and Misconceptions

Ankura on 5/15/2023

Ransomware has become a major threat to businesses across the world as cyber-attacks are becoming increasingly sophisticated, resulting in devastating financial damage for companies that fall victim. Not only are important...more

Cybersecurity Best Practices: Disclosure Requirements for Risk Management, Strategy, and Governance

Porter Hedges LLP on 8/3/2022

In previous posts on the Porter Hedges Anti-Corruption & Compliance Blog, our team has discussed the U.S. Securities and Exchange Commission’s (“SEC”) proposal to amend its rules and require disclosures related to...more

Poisoned Robots: Data Poisoning Threatens AI-Powered Mechanisms

Pietragallo Gordon Alfano Bosick & Raspanti,... on 5/16/2022

Takeaway: Companies need to be vigilant about feeding their machines clean data to avoid hackers poisoning their networks. Artificial intelligence is everywhere: from facial recognition technology to weather forecasting. ...more

Security Measures to Deploy Now to Defend Against a Russian Cyberattack

Foley & Lardner LLP on 2/28/2022

On February 22, 2022, U.S. Department of Homeland Security Secretary Alejandro Mayorkas warned critical infrastructure organizations located in the United States of possible cyberattacks by Russian state-sponsored actors in...more

Discerning Data Cyber Vulnerability Alert: Log4j

Faegre Drinker Biddle & Reath LLP on 12/22/2021

According to numerous government and media sources, malicious cyber actors are targeting a new “zero day” vulnerability on a massive scale. This vulnerability, referred to as “Log4j” or “Log4Shell,” has resulted in widespread...more

Identifying and Remediating the Critical Apache Log4j Cybersecurity Vulnerability

Polsinelli on 12/17/2021

On December 9th, 2021, a critical zero-day vulnerability, which has the potential of providing threat actors access to millions of computers worldwide, was discovered. Due to the critical nature of this vulnerability, and the...more

Update on Apache log4j and Kronos Security Incidents

Robinson+Cole Data Privacy + Security Insider on 12/17/2021

It was a crazy weekend for cyberattacks. People seem surprised, but those of us in the industry aren’t surprised one bit. It is very logical and foreseeable that hackers are leveraging attacks that have maximum disruption on...more

Log4Shell Vulnerability Poses Massive Cybersecurity Threat

Womble Bond Dickinson on 12/17/2021

A widely reported flaw in popular software known as Log4j poses a severe cybersecurity threat to organizations around the globe, with hundreds of millions of devices at risk. Over the past week, government agencies,...more

Data Privacy + Cybersecurity Insider - July 2021 #2

Robinson & Cole LLP on 7/9/2021

CYBERSECURITY - Microsoft Issues Emergency Software Update for PrintNightmare Zero Day Vulnerability - Following the release of a U.S. Cybersecurity & Infrastructure Security Agency (US-CERT) Coordination Center...more

U.S. CISA + Cyber Command Warns of Critical Flaw in VMware

Robinson+Cole Data Privacy + Security Insider on 6/11/2021

Although a patch has been available by VMware since May 25, 2021, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) and Cyber Command this week urged users of VMware to update and...more

Biden Administration Issues Cybersecurity Executive Order Following Colonial Pipeline Cyberattack

Jackson Lewis P.C. on 5/17/2021

On May 12, 2021, the Biden Administration issued an Executive Order on “Improving the Nation’s Cybersecurity” (EO). The EO was in the works prior to the Colonial Pipeline cyberattack, reportedly a ransomware incident that...more

NYDFS recommends critical new practices to reduce supply chain risk in wake of SolarWinds attack

Hogan Lovells on 5/5/2021

On April 27, 2021, the New York State Department of Financial Services (“DFS” or the “Department”) released a report regarding its investigation into the response by DFS covered entities to the SolarWinds supply chain attack....more

SAP Issues Cybersecurity Alert: What You Can Do To Protect Your ERP

Opportune LLP on 4/21/2021

Here’s how the SAP Community can mitigate the risk of a widespread cybersecurity incident involving their SAP systems....more

The Cybersecurity Risk Posed By Your Outdated ETRM System

Opportune LLP on 3/11/2021

Is your ETRM system leaving you exposed to cybersecurity threats?...more

Microsoft Urges Customers to Patch Exchange Server “Zero Day” Vulnerabilities

Robinson+Cole Data Privacy + Security Insider on 3/4/2021

In a rare sharing of information about vulnerabilities in a blog post, Microsoft this week urged customers to download software patches to Microsoft Exchange Server after it detected “multiple 0—Day exploits being used to...more

SolarWinds Cyber-Attack Has Significant Implications for Developers and Contractors

Robinson+Cole Data Privacy + Security Insider on 1/15/2021

ICYMI, on Wednesday, January 6, 2021, the United States Department of Justice (DOJ) issued an update about what it termed “a major incident under the Federal Information Security Modernization Act”: the global SolarWinds...more

Data Privacy + Cybersecurity Insider - January 2021 #1

Robinson & Cole LLP on 1/8/2021

CYBERSECURITY - Further Fall-Out from Russian Hacking of SolarWinds - U.S. intelligence agencies, including the FBI, the Office of the Director of National Intelligence, the National Security Agency and the Cybersecurity...more

47 Results

/

View per page

Page: of 2

Next »