News & Analysis as of May 5, 2025

Cybersecurity › Multi-Factor Authentication › Ransomware

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Inside CyberCX’s 2025 DFIR Report: MFA Failures and Espionage Risks Revealed

HaystackID on 4/30/2025

The DFIR 2025 Threat Report from CyberCX offers a firsthand view of how cyber adversaries adapted and accelerated their tactics in 2024. Covering incidents across Australia, New Zealand, North America, and Europe, the report...more

Cybersecurity In Construction: How To Effectively Mitigate Cyber Risk

Seyfarth Shaw LLP on 3/11/2025

The construction industry’s reliance on digital data and devices has reshaped the construction process. When used properly, digital technology facilitates collaboration and increases productivity. However, growing dependence...more

Ghost (Cring) Ransomware: Understanding The Threat & How Enterprises Can Defend Themselves

Alston & Bird on 2/24/2025

On February 19, 2025, the Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the Federal Bureau of Investigation (FBI) and the Multi-State Information Sharing and Analysis Center (MS-ISAC), issued...more

Cybersecurity Executive Order—Key Implications for the Manufacturing Industry

Foley & Lardner LLP on 1/27/2025

On January 16, 2025, President Joe Biden issued the “Executive Order on Strengthening and Promoting Innovation in the Nation’s Cybersecurity,” a comprehensive directive designed to address the growing complexity and...more

HHS Proposes Changes to Strengthen HIPAA Security Rule

Foley & Lardner LLP on 1/7/2025

Material updates to the HIPAA Security Rule could be on the way — affecting all HIPAA-regulated entities — for the first time in two decades. The Department of Health and Human Services (HHS) issued a Notice of Proposed...more

[Webcast Transcript] Anatomy of a Business Email Compromise

HaystackID on 11/6/2024

Editor’s Note: This webcast brings together some of HaystackID’s top experts to dissect the intricacies of Business Email Compromise (BEC) attacks—a rapidly growing threat impacting organizations globally. During the...more

NY-licensed financial services companies must harden incident response plans, improve breach readiness by November 1

Constangy, Brooks, Smith & Prophete, LLP on 10/28/2024

New York’s Cybersecurity Regulation continues its phased roll-out on November 1, when licensed financial services companies face a host of new requirements aimed at bolstering breach readiness and improving their ability to...more

Lessons From the Suffolk County Ransomware Attack That Apply to All Businesses

Baker Donelson on 10/21/2024

In December 2021, Suffolk County, New York, experienced a significant cybersecurity breach that culminated in a ransomware attack in September 2022. The attack went undetected for months, allowing the attackers to install...more

Key Takeaways for Healthcare Providers Following HHS OCR’s Most Recent Ransomware Investigation

Jackson Lewis P.C. on 9/30/2024

Announcing its fourth ransomware cybersecurity investigation and settlement, the Office for Civil Rights (OCR) also observed there has been a 264% increase in large ransomware breaches since 2018....more

Privacy Briefs: February 2024

Health Care Compliance Association (HCCA) on 2/9/2024

The American Hospital Association (AHA) has warned that information technology (IT) help desks are being targeted in a social engineering scheme that uses the stolen identity of revenue cycle employees or employees in other...more

NYDFS Significantly Amends Cybersecurity Regulation

BakerHostetler on 11/3/2023

The New York State Department of Financial Services (NYDFS) adopted comprehensive amendments to its cybersecurity regulation on Nov. 1, 2023. The amended regulation, including the notification provisions of §500.17, goes into...more

7 Key Practices Companies Should Implement to Ensure Cyber Safety in the Age of Remote Work

Flaster Greenberg PC on 7/13/2023

Cybersecurity is critically important in the age of remote work. With more people working from home and accessing company systems and data remotely, the potential for cyberattacks and data breaches has increased...more

Deeper Dive into the Data

BakerHostetler on 5/24/2023

Every year, BakerHostetler collects and analyzes various metrics about the incident response matters we handle. In 2022, we handled over 1,160 incidents. The most striking trends we saw across those incidents were an overall...more

Ransomware: The Top 5 Myths and Misconceptions

Ankura on 5/15/2023

Ransomware has become a major threat to businesses across the world as cyber-attacks are becoming increasingly sophisticated, resulting in devastating financial damage for companies that fall victim. Not only are important...more

Fintech Companies Prepare for Forthcoming Updates to the NY Cybersecurity Regulation

Foley Hoag LLP - Security, Privacy and the... on 4/19/2023

Proposed Amendments to 23 NYCRR Part 500 - If you are the chief information security officer (“CISO”) of a fintech company operating in New York, you may already be aware that, on November 9, 2022, the New York State...more

Advisory Note - ESXiArgs ransomware attack targets VMware ESXi servers

Ankura on 2/6/2023

Are you using VMware ESXi servers? Why should you worry? Unpatched VMware ESXi servers are actively being attacked against a two-year-old remote code execution vulnerability to deploy a new ESXiArgs ransomware. ...more

Cybercrime: A Year in Review

Mitchell, Williams, Selig, Gates & Woodyard,... on 1/26/2023

Information security will remain a top priority for all industries in 2023. Healthcare, government, and education will likely continue to be top targets for ransomware attacks, with for-profit businesses close behind. In...more

Hinshaw Insurance Law TV – Cybersecurity Third and Final Part: Ransomware

Hinshaw & Culbertson LLP on 11/10/2022

In the third and final episode of our three-part series on cybersecurity, we discuss ransomware and the legal issues surrounding paying a ransom. In this episode, we cover: how companies have become better prepared,...more

Using Multi-Factor Authentication as a Prerequisite to Cyber Liability Coverage

Farella Braun + Martel LLP on 8/12/2022

Multi-factor authentication (MFA) is more than an annoying popup or text message when logging onto a company’s website or platform. Not only is using MFA a sound security practice and good business, it is frequently becoming...more

6 Things Underwriters Look for in Your Ransomware Protection

Woodruff Sawyer on 7/21/2022

While the early days of cyber insurance were often marked by rapid expansion and low losses, recent years have seen the industry weather a vast increase in not just the number of claims but also the severity. The growing...more

RSA Conference Day 1: The Only Constant is Change

Wiley Rein LLP on 6/7/2022

I am at the RSA Conference 2022 in San Francisco, my first time as a member of the private sector, since retiring from the FBI last year. I attended one of the keynotes on the first day of the conference, in between panels on...more

Defense In-Depth: Cybersecurity For Energy

Opportune LLP on 4/7/2022

Glenn Hartfiel, Principal, and Geoff Yut, Consultant, at Opportune LLP discuss why recent geopolitical events are heightening the need for the implementation of improved cybersecurity measures in the energy industry, why...more

A Cyber Threat Analysis of the Russia-Ukraine Conflict

Ankura on 3/29/2022

The Ankura Cyber Threat Investigations & Expert Services (CTIX) team conducted a technical analysis of historical and ongoing adversarial activity associated with the current Ukrainian/Russian conflict. In doing so, the CTIX...more

‘Shields Up’ on Cybersecurity in Wake of Ukraine Conflict

Harris Beach Murtha PLLC on 3/3/2022

Fears of cybersecurity attacks are mounting in the wake of the Russian invasion of Ukraine. From the war itself, a number of malware variants have been created and are circulating on the internet....more

The Digital Download – Alston & Bird’s Privacy, Cyber & Data Strategy Newsletter – February 2022

Alston & Bird on 2/9/2022

Selected Developments in U.S. Law - SEC Proposed Rule Will Require Private Funds to Report Certain Cyber Events On January 26, 2022, the U.S. Securities and Exchange Commission (SEC) proposed new rules to enhance hedge fund...more

34 Results

/

View per page

Page: of 2

Next »