News & Analysis as of May 17, 2025

Cyber Threats

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

The Crucial Role of Business Impact Analysis (BIA) in Cyber Resilience

Mitratech Holdings, Inc on 4/25/2025

Cyber threats aren’t a distant possibility — they’re a daily reality. And according to IBM’s Cost of a Data Breach Report, they’re costing businesses more than ever. The global average data breach cost has surged to $4.88...more

HHS Proposes Changes to Strengthen HIPAA Security Rule

Foley & Lardner LLP on 1/7/2025

Material updates to the HIPAA Security Rule could be on the way — affecting all HIPAA-regulated entities — for the first time in two decades. The Department of Health and Human Services (HHS) issued a Notice of Proposed...more

With Tech Considerations for Securities Lawyers

Mayer Brown Free Writings + Perspectives on 11/19/2024

At the Practising Law Institute’s 56th Annual Institute on Securities Regulation, panelists discussed how public companies are addressing cybersecurity and artificial intelligence (AI) related issues....more

Coming This December: Will Health Care Entities Be Unwrapping New HIPAA Security Rules for the Holidays?

Alston & Bird on 11/1/2024

Our Health Care and Privacy, Cyber & Data Strategy Groups cover an upcoming proposed rule from U.S. Health and Human Services (HHS) that would formalize cybersecurity requirements and allow the Office for Civil Rights (OCR)...more

Cybersecurity for Critical Infrastructure Update – Incident Response Improves, Industry Standards Evolve

Polsinelli on 10/29/2024

Critical infrastructure facilities are increasingly vulnerable to cybersecurity events, as demonstrated by the number of cyberattacks that have occurred this year against utilities including those in the energy sector...more

Preparing for the Cybersecurity and Fraud Risks of Deepfakes: What Executive Teams Need to Know

Epstein Becker & Green on 9/24/2024

The widespread availability of Artificial Intelligence (AI) tools has enabled the growing use of “deepfakes,” whereby the human voice and likeness can be replicated seamlessly such that impersonations are impossible to detect...more

Why Executive Teams Should Prepare for the Cybersecurity and Fraud Risks of Deepfakes

Epstein Becker & Green on 9/23/2024

[Webinar] Data Risk & Resilience Part III - Digital Forensics in your Incident Response Plan - September 19th, 1:00 pm - 2:00 pm...

EDRM - Electronic Discovery Reference Model on 9/13/2024

Data Resilience Masterclass: Navigating the Risks of the Digital Age - Data Risk and Resilience is a critical topic for modern businesses, especially within industries that handle vast amounts of sensitive information....more

What Everyone Gets Wrong About Inherent Risk, and Why it Really Matters

EDRM - Electronic Discovery Reference Model on 7/15/2024

Defining the role of inherent risk in cybersecurity - Inherent risk is a concept that while fundamental to cybersecurity, has largely been disregarded by popular cybersecurity risk guidelines and standards and remains arcane...more

Cyber Security Obligations Under the EU AI Act

Ius Laboris on 5/31/2024

With the EU's AI Act coming into force imminently, those designing, developing, and/or deploying AI will need to start getting to grips with the myriad of new obligations, including new cyber security requirements....more

Data Privacy + Cybersecurity Insider - May 2024 #4

Robinson & Cole LLP on 5/17/2024

CYBERSECURITY - CISA Issues Advisory on Black Basta Ransomware - On May 10, 2024, CISA, along with the FBI, HHS, and MS-ISAC, issued a joint Cybersecurity Advisory relating to Black Basta ransomware affiliates “that...more

Tackling Cyber Risks in the Manufacturing Industry

Bond Schoeneck & King PLLC on 5/17/2024

As the manufacturing industry increasingly relies on advanced technology such as the industrial internet of things, automation and big data, manufacturers are particularly susceptible to cyberattacks. Manufacturing operations...more

NIST Cybersecurity Framework 2.0 Prioritizes Governance and Flexibility

Alston & Bird on 5/7/2024

Earlier this year, the National Institute of Standards and Technology (NIST) issued an update to its Cybersecurity Framework (CSF) with the release of version 2.0, the first update since April 2018 (version 1.1). While the...more

FCC Announces Consumer IoT Cybersecurity Labeling Program

Pillsbury Winthrop Shaw Pittman LLP on 3/22/2024

The Federal Communications Commission (FCC) has created a baseline for wireless consumer IoT products to protect against cybersecurity threats. The voluntary program uses criteria established by the National Institute of...more

NIST Extends its Cybersecurity Framework to Cover Evolving Threats and Governance

Jones Day on 3/8/2024

The National Institute of Standards and Technology ("NIST") released a significant update to its framework, expanding its scope and reach to cover a broader audience and evolving cybersecurity risks and management issues....more

Right To Know - February 2024, Vol. 14

Clark Hill PLC on 2/14/2024

Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed....more

DoD Issues Proposed CMMC Rule Requiring Cybersecurity Assessments of Contractors

Perkins Coie on 1/5/2024

The U.S. Department of Defense (DoD) has issued its long-awaited proposed rule implementing its Cybersecurity Maturity Model Certification (CMMC) program to protect sensitive, unclassified government information in the...more

Evolution of the Chinese Hacking Threat: Risks for Government and Industry

Bradley Arant Boult Cummings LLP on 12/8/2023

On May 24, 2023, Microsoft announced the detection of a direct threat to critical infrastructure organizations in Guam and elsewhere in the United States. The alert attributed observed malicious activity to a state-sponsored...more

CISA, UK NCSC, and 17 Other Countries Issue Landmark Joint Guidelines for Secure AI System Development

Davis Wright Tremaine LLP on 12/5/2023

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the UK National Cyber Security Centre (UK NCSC), along with partner agencies from 17 nations, have released Guidelines for Secure AI System Development (the...more

FBI Cautions Organizations on Dual Ransomware Attacks

Alston & Bird on 10/25/2023

The Federal Bureau of Investigation (FBI) issued a Private Industry Notification on September 27, 2023, highlighting two concerning ransomware trends and providing companies with guidance on mitigating potential threat actor...more

The FAR Council’s Proposed Cybersecurity Overhaul: Lots Of Questions, But Only Some Answers

Morrison & Foerster LLP - Government... on 10/9/2023

In what can best be described as a tsunami of cybersecurity regulation, the Federal Acquisition Regulation (FAR) Council—consisting of the Department of Defense (DoD), General Services Administration (GSA), and National...more

Biden Administration’s Voluntary AI Safety Agreement

Cozen O'Connor on 10/6/2023

The Biden administration announced that it brokered a voluntary agreement with several of the biggest technology and artificial intelligence (AI) companies. The agreement, available here, has the companies taking a number of...more

Keeping Pace: The Evolution of Incident Response

Ankura on 10/2/2023

Incident response (IR) has undergone a drastic transformation in the past two decades, adapting to the relentless evolution of the cyber threat landscape. In the early 2000s, as the internet became more deeply ingrained in...more

FDA Authorized to Establish New Cybersecurity Standards for Medical Devices: What it Means for Industry

Ankura on 4/26/2023

On December 29, 2022, President Biden signed a new statute that will significantly impact medical device cybersecurity regulation. Section 3305 of the Consolidated Appropriations Act of 2023 (“Section 3305”) authorizes the...more

Right To Know - February 2023, Vol. 3

Clark Hill PLC on 2/9/2023

Cyber, Privacy, and Technology Report - Welcome to your monthly rundown of all things cyber, privacy, and technology, where we highlight all the happenings you may have missed....more

74 Results

View per page

Page: of 3

Cybersecurity › National Institute of Standards and Technology › Cyber Threats

"My best business intelligence, in one easy email…"