Cyber Security Archive

Not so long ago, cybersecurity experts would say that experiencing a ransomware attack was more a question of “if” than “when.” Now, it’s no longer about “when,” but “how often” and “what’s the damage?”  Attacks are happening every day. In …

When Russia’s Cl0p gang hacked Progress Software’s MOVEit Transfer app via a zero-day SQL injection vulnerability on May 27, it soon became apparent that the number of organizations and individuals affected would be high. The first known victim was the …

The U.S. government has created a new system to help consumers understand the cybersecurity risks associated with smart devices. Countless goods now come with Internet-enabled technology that allows users to customize their experience and enjoy greater functionality. Devices such as …

Over the past five years, I’ve had the privilege of providing cybersecurity training, implementation and auditing support, and consultation guidance for countless U.S. businesses. I’ve also practiced most areas of business law over the past forty years. In this time, …

Under ISO 27001, awareness training is a crucial but often overlooked aspect of information security. The Standard, which describes best practices for implementing an ISMS (information security management system), states that organizations must take a holistic approach to their data …

Earlier this year, the SEC (Securities and Exchange Commission) issued a proposal that would impose new cybersecurity requirements on a range of organizations. Under the plans, broker-dealers, clearing agencies, major security-based swap participants, the Municipal Securities Rulemaking Board, and other …

Data breach notification requirements are complex in the US, with various federal and state laws containing different requirements for when security incidents must be disclosed. Some even have substantially different definitions for what a ‘data breach’ or ‘personal data’ is. …