Data Privacy & Cybersecurity

Understanding the Difference Between Data Retention and Data Preservation

The Growing Legal Perils for Chief Information Security Officers

Chief information security officers face unprecedented legal risks. Learn how to navigate scrutiny and avoid being targeted in the fallout of a cyberattack.

BlackBaud Admits Failure To Disclose, Pays $3 Million Penalty

The Crowdstrike Incident is a Cybersecurity Wake-Up Call About Software Updates

Read how the CrowdStrike incident and its “Blue Screen of Death” spotlight cybersecurity vulnerabilities by relying on unreliable technologies.

Navigating Cyber Risk Management: Strategies for Effective Protection

Settlement Underscores SEC’s Prioritization of Cybersecurity

The SEC’s recent settlement with RRD emphasizes the agency’s prioritization of cybersecurity, highlighting the need for robust policies & third-party oversight.

AI Vital To Cybersecurity and Cyber Criminals

SEC Cybersecurity Allegations Against SolarWinds Dismissed

Learn more about the SEC cybersecurity allegations against SolarWinds saying they didn’t adequately disclose a 2019 cyberattack.

Lessons from Neiman Marcus Third-Party Data Breach

Discover what companies can do to prevent issues like those from the Neiman Marcus third-party data breach of cloud services company Snowflake.

Ransom Attack On Fintech Company Yields Employee Information

Impact Of Evolve Bank Ransomware Attack Hits Fintech Industry

Read how the Evolve Bank ransomware attack has turned into a significant issue for several companies associated with the Memphis-based bank.

Maintaining Attorney/Client Privilege After a Data Breach

Cybercrime Gangs Developing Malware For Data Exfiltration

Big cybercrime gangs have the means and the incentive to invest in R&D and now employ a data exfiltration tool targeting Windows hosts.

LockBit Ransomware Gang Publishes Files, Federal Reserve Lowballs Ransom

Banning Ransomware Payments Unlikely To Happen

Explore why cybersecurity agencies say banning ransomware payments is unlikely but agree on mandating the reporting of cyber incidents.

The Three C’s: Collaboration Between Cybersecurity and Compliance

Cyber Safety Review Board Refused To Investigate SolarWinds

Learn why the Cyber Safety Review Board didn’t probe Microsoft’s role in Russian intelligence’s infiltration of US software company SolarWinds.

Business and Commercial Litigation in Federal Courts

Open-Source Library Used to Distribute Malware

Cloudflare is advising its customers to stop using Polyfill, an open-source library, to prevent malware. Learn more about open-source cybersecurity weaknesses.