Risk Management

Exploitation of Windows Vulnerability Puts NTLM Hashes at Risk

April 30, 2025

Windows vulnerability CVE-2025-24054 is now actively exploited in phishing attacks, allowing hackers to steal New Technology LAN Manager (NTLM) hashes with minimal user interaction.

UnitedHealth’s Loan Repayment Tactics Face Backlash

April 30, 2025

UnitedHealth faces backlash over loan repayment demands as healthcare providers and the AMA call for flexible terms amid ongoing financial struggles.

Report Calls for Unified Federal Approach to Cybercrime Data Collection

April 30, 2025

A new report urges the US to improve cybercrime data collection and coordination across federal agencies to better understand and combat rising cyber threats.

Client Data Breach Leads to £60,000 Fine for UK Law Firm

April 30, 2025

Ransomware hackers leaked sensitive client data online, exposing the law firm to potential negligence claims in addition to an Information Commissioner’s Office (ICO) fine.

Implications for Digital Advertising and Risk Management with the DOJ Bulk Data Access Rule

April 25, 2025

Learn more about how the Department of Justice’s Bulk Data Access Rule reshapes digital advertising and what compliance and risk managers must do to avoid penalties.

Building a Living FDA Compliance Program

April 25, 2025

Is your FDA compliance program a living tool or a forgotten PDF? Discover how to turn policies into real-time risk management assets.

Custom Malware Discovered From RansomHub Gang Linked To Halliburton, Rite Aid Attacks

April 24, 2025

Learn more about a new custom backdoor linked to the RansomHub gang, which signals the growing threat of more stealthy and efficient tactics by cybercriminals.

Mitigating the Financial Fallout of SaaS Breaches

April 24, 2025

SaaS breaches are rising fast, and the financial fallout is real. Learn why risk leaders must treat SaaS security as a core business priority.

Fourth Circuit Limited Bank Liability in Business Email Fraud

April 22, 2025

A Fourth Circuit ruling limits bank liability in email fraud cases, holding that banks have no duty to detect mismatched names in ACH transfers unless they have actual knowledge.

DOJ Clarifies Enforcement and Compliance Expectations Under Foreign Adversary Data Rule

April 18, 2025

Explore the latest Department of Justice (DOJ) guidance on the Foreign Adversary Data Rule, so that risk leaders can ensure compliance and avoid enforcement pitfalls.

Daily Updates

Sign up for our free daily newsletter for the latest news and business legal developments.

Scroll to Top