Legal

Legal | News, how-tos, features, reviews, and videos

A core infrastructure engineer pleads guilty to federal charges in insider attack

Analysts say CISOs and IT leaders can do a better job of preventing such attacks via what should be standard security procedures.

By Evan Schuman

Apr 3, 20263 mins

CyberattacksCybercrimeLegal

Articles

Microsoft sues overseas threat actor group over abuse of OpenAI service

Civil suit accuses unknown hackers of misusing OpenAI to provide a hacking-as-a-service offering.

By Jon Gold

Jan 13, 2025 4 mins

LegalMalware

US sanctions Chinese cybersecurity firm over global malware campaign

Sichuan Silence and employee accused of exploiting firewall vulnerabilities in 2020.

By Gyana Swain

Dec 10, 2024 6 mins

HackingLegalVulnerabilities

US may plan legislation to contain Chinese cyber espionage

A classified briefing has revealed a sweeping espionage campaign stealing call data, sparking calls for action against Chinese cyber activities.

By Gyana Swain

Dec 5, 2024 4 mins

CyberattacksHackingLaws and Regulations

Five-country attack on cybercrooks welcomed by security expert

Arrest of 41 suspects more important than takedown of 22,000 malicious IP addresses, he argues.

By Howard Solomon

Nov 6, 2024 6 mins

CybercrimeLegal

Delta gets serious and sues CrowdStrike

After CrowdStrike’s software glitch caused massive cancellations and delays in air traffic worldwide, the US airline is now going to court.

By Tristan Fincken

Oct 28, 2024 2 mins

LegalSecurity

Do the Marriott cybersecurity settlements send the wrong message to CISOs, CFOs?

To partially close the loop on the fallout from three major data breaches between 2014 and 2020 impacting more than 344 million customers, Marriott has settled both with the Federal Trade Commission and almost every American state. But the terms of the settlements are worrying some cybersecurity executives.

By Evan Schuman

Oct 10, 2024 10 mins

CyberattacksData BreachLegal

CrowdStrike failure: the beginning of the end of software without guarantees?

CrowdStrike’s crash-inducing security software update raises concerns about suppliers’ responsibility to offer quality guarantees for their products.

By Francisca Domínguez Zubicoa

Aug 1, 2024 8 mins

LegalSecurity Software

Federal judge greenlights securities fraud charges against SolarWinds and its CISO

Although the court dismissed most of the SEC’s charges in its lawsuit against SolarWinds, the by far most serious charge – securities fraud by both the company and its CISO – survived. CISOs have little reason to celebrate.

By Evan Schuman

Jul 19, 2024 6 mins

CSO and CISOLegalVulnerabilities

US Supreme Court ruling will likely cause cyber regulation chaos

The ruling could weaken almost all US federal cybersecurity regulations, including SEC incident reporting, FCC data breach reporting, and CISA cyber incident reporting rules.

By Cynthia Brumfield

Jul 2, 2024 9 mins

CSO and CISOGovernmentLaws and Regulations

Dutch appellate court rules against Oracle and Salesforce in a GDPR-related cookie case

The ruling means the litigation — which began in 2020 — can continue. The case involves whether cookies collecting user information violates GDPR and whether the two companies are responsible for what web site operators do.

By Evan Schuman

Jun 20, 2024 4 mins

ComplianceLegalPrivacy

Sleuthcon: Cybercrime emerges in Morocco and law enforcement gets creative

At this year’s cybercrime-oriented conference Sleuthcon, Morocco emerged as a locus of cybercrime, while UK and US law enforcement highlighted how creative they've become in shaming and disrupting criminal groups.

By Cynthia Brumfield

Jun 10, 2024 8 mins

Advanced Persistent ThreatsGovernmentHacking

Some strategies for CISOs freaked out by the specter of federal indictments

Experts at this year's RSA Conference offered strategies to help CISOs cope with the prospect of facing federal indictments over their handling of cyber incidents.

By Cynthia Brumfield

May 10, 2024 7 mins

CSO and CISOLegalSecurity Practices

View all

A core infrastructure engineer pleads guilty to federal charges in insider attack

US authorities punish sellers of malware and spyware

Google fears massive attempt to clone Gemini AI through model extraction

Google asks US court to shut down Lighthouse phishing-as-a-service operation

US Appeals Court lowers burden of proof for data breach lawsuits

US indicts one for role in BreachForums, France arrests four others

4 ways to safeguard CISO communications from legal liabilities

CISOs: Stop trying to do the lawyer’s job

DOJ indicts North Korean conspirators for remote IT work scheme

Articles

Microsoft sues overseas threat actor group over abuse of OpenAI service

US sanctions Chinese cybersecurity firm over global malware campaign

US may plan legislation to contain Chinese cyber espionage

Five-country attack on cybercrooks welcomed by security expert

Delta gets serious and sues CrowdStrike

Do the Marriott cybersecurity settlements send the wrong message to CISOs, CFOs?

CrowdStrike failure: the beginning of the end of software without guarantees?

Federal judge greenlights securities fraud charges against SolarWinds and its CISO

US Supreme Court ruling will likely cause cyber regulation chaos

Dutch appellate court rules against Oracle and Salesforce in a GDPR-related cookie case

Sleuthcon: Cybercrime emerges in Morocco and law enforcement gets creative

Some strategies for CISOs freaked out by the specter of federal indictments

Resources

Modern Identity Security for Dummies

Peer insights on AI adoption and the disaster recovery gap

Checklist: Three Barriers Killing Your Strategy