Policy & Regulation: Page 13
-
Getty Images
Business, technology groups back SolarWinds motion to dismiss SEC charges
Former U.S. cybersecurity officials and a group of current and former CISOs warned the fraud suit against SolarWinds could chill intel sharing from the private sector.
By David Jones • Feb. 5, 2024 -
Getty Images
Blackbaud settles FTC data security probe into 2020 ransomware attack
The company is required to delete unnecessary data and inform the agency of future breaches.
By David Jones • Feb. 2, 2024 -
Explore the Trendlineâž”
Getty Images
TrendlineRisk Management
An esclation of cyber risks facing businesses and government has made cyber resilience a major priority.
By Cybersecurity Dive staff -
Getty Images
China-linked hackers primed to attack US critical infrastructure, FBI director says
Christopher Wray and other top cybersecurity officials warned state-linked hackers are prepositioning for catastrophic attacks to distract from a potential military action.
By David Jones • Feb. 1, 2024 -
Getty Images
White House rejects efforts to undo SEC cyber disclosure rule
President Joe Biden would veto the joint resolution that aims to strip the agency’s authority to require companies to disclose cyber incidents and governance processes, the administration said Wednesday.
By Matt Kapko • Jan. 31, 2024 -
Naomi Eide/Cybersecurity Dive
What’s ahead for cybersecurity in 2024
A steady stream of threats and new regulations have executives tiptoeing around how to best detail security incidents.
By Naomi Eide • Jan. 31, 2024 -
Win McNamee via Getty Images
In 2024, the cybersecurity industry awaits more regulation — and enforcement
Private sector companies and critical infrastructure providers will face unprecedented demands for product security, intelligence sharing and transparency on data security.
By David Jones • Jan. 31, 2024 -
Retrieved from Progress Software on January 18, 2024
MOVEit liabilities mount for Progress Software
The company revealed multiple government investigations are underway into the MOVEit vulnerability. It’s also party to more than 100 class-action lawsuits.
By Matt Kapko • Jan. 30, 2024 -
Getty Images
Will the movement to ban ransom payments gain steam in 2024?
Policies and regulations around ransomware payments are widely expected to change in 2024, but how and to what effect remains in flux.
By Matt Kapko • Jan. 23, 2024 -
Getty Images
CISA issues emergency directive for federal agencies to mitigate Ivanti vulnerabilities
Civilian agencies are under threat following a surge in nation-state linked exploitation of Ivanti Connect Secure and Ivanti Policy Secure devices.
By David Jones • Jan. 19, 2024 -
Getty Images
CISA’s 1,200 pre-ransomware alerts saved organizations millions in damages
The federal agency’s early warning system notified organizations across multiple critical infrastructure sectors of potential impending attacks.
By Matt Kapko • Jan. 19, 2024 -
Getty Images
5 cybersecurity trends to watch in 2024
Preventative measures remain woefully unmet, the scourge of ransomware is as bad as its ever been, and a wave of new incident reporting and compliance regulations are taking hold. Buckle up, 2024 is here.
By David Jones , Matt Kapko • Jan. 10, 2024 -
Permission granted by Carnegie Mellon University
CISA seeks comment on secure by design principles to boost global software security
The agency issued an RFI seeking industry input on costs, how to incorporate security into higher education and how to reduce recurring security vulnerabilities.
By David Jones • Dec. 21, 2023 -
Getty Images
Cyber risk strategies in hot seat as SEC rules go live
A new climate of regulatory scrutiny is pushing companies to reassess how they manage cyber governance and mitigation at the highest levels.
By David Jones • Dec. 20, 2023 -
Chip Somodevilla/Getty Images via Getty Images
US leads AlphV ransomware infrastructure takedown
Law enforcement released a decryptor for the prolific threat group and ransomware affiliate service behind some of 2023’s most high-profile attacks.
By Matt Kapko • Dec. 19, 2023 -
Getty Images
What the SEC weighed in finalizing the cyber disclosure rules
The SEC's head of the corporate finance division said the burden of meeting compliance and fears of tipping off threat groups were carefully considered prior to final recommendations.
By David Jones • Dec. 18, 2023 -
Kevin Dietsch / Staff via Getty Images
Senate confirms Harry Coker Jr. as national cyber director
The national security veteran assumes the role at a critical time, tasked with implementing the White House’s national cybersecurity strategy.
By Matt Kapko • Dec. 13, 2023 -
Getty Images
Check Point Software in SEC settlement talks in connection with SolarWinds probe
The cybersecurity firm provided documents and other information related to the 2020 supply chain hack of the SolarWinds Orion platform.
By David Jones • Dec. 13, 2023 -
Mark Wilson/Newsmakers via Getty Images
FBI to field SEC cyber incident disclosure delay requests
Publicly-traded companies can request incident disclosure delays, but the bar is high. A filing would have to pose a significant threat to public safety or national security.
By Matt Kapko • Dec. 12, 2023 -
Courtesy of Billington CyberSecurity Summit
White House wants to set minimum cyber standards for hospitals, healthcare
The sector has faced a wave of ransomware linked to the critical CitrixBleed vulnerability, which has led to major attacks from LockBit and other threat groups.
By David Jones • Dec. 11, 2023 -
Getty Images
2 years on, Log4j still haunts the security community
Research from Veracode shows nearly 2 in 5 applications are still running vulnerable versions.
By David Jones • Dec. 8, 2023 -
Matt Kapko/Cybersecurity Dive
CISA performance goals program trims exploited CVEs
Organizations enrolled in the agency’s vulnerability scanning program are showing improved security, but the reduction in exploitable internet-facing services is incremental.
By David Jones • Dec. 6, 2023 -
(2008). Retrieved from Environmental Protection Agency.
Water utility cyberattacks underscore ongoing threat to OT
U.S. officials urged water utilities and industrial sites to employ basic configuration safeguards like securing internet-facing devices and changing default passwords following a series of attacks.
By David Jones • Dec. 5, 2023 -
Retrieved from Pixabay.
CISA warns of threat groups exploiting Unitronics PLCs in water treatment hacks
The Unitronics warning follows an Iran-linked hack of a Pennsylvania water treatment facility.
By David Jones • Updated Nov. 29, 2023 -
Getty Images
NY reaches $1M breach settlement with First American Title Insurance
The company exposed millions of documents of non-public customer data, through a vulnerability in a proprietary application.
By David Jones • Nov. 28, 2023 -
Center for Strategic and International Studies
Authorities pushing for secure AI development practices
CISA and the U.K.’s cyber agency released the guidelines as part of a global effort to ensure AI is developed using security as a core component.
By David Jones • Nov. 27, 2023
Previous
