A great post in The Nation Law Review on the SolarWinds vs. SEC case. The case continues, waiting a response from SolarWinds to the SEC. Not all charges have been dropped. ‘Public companies’ statements related to their cybersecurity practices are…
The Malaysian government is regulating social media platforms from January 2025. Platforms with over 8 million users will have to apply for a license. ‘If social media services fail to apply for a license by 1 January 2025 then legal…
@Thaddeus Dziekanowski a reason why cybersecurity is in trouble. One has always been amused by the term ‘next generation protection’. We’re always trying to get to the next generation when boards and CISOs don’t understand or manage current risks. It’s…
The enclosed indicates that in part the SEC case against SolarWind and it’s CISO can move forward,’allowing the claims based on allegations of contemporaneous knowledge of falsity of public statements to go forward’. The SolarWinds case was tried under regulations…
A great article further highlighting the challenges in the post by Brian Krebs. Companies such as Wiz, for example, are not just start-ups. They are companies upon which organizations rely to mange their security. If these companies fail, as we…
Delta Airlines incident response and recovery is under the regulatory spotlight of the U.S Department of Transport. Delta accounts for over 60% of flights cancelled in the U.S. 6,500 flights cancelled following the incident. Thursday evening all quiet on the…
The first stab at direct Crowdstrike lossess is creeping up to the estimated cost of Not Petya. One expects direct and indirect lossess to be closer to $50 billion when all well and done. One has to ask how any…
What is interesting about last weeks incident is there appears to be no real solutions put forward to prevent further crisis. Solution that can be delivered where rubber meets the road. The digital gene is well and truly out the…
Of course, these events will continue until boards enhance their oversight and assurance of ICT risk. The fallout from the Crowdstrike incident illustrates those impacted will likely bear a significant portion of the incident remediation costs themselves. Highlighting the challenges…
Cyber experts did not fail. Crowdstrike was never an issue that could have been managed by anyone other than Crowdstrike. While all the ‘snake oil’ starts flowing. There are.many Crowdstrike type events ahead, it’s not a unique threat. Could someone…
