If you are a security professional then I strongly recommend you register and review the Law360 article on SolarWinds. A US judge has kept open an investor suit against the company, following allegations from SolarWinds investors that the software firm…
Cyber insurers could potentially be looking at large claims due to the Ukraine-Russia war. While ‘some’ cyber insurance precedents have been set recently following the Merck Not Petya hack, it may not be enough to prevent claims disputes between the…
The SEC has announced its examination priorities for 2022, that is in line with the communications by the SEC made to markets over their concerns relating to investment funds and advisors, ESG, information security and resilience, and crypto assets. As…
I do not agree with what has been done. But if it proves to be the case that Lapsus$ is a hacking group of mainly teenagers, then they will go down in history and be a lesson for companies and…
Okta’s shares have fallen 10.5% on Wednesday trading, following the continued confusion related to a cybersecurity incident and the potential impact on it customers. One expects markets to be uneasy about the incident given the lack of a clear message…
3 of Toyota’s suppliers have publicised cyber-attacks in as many weeks. Demonstrating the impact of cybersecurity on its supply chain. Kojima Industries Corp, Denso and Bridgestone have had to deal with cyber attacks. At a time when Japan joined Western allies in…
Cybersecurity and the role of the board. Congress, CISA, the Securities and Exchange Commission and Department of Defence have pushed cybersecurity risk management into the board room. The SEC proposals are akin to Sarbanes Oxley, coming at a time when…
A great thorough summary of what US public firms can expect if the Securities and Exchange Commission (SEC) cybersecurity proposal makes it into regulation without significant modification. For Foreign Private Issuers note the Summary point 5, as the proposal applies…
A very important read for cyber security and Critical National Infrastructure (CNI) in the US. The US president signed into law the ‘2022 Consolidated Appropriations Act’ containing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (the Cyber Incident Reporting Actâ€). …
Thank you Matthew Bull and the International Security Journal (ISJ) for inviting me to speak about offensive and defensive cybersecurity, the impact of cyber-attacks and the short term remedial actions companies can take during the Ukraine, Russia war. I hope…
