Uncategorized

Please submit your comments about Federal Insurance for Catastrophic Cyber Incidents!

By Peter Vogel on September 29, 2022

The FederalRegister.gov posted that the “Federal Insurance Office (FIO) is seeking comments from the public on questions related to cyber insurance and catastrophic cyber incidents….on or before November 14, 2022.” The September 29, 2022 posting entitled “Potential Federal Insurance Response, to Catastrophic Cyber Incidents” (https://www.federalregister.gov/documents/2022/09/29/2022-21133/potential-federal-insurance-response-to-catastrophic-cyber-incidents) included these comments:

Cyber insurance…

Are you a target of a Phishing Campaign?

By Peter Vogel on September 23, 2022

Darkreading.com reported that “CircleCI has sent out a notice to its customers that a phishing email scam is targeting their users, along with GitHub’s, in an attempt to harvest credentials. The CircleCI security alert included a copy of the malicious email that told recipients that the companies were working together…

Medical devices are targets for cyberattacks!

By Peter Vogel on September 20, 2022

HealthCareInfoSecurity.com reported “Cyberthreat actors exploiting medical device vulnerabilities adversely impact healthcare facilities’ operational functions, patient safety, data confidentiality and data integrity…”. The September 14, 2022 report entitled “FBI Warns of Cyberthreats to Legacy Medical Devices” (https://www.healthcareinfosecurity.com/fbi-warns-cyberthreats-to-legacy-medical-devices-a-20066?rf=2022-09-15_ENEWS_SUB_HIS__Slot1_ART20066&mkt_tok=MDUxLVpYSS0yMzcAAAGG4L6cKnVVwllFs3q4RXf_0i0bwYVRe-K3Lbj_wAa1RRm-cg4EuJzOEOrNSVP4lCwykoyXMS2o6btZX16PNUgkxn_FbiAXrlyFSCXfa4MUHUwRWQEDfA) included these recommended steps from the FBI:

Using anti-malware software on an

Watch out for Cyberattackers at the Facebook Ad Manager!

By Peter Vogel on September 16, 2022

DarkReading.com reported that “Facebook lead-generation forms are being repurposed to collect passwords and credit card information from unsuspecting Facebook advertisers.” The September 13, 2022 report entitled “Cyberattackers Abuse Facebook Ad Manager in Savvy Credential-Harvesting Campaign” (https://www.darkreading.com/attacks-breaches/cyberattackers-abuse-facebook-ad-manager-credential-harvesting-campaign) included these comments:

According to a Tuesday report by the security research…

Watch out for Smart Contracts since Smart Contract Auditing Firm was exploited!

By Peter Vogel on September 13, 2022

DataBreachToday.com reported that “A web3 security company that offers smart contract audits to blockchain companies found itself on the receiving end of an exploitable flaw when two individuals stole hundreds of non-fungible tokens during the minting stag.” The September 6, 2022 report entitled “Smart Contract Auditing Firm Suffers Smart…

$1.3M stolen from a DAO!

By Peter Vogel on September 13, 2022

HealthCareInfoSecurity.com reported that “An attacker stole $1.25 million worth of cryptocurrency from newly established decentralized finance protocol New Free DAO in a flash loan attack on Thursday. The thief has cashed out nearly half of the stolen funds so far.” The September 9, 2022 report entitled “$1.3 Million Stolen From…

Michael Dziedzic, Unsplash

Apparently Ransomware-as-a-Service (RaaS) Groups are in a decline.

By Peter Vogel on August 26, 2022

BankInfoSecurity.com reported that “The latest edition of the ISMG Security Report discusses how ransomware-as-a-service groups are shifting their business models, how investigators battling cybercrime have been hindered by GDPR, and how employees consider workplace “choice” a key factor for job satisfaction.” The August 25, 2022 article entitled “Are Ransomware-as-a-Service…

Markus Spiske, Unsplash

Cyberinsurance exclusions for State-Backed Cyberattacks!

By Peter Vogel on August 23, 2022

My good friend Judy Greenwald reported for BusinessInsurance.com that “Lloyd’s of London will require standalone cyber policies to include state-backed cyberattack exclusions beginning in March 2023, it said in a market bulletin this week.” The August 18, 2022 article entitled “Lloyd’s requiring state-backed cyberattack exclusions” included these comments…

Philipp Katzenberger, Unsplash

Do you have adequate Ransomware Cyber Insurance Coverage?

By Peter Vogel on August 18, 2022

DarkReading.com reported that “Organizations lack sufficient levels of cyber-insurance coverage to protect themselves in case of a ransomware attack, with just 14% of businesses with 1,400 or fewer employees boasting coverage limits above $600,000.” The August 11, 2022 article entitled “Cyber-Insurance Fail: Most Businesses Lack Ransomware Coverage” included…

Pawel Czerwinski, Unsplash

FTC planning to establish Privacy & Data Security Laws

By Peter Vogel on August 15, 2022

BankInfoSecurity.com reported that the “…U.S. Federal Trade Commission today initiated a potentially years-long attempt to impose new data security and privacy regulations onto the American economy.” The August 11, 2022 article entitled “FTC Initiates Privacy and Data Security Rule-Making” included these comments from FTC Chair Lina Khan:

A…