Kennedys’ partner Joshua Mooney, alongside special counsel Amanda McAllister Novak, has published a significant article titled “Federal Trade Commission’s Updates to the Health Breach Notification Rule Now In Effect.” This piece has drawn attention within the realm of cybersecurity law, particularly regarding the evolving responsibilities of organizations handling sensitive health…
Last week, several personnel reductions at the U.S. Digital Service (USDS) have raised concerns regarding the ongoing cybersecurity initiatives at the Department of Veterans Affairs (VA). High-profile departments such as product management, design, and procurement were notably impacted by these layoffs. Reports indicate that Kamens, a member of the USDS…
Data Breach Notification, Data Privacy, Data Security Ransomware Attack Reveals Critical Vulnerabilities in Healthcare Resilience and Vendor Dependency Marianne Kolbasuk McGee (HealthInfoSec) • February 21, 2025 The February 2024 ransomware attack on Change Healthcare disrupted operations for numerous healthcare providers and affected sensitive health data of 190 million individuals. (Image:…
Analysis of Leaked PINs Reveals Alarming Predictability in User Choices ABC News recently conducted a comprehensive analysis of approximately 29 million leaked four-digit Personal Identification Numbers (PINs) sourced from the well-known database, "Have I Been Pwned?" This repository collects and organizes credentials exposed during various data breaches. The analysis resulted…
Recent cybersecurity research has unveiled significant internal discord within the notorious hacking group known as Black Basta. These findings stem from an analysis of Russian-language communications among the organization members, revealing that tensions have intensified following the arrest of a prominent leader. As internal conflicts grow, the risk of exposing…
Endpoint Detection & Response (EDR), Managed Detection & Response (MDR), Next-Generation Technologies & Secure Development Vendors Consolidate Endpoint, Managed Offerings to Combat Major Industry Players Michael Novinson (MichaelNovinson) • February 21, 2025 Image: Shutterstock The competitive dynamics among Endpoint Detection and Response (EDR) and Managed Detection and Response (MDR) service…
A significant data breach has come to light as recent reports detail TopSec’s involvement in China’s censorship-as-a-service operations. This revelation underscores the alarming capabilities of technology firms in facilitating state-sanctioned repression through digital means. The incident not only raises concerns over the integrity of data security practices but also highlights…
TP-Link, a prominent name in the router manufacturing sector in the United States, is currently under scrutiny that could lead to a potential ban due to concerns regarding its connections to China. According to a December report from a leading news outlet, federal agencies, including the Commerce, Defense, and Justice…
Cybercrime, Fraud Management & Cybercrime, Incident & Breach Response Also: Lee Enterprises Recovering From Ransomware Attack, Ivanti POC Released Anviksha More (@AnvikshaMore) • February 20, 2025 Image: Shutterstock / ISMG This week, ISMG provides a summary of notable cybersecurity incidents globally, highlighting an FBI warning regarding Ghost ransomware, Google addressing…