Legal

Legal | News, how-tos, features, reviews, and videos

4 ways to safeguard CISO communications from legal liabilities

The SEC’s lawsuit against SolarWinds’ CISO highlights the legal liabilities CISOs can face when communicating. Here are four ways CISOs can avoid the pitfalls.

By Cynthia Brumfield

May 20, 2025 9 mins

CSO and CISO Laws and Regulations Legal

CISOs: Stop trying to do the lawyer’s job

CISOs are trained to fix problems. Lawyers are trained to find them. The two must work together to address complex challenges like breaches, compliance, or the ethics of emerging technologies.

By Andrada Fiscutean

Feb 10, 2025 11 mins

CSO and CISO Compliance Legal

DOJ indicts North Korean conspirators for remote IT work scheme

A new indictment accuses two North Koreans and three North Americans of fraud and conspiracy to obtain remote IT work with US companies to bypass sanctions.

By Jon Gold

Jan 24, 2025 2 mins

Cybercrime Fraud Legal

Microsoft sues overseas threat actor group over abuse of OpenAI service

Civil suit accuses unknown hackers of misusing OpenAI to provide a hacking-as-a-service offering.

By Jon Gold

Jan 13, 2025 4 mins

Legal Malware

US sanctions Chinese cybersecurity firm over global malware campaign

Sichuan Silence and employee accused of exploiting firewall vulnerabilities in 2020.

By Gyana Swain

Dec 10, 2024 6 mins

Hacking Legal Vulnerabilities

US may plan legislation to contain Chinese cyber espionage

A classified briefing has revealed a sweeping espionage campaign stealing call data, sparking calls for action against Chinese cyber activities.

By Gyana Swain

Dec 5, 2024 4 mins

Cyberattacks Hacking Laws and Regulations

Five-country attack on cybercrooks welcomed by security expert

Arrest of 41 suspects more important than takedown of 22,000 malicious IP addresses, he argues.

By Howard Solomon

Nov 6, 2024 6 mins

Cybercrime Legal

Delta gets serious and sues CrowdStrike

After CrowdStrike’s software glitch caused massive cancellations and delays in air traffic worldwide, the US airline is now going to court.

By Tristan Fincken

Oct 28, 2024 2 mins

Legal Security

Do the Marriott cybersecurity settlements send the wrong message to CISOs, CFOs?

To partially close the loop on the fallout from three major data breaches between 2014 and 2020 impacting more than 344 million customers, Marriott has settled both with the Federal Trade Commission and almost every American state. But the terms of t

By Evan Schuman

Oct 10, 2024 10 mins

Cyberattacks Data Breach Legal

CrowdStrike failure: the beginning of the end of software without guarantees?

CrowdStrike’s crash-inducing security software update raises concerns about suppliers’ responsibility to offer quality guarantees for their products.

By Francisca Domínguez Zubicoa

Aug 1, 2024 8 mins

Legal Security Software