A US court has indicted a man arrested earlier this year on suspicion of being an administrator of stolen data marketplace BreachForum, while on Monday French police arrested four others suspected of running the site.

By Shweta Sharma

Jun 26, 2025 4 mins

Data BreachHackingLegal

4 ways to safeguard CISO communications from legal liabilities

The SEC’s lawsuit against SolarWinds’ CISO highlights the legal liabilities CISOs can face when communicating. Here are four ways CISOs can avoid the pitfalls.

By Cynthia Brumfield

May 20, 2025 9 mins

CSO and CISOLaws and RegulationsLegal

CISOs: Stop trying to do the lawyer’s job

CISOs are trained to fix problems. Lawyers are trained to find them. The two must work together to address complex challenges like breaches, compliance, or the ethics of emerging technologies.

By Andrada Fiscutean

Feb 10, 2025 11 mins

CSO and CISOComplianceLegal

DOJ indicts North Korean conspirators for remote IT work scheme

A new indictment accuses two North Koreans and three North Americans of fraud and conspiracy to obtain remote IT work with US companies to bypass sanctions.

By Jon Gold

Jan 24, 2025 2 mins

CybercrimeFraudLegal

Microsoft sues overseas threat actor group over abuse of OpenAI service

Civil suit accuses unknown hackers of misusing OpenAI to provide a hacking-as-a-service offering.

By Jon Gold

Jan 13, 2025 4 mins

LegalMalware

US sanctions Chinese cybersecurity firm over global malware campaign

Sichuan Silence and employee accused of exploiting firewall vulnerabilities in 2020.

By Gyana Swain

Dec 10, 2024 6 mins

HackingLegalVulnerabilities

US may plan legislation to contain Chinese cyber espionage

A classified briefing has revealed a sweeping espionage campaign stealing call data, sparking calls for action against Chinese cyber activities.

By Gyana Swain

Dec 5, 2024 4 mins

CyberattacksHackingLaws and Regulations

Five-country attack on cybercrooks welcomed by security expert

Arrest of 41 suspects more important than takedown of 22,000 malicious IP addresses, he argues.

By Howard Solomon

Nov 6, 2024 6 mins

CybercrimeLegal

Delta gets serious and sues CrowdStrike

After CrowdStrike’s software glitch caused massive cancellations and delays in air traffic worldwide, the US airline is now going to court.

By Tristan Fincken

Oct 28, 2024 2 mins

LegalSecurity

Do the Marriott cybersecurity settlements send the wrong message to CISOs, CFOs?

To partially close the loop on the fallout from three major data breaches between 2014 and 2020 impacting more than 344 million customers, Marriott has settled both with the Federal Trade Commission and almost every American state. But the terms of the settlements are worrying some cybersecurity executives.

By Evan Schuman

Oct 10, 2024 10 mins

CyberattacksData BreachLegal

CrowdStrike failure: the beginning of the end of software without guarantees?

CrowdStrike’s crash-inducing security software update raises concerns about suppliers’ responsibility to offer quality guarantees for their products.

By Francisca Domínguez Zubicoa

Aug 1, 2024 8 mins

LegalSecurity Software

Federal judge greenlights securities fraud charges against SolarWinds and its CISO

Although the court dismissed most of the SEC’s charges in its lawsuit against SolarWinds, the by far most serious charge – securities fraud by both the company and its CISO – survived. CISOs have little reason to celebrate.

By Evan Schuman

Jul 19, 2024 6 mins

CSO and CISOLegalVulnerabilities

View all

LinkedIn fights for the right to tell customers when the feds want their data

What the 3M ChatGPT case reveals about AI governance

What you say during a cyber breach can — and will — be used against you

Fired employee sought AI help to hide deletion of hosting firm’s customer data

A core infrastructure engineer pleads guilty to federal charges in insider attack

US authorities punish sellers of malware and spyware

Google fears massive attempt to clone Gemini AI through model extraction

Google asks US court to shut down Lighthouse phishing-as-a-service operation

US Appeals Court lowers burden of proof for data breach lawsuits

Articles

US indicts one for role in BreachForums, France arrests four others