Twitter Data Breach Nightmare – Millions of Subscriber’s Data Remains at Risk

December 1, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: Hackers cannot be underestimated, and companies need to take cybersecurity policy seriously. Earlier this year, a massive Twitter data breach occurred. Researchers are learning that the data breach was significantly more severe than initially reported. In the first reports, one hacker was suspected of exploiting a vulnerability within the... Read More

Cybersecurity Insurance: Circuit Courts Weigh in on Insurers’ Liability for an Insured’s Losses Stemming from a Data Breach

November 8, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Quintin DiLucente

Takeaway: When a cybersecurity-related incident occurs, an insured should not automatically assume a standard commercial general liability (CGL) policy issued by an insurer will cover their losses, as CGL policies generally afford coverage to an insured for losses resulting from bodily injury and property damage. An insured’s cybersecurity losses can... Read More

Labeling Devices for Cybersecurity Protection

October 21, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: Security labels on internet-connected devices are on the horizon for companies that manufacture and want to sell such devices worldwide. Last week, the White House National Security Council announced plans for a consumer products cybersecurity labeling program aimed at improving digital safeguards on internet-connected devices. On October 19, 2022,... Read More

CISA Announces New Binding Operational Directive to Manage Federal Civilian Agency Threats

October 6, 2022

Blog, Cyber Security, Insights & Impact Business Blog, The Privacy Hacks

By:

Takeaway: The latest directive from CISA will enhance federal agencies’ ability to identify vulnerabilities in their networks to prevent and respond to cybersecurity incidents. On October 3, 2022 the Cybersecurity and Infrastructure Security Agency (CISA) announced Binding Operational Directive (BOD) 23-01 entitled Improving Asset Visibility and Vulnerability Detection on Federal... Read More

Requirements of Cybersecurity Expert Testimony in the Third Circuit

September 14, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono , Quintin DiLucente

Takeaway: In many data breach cases, a cybersecurity expert may evaluate whether the company’s security measures were reasonable and appropriate or, alternatively, if the company lacked the requisite technology to detect a breach. In some circumstances, however, a party’s proposed expert may be challenged on the basis of unfair prejudice.... Read More

Bad Actors Continue to Exploit Log4Shell Vulnerabilities

September 7, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: CISA and CGYBER recommend all organizations who did not immediately apply available patches to assume Log4Shell compromise and initiate threat hunting activities. In December 2021, the world was held hostage by hackers who found certain vulnerabilities in Log4Shell and exploited them. As part of this exploitation, suspected and advanced... Read More

Decoding the Recent Apple Security Updates

August 24, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: The recent vulnerabilities in Apple software has exemplified the importance of patch management and keeping devices up to date with the latest operating systems and software in order to protect the security of devices. The recent data breach reported by Apple, Inc. (“Apple”) has once again brought global attention... Read More

What Practices Should a Small Vendor Consider When Applying for Cyber Insurance

August 16, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: As cybersecurity risk increases, large enterprises and government agencies are, increasingly, forcing smaller vendor companies to obtain cyber insurance to help manage the risk of a data breach. To prepare for an annual cybersecurity insurance renewal or initial application, consider the following practices which could help address the risks... Read More

Governor Wolf Signs Bill to Aid Pennsylvania State and Local Government in Fighting Cybercrime

August 9, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: Governor Wolf signed a bill that authorizes the governor to order the Pennsylvania National Guard to assist local governments and private entities with cybersecurity support, training, and more. On July 7, 2022, Governor Wolf approved House Bill 2412, which authorizes the governor additional powers under Title 51 to order... Read More

Contractors Beware – Cybersecurity Litigation on the Rise Under the False Claims Act

August 4, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Quintin DiLucente

Takeaway: The DOJ’s Cyber Fraud Initiative and qui tam actions under the False Claims Act represent signification enforcement mechanisms for cybersecurity contractor compliance. On the eve of 2022, the United States began imposing new, punitive cybersecurity measures aimed at making the internet a safer platform for businesses to share and... Read More