Bad Actors Continue to Exploit Log4Shell Vulnerabilities

September 7, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: CISA and CGYBER recommend all organizations who did not immediately apply available patches to assume Log4Shell compromise and initiate threat hunting activities. In December 2021, the world was held hostage by hackers who found certain vulnerabilities in Log4Shell and exploited them. As part of this exploitation, suspected and advanced... Read More

Decoding the Recent Apple Security Updates

August 24, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: The recent vulnerabilities in Apple software has exemplified the importance of patch management and keeping devices up to date with the latest operating systems and software in order to protect the security of devices. The recent data breach reported by Apple, Inc. (“Apple”) has once again brought global attention... Read More

What Practices Should a Small Vendor Consider When Applying for Cyber Insurance

August 16, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: As cybersecurity risk increases, large enterprises and government agencies are, increasingly, forcing smaller vendor companies to obtain cyber insurance to help manage the risk of a data breach. To prepare for an annual cybersecurity insurance renewal or initial application, consider the following practices which could help address the risks... Read More

Governor Wolf Signs Bill to Aid Pennsylvania State and Local Government in Fighting Cybercrime

August 9, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: Governor Wolf signed a bill that authorizes the governor to order the Pennsylvania National Guard to assist local governments and private entities with cybersecurity support, training, and more. On July 7, 2022, Governor Wolf approved House Bill 2412, which authorizes the governor additional powers under Title 51 to order... Read More

Contractors Beware – Cybersecurity Litigation on the Rise Under the False Claims Act

August 4, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: The DOJ’s Cyber Fraud Initiative and qui tam actions under the False Claims Act represent signification enforcement mechanisms for cybersecurity contractor compliance. On the eve of 2022, the United States began imposing new, punitive cybersecurity measures aimed at making the internet a safer platform for businesses to share and... Read More

Hacking Your Health: Can Your Electronic Health Record be Hacked?

July 29, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: With ransomware attacks increasing over the past few years, healthcare organizations can expect hackers to make ransom demands while holding their computer systems hostage. Everything comes back in style. In the 90s, computer hackers learned how to infiltrate networks, hold them hostage, and demand payment to make them functional... Read More

Italy Becomes Latest Country to Pass Sunshine Act

July 20, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By:

Takeaway: Although the enactment of the Italian Sunshine Act furthers the global expansion of healthcare transparency, the implied consent provision may not comply with the GDPR. I. Overview and Requirements of the New Italian Sunshine Act Law n. 62 of May 31, 2022[1], or the Italian Sunshine Act, took effect... Read More

President Biden Signs Two Cybersecurity Bills into Law

June 30, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

Takeaway: President Biden recently signed into law the “Federal Rotation Cyber Workforce Program Act” and the “State and Local Government Cybersecurity Act”. With these new laws, the Biden Administration is attempting to build a more robust cybersecurity workforce and aid local governments in combating cybercrime. On June 21, 2022, President... Read More

What Constitutes a Misleading Statement in a Company’s Response to a Data Breach?

June 27, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: To ensure investor safety and emphasize a commitment to user privacy, corporate executives and similarly-situated high ranking officers must not provide any statements or omissions that affirmatively create a misleading impression of the current “state of affairs that differed in a material way from the one that actually existed.”... Read More

DOJ Clarifies Policy for Prosecutions Under the Computer Fraud and Abuse Act

June 17, 2022

Blog, Insights & Impact Business Blog, The Privacy Hacks

By: Christopher A. Iacono

Takeaway: The DOJ’s recent revisions to their internal policy promote the Department’s goals that the CFAA is applied consistently by government attorneys and better understood by the public. These goals ensure that the law adequately responds to evolving cybersecurity and privacy challenges. On May 19, 2022 the Department of Justice... Read More