We talked with some of the leading experts in data breach forensics. Here’s what they told us.  

A Q&A with Chris Salsberry of CrypsisOne of the most prominent cyber threats affecting companies right now is business email compromise (BEC). These attacks typically begin with phishing emails that capture log-in credentials.The widely used cloud-based Microsoft Office 365 has proven especially vulnerable, with millions of dollars lost in fraudulent wire transfers over the past…

A Q&A with Paul Otto of Hogan Lovells Given recent events such as the 2017 WannaCry ransomware attack that affected more than 200,000 computers across 150 countries, concerns about data privacy and medical devices have come to the fore with increased scrutiny from regulators. To understand the risks medical devices pose and how companies are…

A Q&A with Jon Neiditz of Kilpatrick Townsend & Stockton LLP Passed in 2018 and slated to go into effect January 2020, AB 375 or The California Consumer Privacy Act (CCPA) was created to give consumers better ownership and control over their personal data but opens up a world of compliance questions for businesses that…

A Q&A with Andy Sambandam of Clarip Inc. What is arguably the nation’s most far-reaching consumer privacy and security law was passed with lightning speed last week in California. While the law doesn’t go into effect until January, 2020, companies are being advised to get up to date on the new regulation and its stipulations—and…

A Q&A with Wyatt Hoffman of Carnegie Endowment for International Peace As cyber-attacks continue to mount, private organizations are ramping up their security activities, and many wonder whether “active cyber defense” is the answer. Of course, what constitutes “active cyber defense” is an emerging debate for international lawmakers and policy makers, says Carnegie Endowment for…

NetDiligence® Security/Privacy Advisory – June 28th, 2018 California Consumer Privacy Act (2018) Becomes Law; Takes Effect 1/1/2020 This NetDiligence Security/Privacy Advisory is published for the benefit of our cyber insurance carrier/broker clients and their insureds. We urge clients to take special note of the details included in this Advisory and take preventative/remedial action on a…

A Q&A with Michelle Visser of Ropes & Gray LLP The recent ruling that Massachusetts’ Attorney General can move forward with its suit against Equifax portends a new era in data breach litigation and regulation. To find out more about this case and what it means for corporate risk, I spoke with Michelle Visser, a…

A Q&A with Brian Schaeffer of OceanFirst Bank N.A. It’s a given that cyber attackers will target financial institutions but community banks and credit unions may be more vulnerable, with fewer resources to devote to security and the assumption, among perpetrators, that they’re an easier mark. I spoke to Brian Schaeffer, Chief Information Security Officer…

A Q&A with Jim Leonard of InfoArmor One of the newer and potentially more promising weapons being deployed in the battle for cyber security is machine learning, in which systems can improve themselves based on experience and previous data. We asked Jim Leonard, Director with the Advanced Threat Intelligence unit at InfoArmor for some insight…