Featured posts on the ComplexDiscovery blog designed to provide information and insight on cybersecurity areas of interest for data and legal discovery professionals.
Six days before the Cyber Resilience Act's 24-hour reporting duty attaches, ENISA's single reporting platform has no published address, no machine interface at launch and no voluntary reporting through it.…
Berlin refused an extortion demand on Aug. 28, and a ransomware crew posted an auction afterward. If the files publish, U.S. counsel will find that Model Rule 4.4(b) covers only…
NIST's draft AI quick-start guide shows organizations how to turn policy documents and personnel interview notes into a draft CSF profile, with comments due Oct. 15. Its controls are real,…
A cyberattack forced a small British generator offline for four days in July, and whether any mandatory notification was owed turns on two separate tests, neither of which can be…
A memorandum signed Aug. 12 orders the government to build a program admitting vetted private companies to hack foreign criminal networks. It names the federal computer-fraud statute as a boundary…
Read the recent AI evaluation disclosures involving four labs as one repeated failure and you get it wrong. A novel exploit, a misconfiguration and a leaky allowlist are different problems,…
Scenario 36 of the Cyber Law Toolkit follows a volunteer hacker collective through DDoS, wiper and phone-tracking operations against an enemy state, and maps when specific conduct can cost civilian…
Beijing-side pushback on the House Salt Typhoon report arrived within a day, aimed at its evidence and its politics. The report itself asks Congress for codified FCC authority, expanded rip-and-replace…
Federal water sector alerts tell utilities to inspect compromised PLC environments and restore safely. They leave the authority, method and sequence for preserving potentially relevant controller evidence largely to local…
Sixty-eight percent of breached organizations had no AI governance policy in place, and five of the six governance controls measured in both years lost adoption. The composition behind that headline…
