Featured posts on the ComplexDiscovery blog designed to provide information and insight on cybersecurity areas of interest for data and legal discovery professionals.
A memorandum signed Aug. 12 orders the government to build a program admitting vetted private companies to hack foreign criminal networks. It names the federal computer-fraud statute as a boundary…
Read the recent AI evaluation disclosures involving four labs as one repeated failure and you get it wrong. A novel exploit, a misconfiguration and a leaky allowlist are different problems,…
Scenario 36 of the Cyber Law Toolkit follows a volunteer hacker collective through DDoS, wiper and phone-tracking operations against an enemy state, and maps when specific conduct can cost civilian…
Beijing-side pushback on the House Salt Typhoon report arrived within a day, aimed at its evidence and its politics. The report itself asks Congress for codified FCC authority, expanded rip-and-replace…
Federal water sector alerts tell utilities to inspect compromised PLC environments and restore safely. They leave the authority, method and sequence for preserving potentially relevant controller evidence largely to local…
Sixty-eight percent of breached organizations had no AI governance policy in place, and five of the six governance controls measured in both years lost adoption. The composition behind that headline…
ShinyHunters told Ernst & Young to make contact by July 31 or see allegedly stolen client tax data released. The confirmed breach ran through a third-party ITSM platform, and litigation…
CISA and Australia's cyber agency, with the FBI and international partners, published CI Fortify guidance on July 28, urging critical infrastructure operators to pre-engineer and test the severing of OT…
Stadler Rail turned down a 10 million Swiss franc extortion demand after attackers used stolen credentials to reach a data-exchange platform it uses with a supplier. The refusal was clean;…
Exploitation of four SharePoint Server flaws has included theft of the machine keys that let attackers return after patching. With a federal deadline landing today and support for two versions…
