Legal
Legal | News, how-tos, features, reviews, and videos
Facebook agrees to settle class action lawsuit related to Cambridge Analytica data breach
The four-year-old lawsuit claimed Facebook allowed the British political consulting firm access to private data of over 80 million users.
3 ways China's access to TikTok data is a security risk
The security community weighs in on real-world scenarios in which China or other nations could operationalize data collected by online platforms and how to mitigate the risk.
China's cyber espionage focus: intellectual property theft
The recently uncovered Operation CuckooBees campaign shows how serious China is about using IP theft as a competitive advantage. Protect IP now or chase it later.
![CSO: Have you met these hackers? [slide 04]](https://images.idgesg.net/images/article/2018/04/cso_ss_hacker_types_slide_04_spy_by_david_sinclair_cc0_via_unsplash__binary_code_by_gettyimages_petmal-100755728-small.3x2.jpg?auto=webp&quality=85,70)
Chinese APT group Winnti stole trade secrets in years-long undetected campaign
The Operation CuckooBees campaign used zero-day exploits to compromise networks and leveraged Windows' Common Log File System to avoid detection.
Cybersecurity litigation risks: 4 top concerns for CISOs
Cybersecurity and data protection are expected to become top drivers of legal disputes. What litigation risks should CISOs be most concerned about and what can they do about it?
JHL Biotech's theft of Genentech data holds lessons for infosec
Genentech employees stole the company's data on behalf of JHL Biotech for years. What could they have done to spot the theft sooner?
New insider threat: Bad business decisions that put IP at risk
The U.S. FTC forced Weight Watchers to destroy algorithms after it violated privacy laws, giving CISOs another worry over protecting intellectual property.
Webroot files patent infringement claim against Trend Micro
The lawsuit accuses Trend Micro of using Webroot's patented malware detection, network security, and endpoint protection technologies without authorization.
Motorola case shows importance of detecting insider IP theft quickly
Departing Motorola employees took thousands of documents with them in 2008 when they were hired by a competitor, but it wasn't discovered until 2017.
NCSC warns industry, academia of foreign threats to their intellectual property
Russia and China continue to engage in IP theft to bolster their defense technology and economic standing, respectively. The National Counterintelligence and Security Center urges action.
Proofpoint lawsuits underscore risk of employee offboarding
Nearly every employee leaving a company takes data or intellectual property, but few companies adequately screen and monitor for it. Recent court cases underscore the risk.
China theft of US agriculture sector trade secrets prompts government guidance
China and other countries have used insiders to steal intellectual property from agricultural research. The government has responded with guidance for identifying insider threats.
Intellectual property protection: 10 tips to keep IP safe
Your company's intellectual property, whether that's patents, trade secrets or just employee know-how, may be more valuable than its physical assets. This primer covers everything from establishing basic policies and procedures for IP...
7 steps to protect against ransomware-related lawsuits
How a CISO prepares for and responds to a ransomware attack can have huge consequences should customers or partners decide to sue.
Previously undocumented backdoor targets Microsoft’s Equation Editor
RoyalRoad backdoor delivered via spear phishing was identified in an attack on a Russian-based defense contractor.
Tech Primer
What it takes to become an information assurance analyst
This in-demand role calls for a rare combination of superior communication skills and security chops. Learn how one information assurance analyst landed his current job, the skills and training that helped him get there, and where his...
Tech Primer
Fraud prevention: Improving internal controls
Internal fraud controls aren't fire-and-forget. Smart collaboration and ongoing improvement will help keep fraud in check. Here are the basics.
Tech Primer
How to write an information security policy
Learn the critical first step, why consensus is key, what to cover and how make your information security policy — and program — effective.