Securities and Exchange Commission

Judge Dismisses Most SEC Charges Against SolarWinds
Jeffrey Burt | | Securities and Exchange Commission, software supply chain attack, SolarWinds, Sunburst malware
A federal district court judge blew a hole in the SEC's case against SolarWinds, saying that while the company and its CISO could be tried for statements made before the high-profile Sunburst ...
Security Boulevard

23andMe Finally Admits: 6.9 MILLION Users’ PII Breached
Richi Jennings | | 23andMe, Compromised Credential, compromised credentials, compromised credentials monitoring, Credential Compromise, credential replay attacks, credential reuse, credential stuffing, credential stuffing attack, Credential Stuffing Attacks, DEVOPS, DevSecOps, DNA, GDPR, iam, password reuse, pii, PII Leakage, SB Blogwatch, SEC, Securities and Exchange Commission, Securities Exchange Commission (SEC), U.S. Securities and Exchange Commission
Not nice: Hacker claimed 20 million, 23andMe said it was only 14,000—but now admits to 6.9 million ...
Security Boulevard

SolarWinds CISO Sued for Fraud by US SEC
Richi Jennings | | CISO, CISO duties, CISO Incompetency, CISO reporting structure, SB Blogwatch, SEC, Securities and Exchange Commission, SolarWinds, SolarWinds Orion Supply Chain, SolarWinds Vulnerability, solarwinds123, SolarWindsOrion, Sudhakar Ramakrishna, SUNBURST, Sunburst malware, Sunburst Vuln, Timothy Brown, U.S. Securities and Exchange Commission
The password was ‘solarwinds123’: SUNBURST still reverberates as SolarWinds CISO Timothy Brown co-defends SEC lawsuit ...
Security Boulevard

SEC is Investigating Progress Software in Wake of MOVEit Attacks
Progress Software is now adding an investigation by the U.S. Securities and Exchange Commission to its growing list of legal and financial headaches stemming from the massive hack of its MOVEit file ...
Security Boulevard

Feds Point to Escalated Ransomware Attacks on Financial Institutions, Offer Guidance Based on Success Stories
Filip Truta | | Fed, Feds, Finance, financial institutions, Financial Services, Industry News, OCIE, Ransomware, SEC, Securities and Exchange Commission
The U.S. Security and Exchange Commission’s (SEC’s) Office of Compliance Inspections and Examinations (OCIE) has issued an alert warning of an escalated number of ransomware attacks on financial institutions. The office details ...

Gambling Firm Anticipates Spending up to $100 Million in Recovery from Cyber Incident
Filip Truta | | gambling, Industry News, MA, merger, mergers and acquisitions, Ransomware, SBTech, SEC, Securities and Exchange Commission
SBTech, a provider of interactive sports betting solutions and services, has set aside up to $100 million to fix a mess left when a cybersecurity incident hit right in the midst of ...

Rating: How Current Cybersecurity Issues Can Affect Future Profitability
Jody Paterson | | credit rating, cyber-risk, cyberattack, downgrade, Equifax, Moody's, outlook, profitability, SEC, Securities and Exchange Commission
Fallout from Equifax’s 2017 data breach continues to impact the company even years later. Moody’s Investor Service, a bond credit rating business, lowered Equifax’s rating outlook from stable to negative, which indicates ...
Security Boulevard

Cisco Patches Critical Flaws in Elastic Services Controller and UCDM
Lucian Constantin | | Cisco Systems, critical vulnerability, cybersecurity investigation, insider trading, Securities and Exchange Commission
Cisco Systems has released security updates for its Unified Communications Domain Manager (UCDM) and Elastic Services Controller (ESC) products to address critical vulnerabilities. The vulnerability fixed in UCDM, which is used for ...
Security Boulevard

Sophisticated Malware Attack Launched via Fake SEC Emails
Lucian Constantin | | DNSMessenger, electric grid, energy companies, Malware, North Korea, Phishing, powershell, Securities and Exchange Commission
Researchers have detected a targeted attack that uses a combination of novel techniques to deploy PowerShell malware. The infection starts with malicious documents distributed through phishing emails that masquerade as messages from ...

CCleaner Supply Chain Attack Targeted Technology Companies
Lucian Constantin | | Axiom, backdoor, CCleaner, cyberespionage, Data breach, insider trading, Joomla, Securities and Exchange Commission, supply chain attack, web application vulnerability
New evidence shows the hackers who infected the installers for the popular CCleaner system optimization tool were primarily targeting the program’s business users. There are also links between the malware code and ...