(kolderal/Getty Images) Judge dismisses much of SEC suit against SolarWinds over cybersecurity disclosures The groundbreaking lawsuit’s claims about inadequate disclosures related to the historic Sunburst attack were thrown out Thursday. Jul 18, 2024 By Tim Starks
Brad Smith, Vice Chairman and President of Microsoft, testifies about Microsoft’s cybersecurity work during a House Committee on Homeland Security hearing. (Photo by SAUL LOEB / AFP) Lawmakers question Microsoft president over China ties, repeated breaches Brad Smith defended the company at a time of growing concerns about whether the tech giant is sufficiently prioritizing security. Jun 13, 2024 By Tim Starks
Cybersecurity and Infrastructure Security Agency Director Jen Easterly testified before a House Homeland Security Subcommittee, at the Rayburn House Office Building on April 28, 2022. (Photo by Kevin Dietsch/Getty Images) CISA emergency directive tells agencies to fix credentials after Microsoft breach CyberScoop first reported on the existence of the directive, which calls the pilfered emails “a grave and unacceptable risk to agencies." Apr 11, 2024 By Tim Starks
The headquarters of the US Securities and Exchange Commission (SEC) is seen in Washington, DC, January 28, 2021. (SAUL LOEB/AFP via Getty Images) SEC sues SolarWinds and CISO for fraud The SEC alleges SolarWinds defrauded investors by failing to disclose gaps in their security practices later exploited by Russian hackers. Oct 31, 2023 By Christian Vasquez
The Microsoft logo is illuminated on a wall during a Microsoft launch event on May 2, 2017 in New York City. (Photo by Drew Angerer/Getty Images) Chinese hacking operation puts Microsoft in the crosshairs over security failures Security deficiencies and business practices have researchers and officials furious at Microsoft for enabling an espionage operation. Jul 14, 2023 By Elias Groll AJ Vicens
The Department of Justice building in Washington, DC, on February 9, 2022. (Photo by STEFANI REYNOLDS/AFP via Getty Images) Federal court system suffered previously undisclosed breach, congressional committee says The breach is separate from the SolarWinds fallout and had not been previously publicly disclosed. Jul 28, 2022 By AJ Vicens
SolarWinds hackers set up phony media outlets to trick targets New infrastructure, old tricks. May 3, 2022 By Tonya Riley
Sens. Gary Peters, D-Mich., and Rob Portman, R-Ohio, speak to Secretary of Homeland Security Alejandro Mayorkas, right, after a Senate Homeland Security and Governmental Affairs hearing Sept. 21, 2021 in Washington, D.C. (Photo by Greg Nash – Pool/Getty Images) The long, bumpy road to cyber incident reporting legislation — and the one still ahead The legislation eventually garnered widespread support on its way to becoming law, but much remains unresolved. Mar 24, 2022 By Tim Starks
Brandon Wales, now-executive director of CISA, greets Sen. Gary Peters, left, at a Senate Homeland Security and Governmental Affairs Committee hearing May 11, 2021. (Photo by Sarah Silbiger-Pool/Getty Images) Proposal for industries to report big cyberattacks, ransomware payments wins Senate approval The measure, under which CISA would handle the incident reporting, must still win House approval. Mar 2, 2022 By Tim Starks
(Photo by SUZANNE CORDEIRO / AFP) (Photo by SUZANNE CORDEIRO/AFP via Getty Images) SolarWinds hackers kept busy in the year since the seminal hack, Mandiant finds The research reveals ongoing efforts by the SolarWinds hackers to steal data and find ways to access additional victims. Dec 6, 2021