Accurate, Focused Research on Law, Technology and Knowledge Discovery Since 2002

Category Archives: Cybersecurity

Colonial Pipeline: The DarkSide Strikes

CRS Insight – Colonial Pipeline: The DarkSide Strikes, May 11, 2021: “On May 8, 2021,the Colonial Pipeline Company announced that it had halted its pipeline operations due to a ransomware attack, disrupting critical supplies of gasoline and other refined products throughout the East Coast. This attack was similar to an earlier pipeline ransomware attack in 2020, which also resulted in a pipeline shutdown. In 2018, cyberattacks reportedly disrupted the customer communications systems (but not pipeline operations) at four of the nation’s largest natural gas pipeline companies. The possibility of lengthy pipeline disruptions was raised in 2019 congressional testimony by then-Director of National Intelligence, who singled out pipelines as critical infrastructure vulnerable to cyberattacks that could cause shutdowns “for days to weeks.” The Colonial Pipeline cyberattack has elevated concern in Congress about the security of the nation’s energy pipelines and government programs to protect critical infrastructure…”

How a ransomware attack shut down a major US fuel pipeline

Popular Science: “The network carries petroleum products like gasoline and aviation fuel. Here’s what to know. A surefire way to appreciate the importance of a key piece of infrastructure is to watch what happens when it unexpectedly stops working. For example, most people probably thought very little about the importance of the Suez Canal, but… Continue Reading

HP Wolf Security – New Report Assessing Remote Working Cyber Risks

HP – “Today we are excited to announce the findings of a new report – Blurred Lines & Blindspots – a comprehensive global study assessing organizational cyber risk in an era of remote work. The report shows that changing work styles and behaviors are creating new vulnerabilities for companies, individuals, and their data. According to… Continue Reading

There’s a better way to protect yourself from hackers and identity thieves

recode – “If you’re using texts for two-factor authentication, it’s time to change to an app. Here’s what you need to know. When people ask me for security tips, I give them the basics. One is a strong and long password with upper and lower case letters, numbers, and special characters. (No, “Passw0rd!” is not… Continue Reading

Google will automatically enroll users in two-factor authentication soon

PCWorld – “Most security experts agree that two-factor authentication (2FA) is a critical part of securing your online accounts. Google agrees, but it’s taking an extra step: It’s going to automatically sign Google account holders up for two-factor accounts. In a way, Google sees two-factor authentication as a replacement for passwords, which Mark Risher, Google’s… Continue Reading

How one phony vaccine website tried to capture your personal information

Tech Republic – “In a news release published Monday, the U.S. Attorney’s Office for the District of Maryland revealed that it had seized a website called freevaccinecovax.org. Allegedly the site of a real biotechnology firm developing a COVID-19 vaccine, it was actually set up to collect personal data from visitors and use that information for… Continue Reading

Cybersecurity for Idiots

Bambauer, Derek E., Cybersecurity for Idiots (March 18, 2021). 106 Minnesota Law Review Headnotes __ (2021 Forthcoming), Arizona Legal Studies Discussion Paper No. 21-04, Available at SSRN: https://ssrn.com/abstract=3807529 “Cybersecurity remains a critical issue facing regulators, particularly with the advent of the Internet of Things. General-purpose security regulators such as the Federal Trade Commission continually struggle… Continue Reading

Pete Recommends – Weekly highlights on cyber security issues, May 2, 2021

Via LLRX – Pete Recommends – Weekly highlights on cyber security issues, May 2, 2021 – Privacy and security issues impact every aspect of our lives – home, work, travel, education, health and medical records – to name but a few. On a weekly basis Pete Weiss highlights articles and information that focus on the… Continue Reading

How we fought Search spam on Google in 2020

Google Search Central: “…Hacked spam was still rampant in 2020 as the number of vulnerable web sites remained quite large, although we have improved our detection capability by more than 50% and removed most of the hacked spam from search results….Before we deliver a set of search results on Google, there’s a lot that happens… Continue Reading

Ransomeware Task Force Launches Comprehensive Framework to Combat Ransomware

Institute for Security and Technology – A Comprehensive Framework for Action: “Ransomware is no longer just a financial crime; it is an urgent national security risk that threatens schools, hospitals, businesses, and governments across the globe. This is not a problem that any one entity can solve. Over 60 experts from industry, government, law enforcement,… Continue Reading