Security News for the Week Ending December 15, 2023
Joe Sullivan, Convicted Former Uber CISO, Speaks Out
Sullivan spoke at Black Hat Europe. Unfortunately, he did not say much directly about the case because he is appealing it, but he did have some interesting thoughts about where CISOs are headed and what you should or should not do. I didn’t know this but he is a former federal prosecutor, so he should have known that lying to the feds was not a great plan. One thing he said that rings true is that CISOs have the title but don’t have any authority to do much of anything. Credit: Data Breach Today
FCC Updates Telco Breach Notification Rules
New rules, which only apply, for now, to telephone companies and not Internet providers, require telcos to notify customers of a breach within seven business days (around two weeks with weekends) for breaches affecting more than 500 people and covers all customer information the carrier has, even for inadvertent disclosures. Some republicans in Congress may try to overturn this because they don’t think that phone companies should be required to quickly let you know if your information has been breached. Credit: Data Breach Today
Harry Coker Confirmed as National Cyber Director
Chris Inglis, the first and only National Cyber Director stepped down in February. Now, almost a year later, the Senate confirmed Harry Coker who was a former executive director of the NSA and also a leader at the CIA. Reports are that he is an extremely competent person. Credit: Security Week
In Case You Were Wondering – It Takes a Long Time to Recover From Ransomware
The Kansas Court System in over 100 counties was taken down by a cyberattack in mid-October. Two months later, the case management system for only 28 of the state’s 105 counties will, hopefully, be online on Monday. Online access for the public will come later. So will many other court systems. The seven justices of the Kansas Supreme court say that the attack was sophisticated. Good to know. The case management system is just step one. If you are the Kansas Supreme Court, you can shut down the court systems statewide for months. How would that work for your business? Better to be prepared. Credit: Security Week
Utah Supreme Court Says Suspects Do Not Have to Tell Cops Their Password
The Utah Supreme Court said this week that a defendant does not have to reveal the passcode to his phone even though the police wanted him to. The Supremes said that was protected under the Fifth Amendment to the U.S. Constitution. This case could make it up to the U.S. Supreme Court as there currently is a circuit split – Indiana and Pennsylvania agree with Utah; New Jersey, Massachusetts and Illinois disagreed. This does not mean that the defendant is a good person or innocent, but the trial court telling jurors that they should infer something (like guilt) because he would not disclose his password was improper. Credit: The Record
by 