Cybersecurity
DLA Piper Victim of Massive Malware Attack
News
The Petya virus has been spreading, locking companies out of their networks and demanding a ransom in cryptocurrency to unlock them, reports Bloomberg Law.
GC Requires Outside Law Firms to Encrypt Communications

News
Marsh & McLennan Companies’ GC now requires the company’s biggest outside law firms to use an anti-hacking electronic communication technology known as Transport Layer Security, according to a report from Bloomberg Law.
D&O Insurance in a Time of Technological and Enforcement Uncertainty
Event
Anderson Kill’s 15th Annual D&O Conference addresses the interplay of D&O insurance with other insurance policies in cyber claims, including crime insurance, property insurance, GL coverage, and cyber specialty insurance policies. In addition, a panel of D&O insurance brokers will review major emerging D&O risks.
Invitation: Summer Legal Conference, Berlin

Event, July 23-29, 2017
The CLE-qualified sessions will feature a diverse group of speakers, including a broad range of nationalities, backgrounds and ages, according to Knowledge Nomads.
Law Firm Sues Insurer Over $700K in Lost Billings Due to Ransomware Attack

News
The suit says the infection disabled the law firm’s computer network, meaning lawyers and staffers “were rendered essentially unproductive.”
Hackers Face $8.9 Million Fine for Law Firm Breaches
News
Three Chinese stock traders were ordered to pay $8.9 million in fines and penalties for hacking into two law firms and stealing information on upcoming mergers and acquisitions and then leveraging the information to trade stocks.
On-Demand: Before You Outsource, Protect Your IP & Mitigate Open Source Risks

On-Demand
Black Duck Software has posted a complimentary on-demand webinar discussing ways organizations can outsource to meet their development needs and also address open source security and management risks before giving contractors access to their valuable technologies.
Connected Product Intensive: Regulatory Compliance and Risk Management Roundtable

Event, May 2-3, 2017, San Francisco
Keller and Heckman will produce a new seminar, “The Connected Product Intensive: A Framework for Regulatory Compliance and Risk Management,” May 2-3, 2017 in San Francisco, CA.
The Case for Continuous Open Source Management

Event, March 22, 11 a.m. EDT
Speakers from Black Duck Software and Wolters Kluwer will be presenters in a webinar addressing key open source security and management questions.
Is Your Board Prepared to Oversee Cyber Risk?

Insight
The book is constructed around five core principles designed to enhance the cyber literacy and cyber-risk oversight capabilities of directors of organizations of all sizes and in all industries, according to NACD.
Five Tips for Addressing Information Security in Service Contracts

Insight
The risks associated with sharing data with a service provider are best managed through the utilization of contract provisions governing information security, writes Armand J. (A.J.) Zottola in Venable LLP’s Digital Rights Review.
Data Breach Trends and Tips: What State and Local Government Lawyers Need to Know

Event, Jan. 12, 2017, 1 p.m. EST
Many state and local governments still don’t believe that data breaches and other cyber events can happen to them, while others simply don’t know what to do.
New Research Reveals: Phishers Launch a New Attack Every 30 Seconds

Insight
The total cost to global organizations from phishing is $9.1 billion, according to a report by RSA.
China Stole Data From Major U.S. Law Firms

News
The practice areas of victims include mergers and acquisitions and intellectual property, suggesting the goal of the email theft may indeed have been economic in nature, reports Fortune.
New e-Posting Regulations, Featuring Locke Lord LLP – Webcast

Event, Dec. 13, 2 p.m. EST
Intended to improve the process of buying insurance for consumers, there have been recent updates to laws that allow insurance companies to post policies, forms, and endorsements on a website rather than printing these documents on paper.
Cybersecurity Attorney, Former Texas Chief Information Security Officer Joins Gardere

News
Information security expert Edward H. Block has joined Gardere Wynne Sewell LLP as a senior attorney in its Austin office.
NY AG Warns Law Firms About Phishing Scam

News
The goal of such emails is to trigger the recipient to click a link or open an attachment through which the hacker can gain access to the server, according to a Bloomberg Law report.
FinCEN Issues Guidance on Cybersecurity

Insight
More guidance on cybersecurity requirements is available, this time an advisory from FinCEN to help financial institutions on their Bank Secrecy Act (BSA) obligations regarding cyber-events and cyber-enabled crime.
Thomson Reuters, Pillsbury, FireEye Align to Provide Cybersecurity Compliance Program
News
The companies said this alliance affords institutions expertise and resources from a holistic, multi-pronged approach to cybersecurity risk assessment and due diligence that combines legal counsel, technical assessments and legal managed services to help meet a variety of internal, external and regulatory standards.
Five Questions GC Should Ask About Privacy and Cybersecurity in Third-Party Contracts

Insight
In an article posted on Mayer Brown’s website, authors Rebecca S. Eisner, Lei Shen and Lindsay T. Brown discuss five privacy- and security-related questions that a general counsel should ask regarding company data in the hands of third-party suppliers and other business partners.