New USCG Cybersecurity Rule Targets Maritime Cybersecurity Risks

The U.S. Coast Guard (USCG) issued a final rule on January 17, 2025, to address cybersecurity threats in the Marine Transportation System (MTS). Effective July 16, 2025, the rule establishes new cybersecurity requirements for U.S.-flagged vessels, Outer Continental Shelf facilities, and onshore facilities regulated under the Maritime Transportation Security Act of 2002 (MTSA). (Summary of … Read more

The Beckage Firm Adds Cybersecurity Expert Cristina Di Maria as Partner

The Beckage Firm, a woman- and veteran-owned cybersecurity and data privacy law firm, has named Cristina Di Maria, Esq., CIPP/US, as a partner. Cristina Di Maria Brings Extensive Experience Di Maria has expertise in cyber risk management, data security incidents, risk mitigation, and regulatory compliance. She has managed digital forensic investigations, network restoration, and ransomware … Read more

Capito, Hickenlooper Reintroduce Bipartisan Cyber Insurance Bill for Small Businesses

Senators Shelley Moore Capito (R-W.Va.) and John Hickenlooper (D-Colo.) reintroduced the bipartisan Insure Cybersecurity Act to safeguard small businesses against rising cyber threats. According to Accenture’s Cybercrime study, nearly 43% of cyber-attacks target small businesses, yet only 14% feel adequately prepared despite spending between $826 and $653,587 per incident. As many know, 95% of breaches … Read more

SEC Cyber Incident Disclosures Show Confusion on “Materiality,” Limited Info on Cyber Insurance and Unexpected Whistleblowers

It’s been a year since public companies had to start complying with new SEC cyber incident disclosure rules requiring Form 8-Ks for “material” cyber events. Law firm Paul Hastings has now released a study of 75 disclosures from 45 companies between December 2023 and October 2024. It shows a 60% increase in the number of … Read more

EU Countries Blow Off New Cyber Security Regulations & European Commission Is Not Pleased

The European Commission has launched “infringement procedures” against a majority of its member states for failing to meet an October deadline to enact EU cyber security regulations. The regulations come in two packages: the NIS2 Directive, aimed at enhancing cyber security and the Critical Entities Resilience (CER) Directive, focused on safeguarding critical infrastructure. “The Commission … Read more

×