CISO Intelligence
Source: KnowBe4 Blog · Category: AI Security Deepfake fraud caused $2.19 billion in global losses; $1.65 billion in 2025 alone. Law firms face risk from deepfake video/audio used in business email compromise, client impersonation, and witness/executive intimidation in litigation. Recommend client advisories on deepfake authentication protocols. → Read
CISO Intelligence
Source: The Record · Category: Ransomware & Breach Educational tech company Infrastructure breached; attackers obtained student and user names, email addresses, student ID numbers, and internal messages. If firm represents educational institutions or uses Infrastructure's platform, clients may face breach notification obligations under FERPA (education records) within 60 days
CISO Intelligence
Source: BleepingComputer · Category: Security News — Technology CISA confirmed "Copy Fail" Linux kernel flaw now actively exploited to root systems. Complements article [6]. Law firms running Linux servers face immediate privilege escalation and system compromise. Escalate to infrastructure team for emergency patching. → Read the full article
CISO Intelligence
Source: The Record · Category: Regulatory & Legal Forbes agreed to $10 million California settlement for tracking and data-sharing violations, requiring greater notice and user control over third-party data collection. Law firms must advise clients on California Consumer Privacy Act (CCPA) compliance, user consent requirements, and tracker disclosure obligations. Settlement signals
CISO Intelligence
Source: BleepingComputer · Category: Supply Chain Weaver E-cology office automation tool has critical vulnerability (CVE-2026-22679) actively exploited since March for discovery commands. If firm or clients use Weaver E-cology, attackers can enumerate systems and move laterally. Patch immediately and audit logs for unauthorized access. → Read the full article
CISO Intelligence
Source: Wired Security · Category: Government Advisory DHS used 1930s trade law to demand Google surrender location and activity data on a Canadian citizen based on anti-ICE social media posts, without entering the U.S. in over a decade. This signals aggressive government data demand authority with limited constitutional guardrails. Law
CISO Intelligence
Source: Dark Reading · Category: Threat Actor & Campaign Attackers abusing remote monitoring and management (RMM) tools in phishing campaigns affecting 80+ organizations. RMM tools are widely used by managed service providers supporting law firms. If your MSP or internal IT uses compromised RMM platforms, attackers gain privileged access to firm
CISO Intelligence
Source: Dark Reading · Category: Supply Chain Critical authentication-bypass vulnerability in cPanel exploited in the wild; zero-day activity reported for at least one month. Many law firms use cPanel for email and hosting infrastructure. Immediate patching required to prevent unauthorized access to firm communications and client data. → Read the full article
CISO Intelligence
Source: BleepingComputer · Category: Supply Chain Progress Software warned of critical authentication bypass in MOVEit Automation MFT application. Many law firms use MOVEit for secure file transfer with clients and opposing counsel. Unpatched instances allow attacker access to sensitive documents and privileged communications. Patch immediately. → Read the full article
CISO Intelligence
Source: BleepingComputer · Category: Supply Chain Malicious PyTorch Lightning package on PyPI delivered credential stealer targeting browsers and cloud services. If firm developers or AI teams use PyTorch Lightning, compromised installations expose API keys, cloud credentials, and employee credentials. Audit Python dependencies immediately. → Read the full article
CISO Intelligence
Source: Hackread · Category: Security News — Technology 20-year-old PostgreSQL vulnerabilities (pgcrypto flaws) disclosed at Wiz event. If firm uses PostgreSQL for data systems, immediate patching required to prevent exploitation. → Read the full article
CISO Intelligence
Source: Kaspersky SecureList · Category: Threat Actor & Campaign Attackers exploit Amazon SES (legitimate cloud email service) to bypass email security filters and deliver phishing. Law firms are frequent phishing targets; review email gateway rules to flag SES-origin messages and employee training on service-based phishing. → Read the full article