United States: Cybersecurity

The FAR Council has released an updated draft of the government-wide FAR CUI Rule, proposing new solicitation provisions and contract clauses that would establish uniform requirements for contractors handling Controlled Unclassified Information. This comprehensive framework introduces specific cybersecurity obligations, incident reporting timelines, and compliance standards that would significantly impact federal contractors across all agencies.

Explore how cyber insurance is evolving to address emerging threats like AI-driven deepfakes, ransomware attacks, and geopolitical cyber conflicts. Industry experts discuss the challenges of adapting traditional insurance frameworks to cover synthetic media impersonation, war exclusions in digital warfare, and the critical role of leadership in ransomware response.

The European Union's Cyber Resilience Act introduces mandatory cybersecurity requirements for software and connected hardware sold in the EU market, with vulnerability reporting obligations beginning September 2026...

Disney's acquisition of Hulu exemplifies a recurring challenge in joint ventures: commercial conflicts between shareholders that ultimately force restructuring. This collection explores how organizations navigate strategic partnerships, operational conflicts, and value creation across industries from manufacturing to financial services, while examining the evolving landscape of corporate growth strategies and risk management.

A ransomware attack on Canvas, the widely-used learning management platform, compromised data from thousands of educational institutions by exploiting vulnerabilities in its Free-for-Teacher program. This incident reveals how cybercriminals are shifting tactics to target structural weaknesses in SaaS platforms, raising critical questions about third-party vendor security and institutional preparedness. Finnegan attorneys examine the breach's implications and provide actionable guidance for strengthening cyb

Disney's acquisition of Hulu exemplifies a recurring challenge in joint ventures: commercial conflicts between shareholders that ultimately force restructuring. This collection explores how organizations navigate strategic partnerships, operational conflicts, and value creation across industries from manufacturing to financial services, while examining the evolving landscape of corporate growth strategies and risk management.

Cybersecurity researchers have uncovered sophisticated threats targeting enterprise defenses and development workflows, while financial institutions grapple with AI deployment challenges and compliance systems face fundamental transformation. From ransomware leveraging kernel-level drivers to disable security tools, to the weaponization of AI coding assistants and open-source ecosystems, the modern attack landscape demands new defensive strategies and operational frameworks.

The Department of War has suspended the Phase II rollout of its Cybersecurity Maturity Model Certification program, citing compliance costs and bureaucratic burdens, while establishing a Reform Task Force to conduct a comprehensive review. Defense contractors must navigate this regulatory shift while maintaining existing cybersecurity obligations under DFARS requirements and Phase I self-assessment protocols. The suspension raises critical questions about the future of third-party certification requirements

Quantum computing poses a significant long-term threat to modern cryptographic systems, particularly public-key encryption used in secure communications and authentication. While cryptographically relevant quantum computers remain years away, organizations face complex legal, regulatory, and cybersecurity risks if they delay planning for post-quantum cryptography transitions.