Security News

SEC adopts new cybersecurity incident disclosure rules for companies
2023-07-26 17:52

The Securities and Exchange Commission (SEC) today adopted rules requiring registrants to disclose material cybersecurity incidents they experience and to disclose on an annual basis material...

SEC drops 42 cases after staff bungle data protection
2023-06-06 04:02

The US Securities and Exchange Commission has dismissed proceedings against 42 companies and individuals after admitting that its enforcement staff accessed documents that were supposed to be for judges' eyes only. All 42 [PDF] of the now-dismissed cases were slated to be heard by the watchdog agency's in-house court - which is supposed to remain strictly separate from the SEC's enforcement staff.

Lawyers join forces to fight common enemy: The SEC and its probes into cyber-victims
2023-02-23 02:00

More than 80 law firms say they are "Deeply troubled" by the US Securities and Exchange Commission's demand that Covington & Burling hand over names of its clients whose information was stolen by Chinese state-sponsored hackers. In an amicus brief filed this week, 83 firms with a total of more than 50,000 attorneys employed backed their fellow lawyers in Covington's ongoing battle with America's financial watchdog.

Lawyers slam SEC for 'blatant fishing expedition' after Exchange mega-attack
2023-01-12 20:06

The US Securities and Exchange Commission has sued international law firm Covington & Burling for details about 298 of the biz's clients whose information was accessed by a Chinese state-sponsored hacking group in November 2020. In March 2022, the SEC issued a subpoena asking Covington to hand over information about the security breach including, among other things, all of the affected clients' names, and the amount of information that was accessed or stolen, and communications between the law firm and the clients about the exfiltration.

SEC charges crew of social media influencers with $100m fraud
2022-12-15 13:30

Eight braggadocious social media influencers fond of posing next to sportscars are facing charges from the US Securities and Exchange Commission and Department of Justice, who claim they manipulated their 1.5 million followers in order to help themselves to $100 million in "Fraudulent profits." The suspects, all men in their twenties and thirties, were charged with conspiracy to commit securities fraud in connection with a long-running, social media-based "Pump and dump" scheme, a recently unsealed Texas federal grand jury indictment [PDF] and an SEC complaint [PDF] revealed.

SolarWinds reaches $26m settlement with shareholders, expects SEC action
2022-11-04 21:59

SolarWinds has agreed to pay $26 million to settle a shareholder lawsuit, and it's also expecting to be slapped with an enforcement action by Uncle Sam - both related to its infamous 2020 supply chain security fiasco, according to the software maker's most recent US regulatory filing. At the end of October, SolarWinds reached a deal with investors who sued the company, alleging they were misled about its security posture in advance of the Russian cyberattack on the business, according to an 8-K filing [PDF] with the US Securities and Exchange Commission.

SEC fines Morgan Stanley Smith Barney $35 million over failure to secure customer data
2022-09-21 21:57

SEC fines Morgan Stanley Smith Barney $35 million over failure to secure customer data We may be compensated by vendors who appear on this page through methods such as affiliate links or sponsored partnerships. In a notice posted Monday, the SEC announced that the company consented to the agency's finding that it violated federal regulations regarding the safeguarding and disposal of customer data.

SEC says brokerage accounts hijacked for $1.3m pump-and-dump scam
2022-08-16 21:25

America's financial watchdog has accused 18 individuals and shell companies of using compromised brokerage accounts to manipulate stock prices to rake in $1.3 million in illicit profits. According to the SEC complaint, fraudsters in the US, Canada, and the Dominican Republican broke into at least 31 American-owned retail brokerage accounts in late 2017 and early 2018.

A closer look at the SEC Cybersecurity Disclosure rule
2022-06-15 04:33

In this Help Net Security video, James Turgal, VP of Cyber Risk, Strategy and Board Relations at Optiv, discusses the proposed new SEC Cybersecurity Disclosure rule. The ruleset would require...

SEC Plans to Hire More Staff in Crypto Enforcement Unit to Fight Frauds
2022-05-04 06:46

The U.S. Securities and Exchange Commission on Tuesday announced that it will expand and rebrand its Cyber Unit to fight against cyber-related threats and protect investors in cryptocurrency markets. To that end, the SEC is renaming the Cyber Unit within the Division of Enforcement to Crypto Assets and Cyber Unit and plans to infuse 20 additional positions with the goal of investigating wrongdoing in the crypto markets.