Christopher Burgess - Author

Russia-China cyber criminal collaboration could “destabilise” international order

Russian cyber criminals continue to court their Chinese counterparts in hopes of forming mutually beneficial avenues of collaboration.

HiQ v LinkedIn court ruling will have a material effect on privacy

A U.S. appeals court has ruled that hiQ's scraping of public LinkedIn data is not a violation of the U.S. Computer Fraud and Abuse Act.

China's cyber espionage focus: intellectual property theft

The recently uncovered Operation CuckooBees campaign shows how serious China is about using IP theft as a competitive advantage.

New Five Eyes alert warns of Russian threats targeting critical infrastructure

The alert provides detailed information on Russian government and state-sponsored cyber criminal groups as well as guidance for reducing risk.

What's the risk of retaliation for taking a corporate stance on Russia?

Hacktivists, Russia and its proxies have taken cyber actions against organisations for their decisions regarding the attack on Ukraine.

MITRE and partners build insider threat knowledge base

MITRE Engenuity and major business partners have developed an knowledge base of malicious insiders' tactics, techniques and procedures.

Ukraine / Russia information war is forcing companies to choose a side

Both Russia and Ukraine are making demands and requests of companies to help control information around their conflict. However they respond has consequences.

Motorola case shows importance of detecting insider IP theft quickly

Departing Motorola employees took thousands of documents with them in 2008 when they were hired by a competitor, but it wasn't discovered until 2017.

Russian cyberattacks on Ukraine raise IT security concerns

The destructive attacks follow a US government warning for a "heightened state of awareness" and to follow state-sponsored threat mitigation advice.

Three recent events prove the need for an insider risk playbook

Pfizer, Ubiquiti and Code42 all faced real or potential insider threats that could have been a lot worse if they did not have a plan to deal with them.

Collect today, decrypt tomorrow: How Russia and China are preparing for quantum computing

All encrypted data will eventually become vulnerable to quantum computing along with the secrets they hold.

Ubiquiti breach an inside job, according to FBI

Investigators claim Ubiquiti employee Nikolas Sharp stole company data and then played the role of whistleblower to draw attention away from is actions.

The challenges presented by China's Personal Information Protection Law

PIPL's data localisation mandate places unique requirements on businesses operating in China, and regulators have great leeway to assess fines.

Twitch breach highlights dangers of choosing ease of access over security

Attackers broke into the Twitch house and cleaned out everything. Following least-privilege access principles will help others avoid that scenario.

Why device identity is the overlooked insider threat

Device / machine identity, especially in association with robotic process automation, can be a conduit for intentional and unintentional insider breaches.

Stories by Christopher Burgess