On May 21, 2026, the New York Department of Financial Services (“NYDFS”) issued two Industry Letters to the organizations it regulates (“Regulated Entities”): “Heightened Cybersecurity Risks Associated with Frontier AI Models” (the “Advisory”) and “Guidance on Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment” (the “Guidance”) (collectively, the “Letters”). The Letters discuss […]
About Kim Peretti
Cybercrime Trends to Watch: Takeaways from the FBI’s 2025 IC3 Annual Report
On April 6, 2026, the Federal Bureau of Investigation (FBI) released its 2025 IC3 Annual Report, which provides key trends, case data, and other statistics related to the FBI’s ongoing efforts to combat emerging cybersecurity threats. According to the report, 2025 marked the first time the total reported cybercrime losses surpassed $20 billion, with cryptocurrency […]
Connecticut Proposes Mandatory Forensic Investigation and Reporting for Large Scale Data Breaches
Connecticut lawmakers have introduced legislation that, if enacted, would significantly expand breach-response obligations for organizations affected by large-scale cybersecurity incidents. As proposed, Raised Senate Bill 117 (SB 117), would create a new category of “massive” data breaches and impose mandatory forensic investigation and reporting requirements that go well beyond Connecticut’s existing breach notification framework. What […]
CISA Warns Organizations to Harden Endpoint Management Systems Following Cyberattack on Stryker Corporation
On March 18, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) issued an alert (the Alert) urging U.S. organizations to harden their endpoint management systems following the March 11, 2026 cyberattack against medical technology firm Stryker Corporation (Stryker), which disrupted Stryker’s internal Microsoft environment. CISA stated that it is conducting enhanced coordination with federal partners, […]
A New U.S. Cyber Strategy: President Trump’s Cyber Strategy for America
A newly released U.S. government cyber strategy (available here) outlines a more assertive and coordinated national posture toward cybersecurity. The strategy acknowledges that cyberspace is central to economic security, national defense, and everyday life. In doing so, it warns that cyber threats now affect everything from critical infrastructure to small businesses and individuals. These cyber […]