Cyber incident reporting is about to become much more urgent. The Cyber Incident Reporting for Critical Infrastructure Act of 2022, known as CIRCIA, directs the Cybersecurity and Infrastructure Security Agency to establish mandatory reporting requirements for covered organizations. Once the final rule is implemented, covered entities will generally be required to report qualifying cyber incidents to CISA within 72 hours and ransomware payments within 24 hours. As of July 2026, CISA is still...

Cyber insurance is changing because cyberattacks are changing. For years, many organizations treated cyber insurance as a financial safety net. If something went wrong, the policy would help cover the loss. But that assumption is becoming riskier as attacks move faster, become more automated, and leave businesses with less time to detect and contain the damage. A recent Wall Street Journal report highlighted a major shift in cyber insurance underwriting: insurers are no longer focused only on...

Many small and mid-sized law firms still assume ransomware is mainly a problem for large enterprises, hospitals, or major corporations. The latest data tells a different story. A June 2026 ransomware OSINT analysis shared by our partner Todyl found 127 confirmed ransomware victims publicly disclosed across 37 active threat groups. Even more concerning, 86% of those victims were small and mid-market organizations. For law firms, the biggest takeaway is this: when enterprise victims were...