article thumbnail

A Cyber Insurance Backstop

Schneier on Security

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. 11, 2001, terrorist attacks. But this is easier said than done.

article thumbnail

Ten Years Later, New Clues in the Target Breach

Krebs on Security

Even if one managed to steal (or guess) a user’s DirectConnection password, the login page could not be reached unless the visitor also possessed a special browser certificate that the forum administrator gave only to approved members. A screen shot of the org chart from ChronoPay’s MegaPlan Intranet system.