This summer, the SEC adopted new cybersecurity rules, which state that material cybersecurity incidents must be disclosed four business days after their discovery. It will also be interesting to see what the SEC makes of Caesars’ and MGM’s filings. “Forever Chemicals” Are in So Many Things.

What Elon Musk Misunderstands About His “Favorite Philosopher” There’s a Big Problem With Your Car’s Tires Moving forward, I would expect to see a lot of major casino companies buying a lot more cyberinsurance, instituting much stricter security protocols for their IT help desks, monitoring anomalous activity on their computer systems much more closely, and segmenting their networks much more aggressively, so that someone who infiltrates one computer cannot so easily compromise all of the others across the organization.

The cybercriminals claiming credit for the attack, a group called “Scattered Spider,” have used similar social engineering tactics in the past to infiltrate firms via phone calls (a technique sometimes called vishing, short for “voice-call phishing”).Ĭasinos have a reputation for excellent security, but it seems that that security may be more focused on physical vulnerabilities than online ones, particularly if all it takes is a few short phone calls to infiltrate their computer networks. The hackers reportedly found an MGM employee’s information on LinkedIn, then called the company’s IT help desk and pretended to be that employee to reset their account credentials. The MGM attack itself, despite the grand slot machine–rigging aspirations of the perpetrators, was not particularly sophisticated or unusual. Nitish Pahwa So How Much Did Sam Bankman-Fried Pay Steph Curry and Larry David? We Found Out! Read More

Mgm grand casino logo