The NCBA Professional Vitality Committee creates sourced articles centered on reducing inherent stress and enhancing vitality in the lives of legal professionals and offers those resources as a benefit for members of the North Carolina Bar Association.

By Coleman Cowan

Life is a journey. We all learn from our experiences. And if we’re paying attention, we become better people and lawyers not only from our successes but also from our failures. When I first started practicing, I made an effort to soak up as much knowledge and insight as I could from older, more experienced lawyers. Now that I’m one of them, I’ve taken on mentoring roles to help young lawyers just beginning to practice. If I’m honest, more time has passed than I would like to admit, but I still remember what it was like to be young, inexperienced, and fighting for my place at the table.

What appears below is a note to my younger self, with a bit of knowledge and experience I gained since I started practicing law more than 25 years ago. The idea was to help young lawyers – and maybe some not so young – learn from the experience of others, and perhaps come to terms a bit with the stress and pressure of being a new lawyer finding your way in an adversarial profession, whether in a transactional or a litigation practice.

A complete list of guidance would be endless, and there are likely as many good pieces of advice as there are practicing lawyers in the state. What appears below is in part unique to my experience, but also broad enough that others might benefit.

Read more

By Eva Lorenz

Introduction

Now that the situation at the pump seems to have recovered and returned to normal, it is time to figure out what actually happened in the Colonial pipeline attack and what lessons, if any, we can learn from yet another high profile cyberattack involving ransomware.

First, a few introductory words and some background on ransomware: ransomware is a common form of cyberattack in our time, and it involves attackers deploying code onto the victim’s network that results in encrypting files and folders throughout the network. According to the FBI, the best way to contain the attack is to block the code from moving across the network. For recovery from the attack, companies often rely on sound backup practices that allow them to restore encrypted files and folders without losing too much data. Of course, victims of ransomware attacks can also pay ransom, but that practice is still discouraged by the FBI and in some cases actually forbidden since the groups behind the attack are deemed sanctioned foreign entities.

Read more

By Eva Lorenz and Taylor Ey

SolarWinds made a name for itself as the developer of tools for network monitoring that help small and large companies efficiently run their environment. While not a security-focused company from a product standpoint, the understanding was that the code behind SolarWinds’ tools was protected as intellectual property and that updates were safe to run until it turned out that both of these assumptions were wrong.

How Was the Compromise Detected?

In late 2020, FireEye, a company focused on cybersecurity and internationally involved in helping companies post cyber incident, detected some unusual activity on the FireEye network. FireEye detected it was hacked after the attackers tried to register a device to FireEye’s multi-factor authentication system using stolen credentials. The system then notified the employee, whose credentials were stolen, and alerted the FireEye security team of this new device. This notice triggered an internal investigation to learn who was trying to register this device. FireEye performed in-depth code analysis and determined that the intrusion originated with a SolarWinds product called Orion. Some analysts believe that attacking FireEye was a mistake by the attackers since it sped up detection of the SolarWinds hack.
Read more