{“lastseen”:”2025-09-12T22:18:21″,”description”:”Interesting analysis:\\n\\n\\u003e When cyber incidents occur, victims should be notified in a timely manner so they have the opportunity to assess and remediate any harm. However, providing notifications has proven a challenge across industry.\\n\\u003e \\n\\u003e When making notifications, companies often do not know the true identity of victims and may only have a single email address through which to provide the notification. Victims often do not trust these notifications, as cyber criminals often use the pretext of an account compromise as a phishing lure.\\n\\u003e \\n\\u003e [\u2026]\\n\\u003e \\n\\u003e This report explores the challenges associated with developing the native-notification concept and lays out a roadmap for overcoming them. It also examines other opportunities for more narrow changes that could both increase the likelihood that victims will both receive and trust notifications and be able to access support resources.\\n\\u003e \\n\\u003e The report concludes with three main recommendations for cloud service providers (CSPs) and other stakeholders:\\n\\u003e \\n\\u003e 1. Improve existing notification processes and develop best practices for industry. \\n\\u003e 2. Support the development of \\”middleware\\” necessary to share notifications with victims privately, securely, and across multiple platforms including through native notifications. \\n\\u003e 3. Improve support for victims following notification.\\n\\n\\u003e \\n\\u003e While further work remains to be done to develop and evaluate the CSRB’s proposed native notification capability, much progress can be made by implementing better notification and support practices by cloud service providers and other stakeholders in the near term.”,”published”:”2025-09-12T21:04:34″,”modified”:”2025-09-12T03:37:20″,”type”:”schneier”,”title”:”A Cyberattack Victim Notification Framework”,”source”:””,”references”:””,”id”:”SCHNEIER:96655482AA3562E6FE140A61A4D4D5D7″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.schneier.com\/blog\/archives\/2025\/09\/a-cyberattack-victim-notification-framework.html”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-09-12T22:18:21″,”description”:”Interesting analysis:\\n\\n\\u003e When cyber incidents occur, victims should be notified in a timely manner so they have the opportunity to assess and remediate any harm….<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,13,33,114,7,11,5],"class_list":["post-17288","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-schneier","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n