Attention: As the worrying situation in and around Ukraine intensifies, please be aware of the possibility of a rise in cyber attacks originating from Russia and/or surrounding countries.
Why this is important: Amidst concern for our friends and associates in Eastern Europe, the likelihood of cyber attacks will increase—particularly against infrastructure companies.
Without causing undo alarm or anxiety, we wish to inform our clients of this possibility. We have seen an increase in traffic spikes and potential attacks over the past month, and we’ve increased our monitoring capabilities accordingly. To further minimize risk, our RubyShield security offering can (temporarily) block traffic from regional attack vectors. (For reference, select clients have already made this request proactively.)
There are several ways we can help your firm to further insulate itself, including blocking (selective) traffic to your website; blocking (unwanted user) access to RubyLaw; and/or blocking access to other subsites and microsites that we manage for your firm.
Rest assured that all current RubyLaw clients are already protected via RubyShield. However, we can take additional protective measures, particularly if you identify with any of the following cases.
Client Use Cases
1. Our firm does not have Marketing team members in Russia that require access to RubyLaw AND our firm does not have valid audiences in Russia for our website content. In this case, we can:
—Block all traffic originating from Russia to your website
—Block all traffic originating from Russia to RubyLaw
2. Our firm does not have Marketing team members in Russia that require access to RubyLaw BUT our firm does have valid audiences in Russia for our website content. In this case, we can:
—Challenge (via a CAPTCHA) all traffic originating from Russia to your website
—Block all traffic originating from Russia to RubyLaw
3. Our firm does have Marketing team members in Russia that require access to RubyLaw AND our firm does have valid audiences in Russia for our website content. In this case, we can:
—Challenge (via a CAPTCHA) all traffic originating from Russia to your website
—Block all traffic originating from Russia to RubyLaw except from designated Russian offices (via their IP addresses)
4. Our firm’s Marketing team members only access RubyLaw via our office networks and/or VPNs, regardless of location. In this case, we can:
—Block all traffic to RubyLaw originating from anywhere except from designated firm offices, VPN addresses, and RubyLaw Connect API integration partners (via their IP address)
Updating your configuration to one of the above-recommended settings will require minimal effort, i.e., 1-4 hours of billable time.
Please also note that, as with all geotargeting efforts, IP origin is not 100% accurate, and may occasionally block traffic that should be allowed, or allow traffic that should be blocked. This, however, has become increasingly rare as the quality of geolocation data has improved.
What You Can Do
Please reach us with any questions, as well as to inquire about your firm’s security posture, by emailing our Client Experience team at support@rubensteintech.com. RubyLaw clients can also participate in an upcoming session of RubyLaw Live to learn more about security posture.
For more information on this matter, please visit the following:
—The Cybersecurity Risks of an Escalating Russia-Ukraine Conflict
—Shields Up
