Cybersecurity

DHS Convenes Regulators, Law Enforcement Agencies on Cyber Incident Reporting

The Department of Homeland Security started the clock on a report to Congress for streamlining requirements, amid industry dissatisfaction with the Cybersecurity and Infrastructure Security Agency’s pending reporting regime.

Cybersecurity

Ransomware Hackers Will Still Target Smaller Critical Infrastructure, CISA Director Warns

CISA Executive Director Brandon Wales discussed how ransomware actors target companies of all sizes, and how CISA wants organizations to prevent zero-day events.

Cybersecurity

Official: White House to Meet with Rail Industry Before Issuing Cybersecurity Rules

The meeting comes as the Office of the National Cyber Director prepares a more comprehensive approach to securing privately owned and operated critical infrastructure.

Emerging Tech

DC-QNet Research Will Work to Develop Quantum Network Infrastructure

The inaugural quantum research consortium will focus on strengthening telecommunications infrastructure as quantum computing continues to advance.

Cybersecurity

National Cyber Director: Mandates Coming to Secure Commercial Information Technology

An event hosted by the leading trade association for major tech vendors highlighted what has so far been an impasse between government and industry on cybersecurity policy.

Cybersecurity

CISA Points to Water Sector in Seeking $80 Million More for FEMA Grants

CISA and FEMA are currently rolling out the first of $1 billion the Homeland Security agencies got in Rescue Act funding to help state and local entities improve their cybersecurity.

Cybersecurity

Cybersecurity Pros Signal Regulatory Challenge for Securing Industrial Control Systems

A studious adversary may be hellbent on destruction, and a comprehensive approach is needed to successfully govern the protection of critical infrastructure, specialists say.

Cybersecurity

Lawmakers Weighing Critical Infrastructure Designation for Major Cloud Service Providers

Rep. Jim Langevin and others are working on bipartisan legislation to be introduced this summer that truly reflects the Solarium Commission’s agreement on benefits and burdens for systemically important private-sector entities.

Cybersecurity

What CISA Wants Critical Infrastructure Partners to Report on Cyber Incidents

A new guide provides clues into how the agency might be thinking of crucial details, such as what should count as an “incident” under a new law.

Cybersecurity

Joint Alert Warns Advanced Hackers Have Developed Tool Targeting Industrial Control Systems

The design of the tool, which allows full system access to certain operational technology in environments such as power plants and water treatment facilities, can also be used by less sophisticated attackers.

Cybersecurity

FCC Chair Claims Cybersecurity Role Congress Crafted for CISA

The commission is joining the fray in a budding turf fight at the Cybersecurity and Infrastructure Security Agency that also involves sector risk management agencies like the Department of Energy.

Cybersecurity

Partisan Rift Stalls Efforts to Secure Critical Infrastructure from Cyberattack

U.S. Cybersecurity Policy heads back to square one as a public-private bargain that emerged from the Congressionally mandated Solarium Commission breaks down.

Ideas

Why the White House is Focused on Community-Level Water Cybersecurity

A hack on municipal water and wastewater systems could have devastating consequences on an essential resource.

Cybersecurity

White House Warns of Potential Russian Cyberattack Based on New Intel

Officials, distressed by the continued lack of cybersecurity basics implemented in the private sector, issued “a call to action.”

Cybersecurity

Outgoing Official Pushes for CISA Shift from Risk Advisor to Risk Reducer

After almost a decade and a series of massive intrusion campaigns, government and industry may finally be ready to have the crucial talk about cybersecurity metrics they’ve been avoiding.

Cybersecurity

NIST Refreshing Voluntary Cybersecurity Framework Amid Push for Mandates

The agency is soliciting comments to update a core document that lets entities pick and choose which technical standards they want to apply to their systems based on their own risk assessment.

Emerging Tech

Nuclear Regulators Want Machines to Monitor Cyberattacks on Power Plants

This isn’t the NRC’s first ask about machine learning and artificial intelligence.

Cybersecurity

Nearly 100 Utility Companies Now Participate in Cyber Sensor Initiative

The White House effort to secure industrial control systems from cyberattack requires nothing of the private sector. 

Cybersecurity

FBI: Ransomware Attackers Have Code to Halt Critical Infrastructure

Monitoring remote access technology will be especially important for limiting the reach of malicious actors, allied cybersecurity agencies said in a report on trends they’ve observed over the last year in a booming ransomware industry.

Cybersecurity

EPA Leading White House Effort to Secure the Water Sector Against Cyberattacks

This is the third in a series of 100-day sprints to shore up industrial control systems used in critical infrastructure.