Cybersecurity

CISA Warns of Ransomware Gang, Issues Indicators of Compromise

Processes spurring from the Ragnar Locker Ransomware have affected at least 52 critical infrastructure victims since January, but will terminate if it encounters systems in certain Russian and near-Russian locations.

Cybersecurity

The Federal CISO's Approach to Cybersecurity in a Post–SolarWinds World   

The federal chief information security officer is moving ahead with congressional priorities for the .gov enterprise, as lawmakers fail to pass bipartisan incident reporting legislation and other changes to the Federal Information Security Modernization Act.

Cybersecurity

Insurance Policies May Tighten Amid U.S.-Russia Tensions, Cyber Pros Warn

What a recent court decision means for insurers’ attempts to avoid payouts associated with “acts of war” and breaches where nation-state actors may have played a role.

Ideas

The Ukrainian War Could Usher in Quantum Arms Race

Just as nuclear weapons remain a threat in the physical space, quantum-powered capabilities could become a threat in cyberspace.

Cybersecurity

Russia’s Cyber Tactics Are Prompting the FCC to Address Internet Routing Security

Standards exist for network operators to implement, but there is no rule forcing them to do so.

Cybersecurity

‘You Are a Target’: Navy Warns Staff to Prepare for Cyber Threats

The Navy modernized and extended the reach of its information technology beyond traditional security boundaries over the last few years.

Digital Government

Ukraine Conflict Brings Cybersecurity Risks to U.S. Homes, Businesses

Russia’s cyberattack capabilities can be applied to U.S. targets, including regular Americans’ homes and businesses.

Cybersecurity

Russia Could 'Absolutely' Lash Out at US Through Cyber, Lawmaker Warns 

Sen. Mark Warner advises the U.S. and NATO allies to be on high alert amid global sanctions against Russia.

Cybersecurity

Biden Puts DHS in Charge of Russia-Ukraine Threats to the Homeland

Destructive “Wiper” malware is at the intersection of multiple nation-state threats the department’s Cybersecurity and Infrastructure Security Agency is monitoring.

Cybersecurity

Biden: ‘Prepared to Respond’ if Russia Pursues Cyberattacks Against US

The White House also announced sanctions that will limit Russia’s access to cutting edge technologies.

Cybersecurity

More Cyber Attacks Disable Ukrainian Websites

Wednesday’s denial-of-service attacks on government, financial sites resemble earlier ones attributed to Russia.

Cybersecurity

Ransomware Attacks Exploded in Number and Scale in 2021, Per Cyber Firm

A new Crowdstrike report describes a dramatic increase in activity from both criminal and smaller nation-state groups.

Cybersecurity

Senators Want More out of SEC Plans to Address Cyberattacks

A rule the commission proposed for investment funds and advisors is not precisely what key cybersecurity leaders had in mind.

Cybersecurity

Senators Relaunch Cybersecurity Bills Following log4j Concerns

The new package bill was introduced amid calls for increased government support of open-source software development.

Cybersecurity

NIST Suggests Agencies Accept the Word of Software Producers Per Executive Order

The standards agency said an attestation from vendors themselves would be sufficient when screening for cybersecurity, unless an agency's risk calculus suggests otherwise.

Cybersecurity

New Cyber Safety Board Pivots to Tackle log4j Vulnerabilities

The DHS body’s primary focus will be on addressing vulnerabilities in the commonly used log4j software library, but will also incorporate findings on the ‘SolarWinds’ hack.

Ideas

What It Will Take for NIST, CISA and OMB to Align on Zero Trust

Establishing a successful zero-trust architecture without implementing integrity monitoring is not possible.