Cybersecurity

North Korea Behind Manually Executed Ransomware Attacks, Federal Agencies Say

Officials are connecting the “Maui” ransomware to attacks on the public health sector over the past year. 

Cybersecurity

TSA Implements 'Surge Team' to Allow Pipeline Industry Flexibility on Security Directives

The new recruits are processing companies’ requests seeking the approval of “alternative measures” to comply with a directive the agency issued in response to the May 2021 ransomware attack on Colonial Pipeline.

Emerging Tech

Key Lawmaker: Digital Passport Only Way to Deter Crypto Use for Ransomware Attacks

The House Science subcommittee chairman—a REAL ID enthusiast—is probing the viability of “privacy enhancing technologies” for biometric data such as facial-feature mappings.

Policy

Biden Calls for Filibuster Override to Protect Privacy After Roe v. Wade Reversal

How the Supreme Court’s decision on abortion could lead to the codification of an actual right to privacy and a whole lot more. Success may require voting in midterm elections.

Cybersecurity

CISA Recommends Immediate Action for Microsoft Exchange Online Users

The recommendation is in line with Executive Order 14028, which requires federal agencies to implement multi factor authentication.

Cybersecurity

Historic NATO Meeting Extends Cybersecurity Collaboration to Asia-Pacific Allies

The security alliance is squaring off against Russia and China by building a coordination capability for rapidly responding to cyber attacks.

Cybersecurity

Congresswoman Promotes Cyber Insurance Amid Shifting Policy Landscape

The jury is still out on how using insurance policies to pay ransoms and re-establish systems after a cyberattack affects critical infrastructure organizations’ individual and collective resilience.

Cybersecurity

Key State Official Warns of ‘Peril’ as US Pursues Cybersecurity Goals at G7

The State Department would oversee $200 billion in aid and financing the administration wants to invest in developing countries, under a new agreement from world leaders that promises a prioritization of cybersecurity.

Cybersecurity

Allied Cybersecurity Agencies Advise Against Disabling Popular Tool for Cyberattackers

The Microsoft program—PowerShell—has granted malicious actors in major hacks remote command and control ability over victims, but, by the same token, it can improve cybersecurity management across an enterprise.

Cybersecurity

House Panel Passes RANSOMWARE Act to Get FTC Reports on Cross-Border Work

The Energy and Commerce subcommittee also forwarded a bipartisan privacy and data security bill to the full committee but—lacking support from Senate leadership—that legislation appears dead in the water.

Cybersecurity

Big Tech Pushes for Harmonized Global Policy Amid Emerging Regulations from Allies

The Information Technology Industry Council is maintaining its call for a voluntary approach as Canada, the United Kingdom and Europe all signal strict new cybersecurity requirements.

Cybersecurity

GAO: Potential Federal Cyber Insurance Program Should Avoid Moral Hazard

The government watchdog highlighted the need for specific security requirements in recommending other relevant agencies explore the possibility of providing federal assistance to private sector entities following a catastrophic event.

Cybersecurity

CISA Plans to Hire Chief People Officer to Boost Cyber Workforce

Agency advisors are set to vote on a host of draft recommendations which include reviewing the security clearance process for inefficiency.

Cybersecurity

Credit Rating Agency: New EU Laws Will Improve Firms’ Cyber Resilience Globally 

The Digital Operational Resilience Act would force non-EU companies with a significant presence in member states to create subsidiaries that can be regulated under their jurisdiction. 

Cybersecurity

Justice Pursues Collaboration to Fight Cyber Crime with EU Member States

Under an executive order on the responsible development of digital assets, the department recently recommended the U.S. deepen its investment in international organizations to counter ransomware and other illicit activity.

Cybersecurity

White House Official: Administration Urgently Researching Central Bank Digital Currency

As due dates near for agency deliverables under an executive order, the Atlantic Council has produced a report that could help officials inform the president of implications for cybersecurity.

Digital Government

Big Tech Clashes with Brick and Mortar Group over Liability in Privacy Hearing

A similar dynamic is playing out in cybersecurity policy as the government drafts new contract language for cloud service providers.

Cybersecurity

National Cyber Director: Mandates Coming to Secure Commercial Information Technology

An event hosted by the leading trade association for major tech vendors highlighted what has so far been an impasse between government and industry on cybersecurity policy.

Modernization

Senators Call on Biden to Prioritize Procuring Tech, Staff for Large Scale Declassification

Officials at the National Archives say agencies could be using artificial intelligence to more efficiently process a tremendous backlog of appeals.

Cybersecurity

China Compromised Telecom Firms Using Known Vulnerabilities, Federal Agencies Warn

The alert comes as the U.S. continues negotiations with countries like Russia and China on what constitutes “cybercrime” at the United Nations.