Content by Scott Ferguson

CISA Shifting Einstein Detection System Deeper Into Networks

Scott Ferguson  •  June 22, 2021

CISA is moving its Einstein intrusion detection system deeper into federal networks in an effort to better detect supply chain attacks after its failure to detect the espionage campaign that targeted SolarWinds and its customers, including federal agencies.

Lawmakers Unveil Cybersecurity Legislation

Scott Ferguson  •  June 21, 2021

Republican and Democratic lawmakers have recently introduced several cybersecurity-related bills seeking to address issues ranging from imposing tougher penalties for cybercriminals to improving protection of school districts.

Senate Approves Chris Inglis as National Cyber Director

Scott Ferguson  •  June 18, 2021

The U.S. Senate has unanimously approved Chris Inglis as national cyber director. He assumes the role as the country is still reeling from a series of ransomware attacks and the SolarWinds supply chain attack. Meanwhile, confirmation of a new CISA director is on hold.

Senators Draft a Federal Breach Notification Bill

Scott Ferguson  •  June 18, 2021

A bipartisan group of senators is circulating a draft of a federal breach notification bill that would require federal agencies, federal contractors and businesses that have oversight over critical infrastructure to report significant cyberthreats to CISA within 24 hours of discovery.

Analysis: The Cyber Impact of Biden/Putin Summit Meeting

Scott Ferguson  •  June 17, 2021

After U.S. President Joe Biden and Russian President Vladimir Putin discussed cybersecurity issues at their Wednesday summit meeting in Geneva, security experts and analysts began sizing up what the next steps might be following what some are calling a "transformational moment."

DHS Preparing More Cybersecurity Requirements for Pipelines

Scott Ferguson  •  June 16, 2021

The Department of Homeland Security unit that's responsible for the safety of the nation's interstate pipelines is preparing new cybersecurity requirements for oil and gas companies in the wake of the Colonial Pipeline Co. ransomware attack.

NATO Endorses Cybersecurity Defense Policy

Scott Ferguson  •  June 15, 2021

The U.S. and its NATO allies endorsed a new cybersecurity defense policy during President Biden's visit this week with member states in Brussels. The policy agreement comes as Biden prepares to meet Russian President Vladimir Putin on Wednesday to discuss cybersecurity and other issues.

Will Ransomware Attacks Push Congress to Enact Regs?

Scott Ferguson  •  June 14, 2021

After hearings in the Senate and House on a spate of ransomware attacks that have put the nation's critical infrastructure in danger, some security experts say Congress may be poised to take action to create greater regulatory oversight of cybersecurity within certain industries.

House Oversight Committee Probing JBS Ransomware Payment

Scott Ferguson  •  June 11, 2021

The House Oversight and Reform Committee is now probing the $11 million payment that meat-producer JBS paid to a cybercriminal gang following a ransomware attack in May. Committee Chairwoman Carolyn Maloney also asked for documents related to ransom payments made by Colonial Pipeline and CNA.

Biden's Nominees Face Questions Over Cybersecurity Concerns

Scott Ferguson  •  June 10, 2021

President Joe Biden's nominees for White House cyber director and CISA director faced questions from senators during their confirmation hearing Thursday, including how the federal government should respond to a recent spate of ransomware attacks and other cyberthreats.

House Probes Specifics of Colonial Ransomware Attack

Scott Ferguson  •  June 9, 2021

Colonial Pipeline Co. CEO Joseph Blount returned to Capitol Hill on Wednesday to answer additional questions about his company's response to the ransomware attack that affected the firm's operations for nearly a week, as well as his decision to pay the attackers.

Biden Rescinds Executive Orders Banning TikTok, WeChat

Scott Ferguson  •  June 9, 2021

The Biden administration has rescinded a number of Trump-era executive orders that banned social media apps such as TikTok and WeChat from the U.S. over national security concerns. Instead, the Commerce Department will conduct a security review of all Chinese-made apps and the data they collect.

CISA Expanding Mandatory Vulnerability Disclosure Program

Scott Ferguson  •  June 8, 2021

CISA is preparing to expand its vulnerability research and disclosure program, which is now mandatory for nearly all executive branch agencies, by creating a vulnerability disclosure platform service. As part of this effort, the cybersecurity agency is partnering with Bugcrowd and EnDyna.

US Prosecutors Charge Latvian Woman in Trickbot Gang Case

Scott Ferguson  •  June 7, 2021

U.S. Justice Department prosecutors have charged a 55-year-old Latvian woman with helping to develop code for the Trickbot gang as well as stealing banking credentials and deploying ransomware, according to a federal indictment. Alla Witte faces more than 30 years in prison if convicted.

Where's the Beef? Ransomware Hit Highlights Cyber Problems

Scott Ferguson  •  June 4, 2021

The ransomware attack that disrupted operations at meat processing giant JBS has exposed cybersecurity shortcomings in the U.S. agricultural sector and food supply chain. Experts say the industry demands the level of security scrutiny given to the electrical grid and other critical infrastructure.