CISA, NIST to Develop Cybersecurity Goals for Critical Infrastructure Control Systems
Biden also formally established the voluntary public-private partnership Industrial Control System Cybersecurity Initiative. Keep Reading
DHS, DOJ Launch First One-Stop Ransomware Resource at StopRansomware.gov
The new StopRansomware.gov is a collaborative effort across the federal government and the first joint website created to help private and public organizations mitigate their ransomware risk. Keep Reading
CISA Begins Cataloging Bad Practices That Increase Cyber Risk
While extensive guidance on cybersecurity “best practices” exists, additional perspective is needed. Ending the most egregious risks requires organizations to make a concerted effort to stop bad practices. Keep Reading
PERSPECTIVE: Russia, Colonial Pipeline, and Whether the Attack Is an Alarming Omen
There are two alternatives that are most feasible, given an understanding of the concept of access. Keep Reading
PERSPECTIVE: Holding the Privatized Energy Sector More Accountable for Cyberattacks
Private firms need to demonstrate a greater sense of urgency. Merely hiring cybersecurity firms after an attack is not enough. Keep Reading
Department of Justice Seizes $2.3 Million in Cryptocurrency Paid to the Ransomware Extortionists Darkside
Colonial Pipeline reported to the FBI that its computer network was accessed by an organization named DarkSide and that it had received and paid a ransom demand for approximately 75 bitcoins. Keep Reading
DHS Announces New Cybersecurity Requirements for Critical Pipeline Owners and Operators
TSA is also considering follow-on mandatory measures that will further support the pipeline industry in enhancing its cybersecurity and that strengthen the public-private partnership so critical to the cybersecurity of our homeland. Keep Reading
10 Essential Steps to Cyber Resilience as Hackers Target Critical Infrastructure
If your organization was compromised by a cybersecurity event, how would the business continue to operate until systems are restored? Keep Reading
PERSPECTIVE: Steps to Follow Before Inevitable Government Regulation of All Critical Infrastructure and Key Resources
Having been fortunate enough to work in both the private and public sectors, I have been honored to work in both environments with an appreciation of the necessary skills to navigate both worlds. Keep Reading
NSA, ODNI and CISA Release 5G Analysis Paper
The analysis paper examined three major threat vectors in 5G: standards, the supply chain, and threats to systems architecture. Keep Reading
CISA Launches a Space Systems Critical Infrastructure Working Group
The mix of government and industry members will identify and develop strategies to minimize risks to space systems that support the nation’s critical infrastructure. Keep Reading
Colonial Pipeline Incident: What Happened and Why It Matters
Over the past year, there has been an observed rise in ransomware attacks on industrial systems. These attacks have not necessarily infected operational networks, but victims, like Colonial, have been compelled to suspend operations as a precautionary measure. Keep Reading
DarkSide Ransomware: CISA, FBI Advisory on Best Practices for Preventing Business Disruption from Ransomware Attacks
These mitigations will help CI owners and operators improve their entity's functional resilience by reducing their vulnerability to ransomware and the risk of severe business degradation if impacted by ransomware. Keep Reading
Here’s What We Know About DarkSide Ransomware
With the ransomware incident that shut down a major fuel pipeline in the United States, another well-known variant on the cybercrime underground has been thrust into the international spotlight. Keep Reading
Colonial Pipeline Attack: Lessons Learned for Ransomware Protection
Obviously, detection is key. But the real advantage the defender can have is the immediate ability to take actions across endpoints within the fleet – IT or OT – to stop the spread of malware. Keep Reading
White House Warns Other Sectors Amid Fallout from Colonial Pipeline Ransomware Attack
Neuberger defers question about whether ransom was paid as company works with FireEye to get ops online. Keep Reading
COLUMN: Now Is the Time to Invest in the Security of Our Public Water Infrastructure
The recent events in Kansas and Florida only highlight the dangers posed by passivity. Keep Reading
PERSPECTIVE: Cyber and Physical Threats to the U.S. Power Grid and Keeping the Lights on
Perhaps the most vulnerable aspect of the U.S. power grid is the high-voltage transformers that allow efficient transmission from power plants to distribution substations. Keep Reading
Texas Militia Forum Member Charged with Plotting to Blow Up Virginia Data Center
Pendley allegedly told the undercover FBI employee he planned to attack web servers that he believed provided services to the FBI, CIA, and other federal agencies. He said he hoped to bring down “the oligarchy” currently in power in the United States. Keep Reading
Army Developing Tool for U.S. Cities to Practice Cyberattack Response
The Army Cyber Institute is building a portable, tailorable platform for cities to practice responding to cyberattacks targeting critical infrastructure. Keep Reading