Policy & Regulation: Page 19
-
Feds want businesses to report cyberattacks — the agency doesn't matter
The FBI's Bryan Vorndran compared a cyberattack to a house robbery: Law enforcement assists with attack response while CISA is representative of an alarm company tasked with prevention.
By Samantha Schwartz • Jan. 14, 2022 -
FCC seeks stronger breach reporting rules for telecoms
After massive breaches at T-Mobile and other telecoms, the proposed regulations would create faster consumer disclosure and mandate reporting of inadvertent cases.
By David Jones • Jan. 13, 2022 -
Congressional cyber commission expires but work to continue with 'Solarium 2.0'
Despite the commission's success, unfinished business includes setting up a joint collaborative environment, institutionalizing the Cyber Diplomacy Act, creating a bureau of cyber statistics, and codifying critical infrastructure.
By Samantha Schwartz • Dec. 23, 2021 -
Long-expected cyber incident reporting rule loses ground once again
The House's recently passed National Defense Authorization Act is set to advance to the Senate. But it omitted a key cyber rule: mandatory incident reporting.
By Samantha Schwartz • Dec. 10, 2021 -
What incident reporting could look like
Legislation could remove some of the complexity of overlapping standards when CISA's roles and authorities become more robust.
By Samantha Schwartz • Dec. 10, 2021 -
TSA rolls out rail cyber requirements, targeting prevention and rapid response
The directives, with immediate implementation expected, are primarily for higher-risk freight railroads, passenger rail, and rail transit, DHS said.
By Samantha Schwartz • Dec. 3, 2021 -
Insurer Lloyd's slashes coverage on state-sponsored cyberattacks, reflecting battered market
The limits for state-sponsored attack coverage comes at a time when nation-state activity and ransomware linked to foreign threat actors is surging.
By David Jones • Dec. 3, 2021 -
Crypto becoming the preferred currency of cybercriminals and rogue governments
Authorities are turning the tables on cybercriminals by tracing the steps of illicit transactions and making it more difficult for ransomware operators to evade detection.
By David Jones • Nov. 24, 2021 -
Recovering ransom payments could become routine for law enforcement
Backed by blockchain analysts and crypto-tracers, law enforcement agencies want to become more proficient in seizing ransomware-related funds.
By Samantha Schwartz • Nov. 23, 2021 -
Companies urged to alert federal law enforcement in ransomware cases
A key official with the U.S. Secret Service says companies need to work with law enforcement agencies, who can help make critical decisions in disrupting illicit transactions.
By David Jones • Nov. 17, 2021 -
FBI justifies its decision to withhold Kaseya decryptor
The law enforcement agency prioritized the long-term benefits of a delay over the immediate decryption key release.
By Samantha Schwartz • Nov. 17, 2021 -
K-12's decade-old cyber guidance needs updating, watchdog says
With K-12 considered critical infrastructure, the Government Accountability Office is calling for more guidance on the federal government's role in protecting schools.
By Roger Riddell • Nov. 15, 2021 -
Banks outpace other industries in cyber investments, defense strategies: report
The banking industry is actively investing in cyber defense and employing sound corporate governance practices to combat threats, Moody's found.
By David Jones • Nov. 15, 2021 -
US backs Paris-led effort on cybersecurity cooperation
After sitting on the sidelines for three years, the U.S. is joining an international effort to create stability and order in cyberspace.
By David Jones • Nov. 11, 2021 -
DOJ unveils charges, money seizures in multinational crackdown against REvil
The Justice, Treasury and State departments led an international effort to crack down on ransomware, money laundering and illicit trading of cryptocurrency connected to the gang linked to the Kaseya attack.
By David Jones • Nov. 9, 2021 -
State Department to add cyber bureau, tackle tech diplomacy
The additions could help streamline coordination and eliminate the simultaneous — and sometimes redundant — efforts of global partners.
By Samantha Schwartz • Nov. 9, 2021 -
$1.2 trillion infrastructure bill passes House, tying cyber to physical investments
The bill, which awaits President Joe Biden's signature, invests $2 billion in cybersecurity and formalizes the national cyber director's budget.
By Samantha Schwartz • Nov. 8, 2021 -
Pentagon revamps CMMC program to help SMBs meet compliance standards
Critics have decried the cybersecurity program as far too expensive and complex for thousands of defense contractors struggling to shield data from nation states.
By David Jones • Nov. 5, 2021 -
SEC to 'dig deeper' in cybersecurity enforcement
The commission's guidance from 2018 foreshadowed many recent cybersecurity enforcement actions by the agency's Cyber Unit.
By Jim Tyson • Nov. 5, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
CISA wants to identify the most vulnerable critical infrastructure
The agency is basing its analysis on economic and network centrality, as well as "logical dominance in the national critical functions," Director Jen Easterly said.
By Samantha Schwartz • Nov. 1, 2021 -
Chris Krebs, former CISA director and founding partner of Krebs Stamos Group, speaking with Gartner Distinguished VP Analyst Neil MacDonald during the virtual Gartner IT Symposium/Xpo Wednesday. Retrieved from Gartner IT Symposium/Xpo on Oct. 20, 2021
Government can demand stronger product security, Krebs said. It could help private sector, too
The federal government can use the power of the purse to leverage security improvements, which could benefit businesses at large, according to former CISA Director Chris Krebs.
By Samantha Schwartz • Oct. 22, 2021 -
Cyberattacks spur demand for cyber insurance: Moody's
"This is a critical area that we're challenged with," Securities and Exchange Commission Chair Gary Gensler said, describing the agency’s sharper focus on cyber risk.
By Jim Tyson • Oct. 22, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
Federal agencies warn of ransomware targeting water, wastewater treatment plants
Months after the attack on a Florida water treatment plant, the FBI, CISA and other agencies are concerned about a new round of threats to vulnerable municipal sites.
By David Jones • Oct. 18, 2021 -
2021 ransomware bitcoin activity eclipses last year, Treasury finds
The number of suspicious activity report transactions is already up 30% over 2020 numbers and the agency has tracked billions of dollars in outgoing bitcoin payments potentially linked to ransomware.
By Samantha Schwartz • Oct. 18, 2021 -
Ransomware summit takeaways: Pledges to disrupt safe havens, money laundering
The State Department is in talks with Russia, however, some U.S. experts warn the Biden administration needs to take more forceful action out in the open.
By David Jones • Oct. 15, 2021