Page 7 - Solarwinds Attack News Today

GovInfoSecurity Twitter Image: Pixabay A bipartisan group of lawmakers is backing a legislative proposal that would create a program, similar to the National Guard, to deploy those with tech and security skills during significant cyberthreats, such as the recent SolarWinds supply chain attack and exploits of vulnerabilities in on-premises Microsoft Exchange servers. The Civilian Cyber Security Reserve Act would create a pilot program that would provide the departments of Defense and Homeland S...

BankInfoSecurity Twitter Get Permission The U.S. Cybersecurity and Infrastructure Security Agency and the National Institute of Standards and Technology have released a report providing insights on how to enhance supply chain security in the wake of the SolarWinds attack. The guidance released Wednesday, "Defending Against Software Supply Chain Attacks," offers recommendations on how to implement the NIST Cyber Supply Chain Risk Management Framework and the Secure Software Development Framewo...

It is largely unknown what the Pentagon is planning to do with the IP addresses, as well as why the government chose the unknown startup, Global Resource Systems LLC. Cybersecurity experts told Insider the Pentagon could be looking to do anything from lure in hackers and build up online government defenses to surveillance of US citizens and reconnaissance on foreign countries. When contacted for comment, a government spokesperson pointed Insider to a Friday statement from the Pentagons chief of...

BankInfoSecurity May 20, 2021 May 3, 2021 May 5, 2021 Twitter Reps. Jim Langevin (left) and Mike Gallagher want to give CISA $400 million more in funding. Several bipartisan congressional initiatives are seeking to expand the mission of the U.S. Cybersecurity and Infrastructure Security Agency. The recently announced proposals call for CISA to beef up its staff, provide additional incident response services to organizations outside the government, conduct a five-year national risk management c...

Date 27/04/2021 The New York State Department of Financial Services (“the Department” or “DFS”) today released a report on the Department’s investigation of the New York’s financial services industry’s response to the supply chain attack of the information technology (“IT”) company SolarWinds (“the SolarWinds Attack”). During the SolarWinds Attack, hackers corrupted routine software updates that were downloaded onto thousands of organizations’ information systems.�...

CISA Orders Agencies to Mitigate Pulse Secure VPN Risks Compliance Twitter Get Permission The U.S. Cybersecurity and Infrastructure Security Agency has issued an emergency directive requiring executive branch agencies to mitigate by Friday the risks posed by a zero-day vulnerability and three other recently patched flaws in Pulse Connect Secure VPN products. On Tuesday, Ivanti, the parent company of Pulse Secure, and the security firm FireEye warned that at least two nation-state attack group...

Get Permission The Biden administration is rolling out a 100-day plan to improve cybersecurity and address cyberthreats across the nations electrical grid. The White House says the program is part of a broader cybersecurity plan designed to address issues across the nations critical infrastructure. The 100-day initiative will involve government agencies that are responsible for the security of critical infrastructure as well as businesses and private utilities that oversee or own infrastructur...

Senators Push for Changes in Wake of SolarWinds Attack Compliance Twitter Director of National Intelligence Avril Haines testifies before the Senate Intelligence Committee. The SolarWinds supply chain attack that led to follow-on attacks on nine government agencies and 100 companies points to the need for a federal law requiring prompt breach notification, several senators said at a Wednesday hearing. At the hearing, members of the Senate Select Committee on Intelligence heard from the leaders...

President Joe Biden during the January inauguration (Source: Wikipedia) As the Biden administration makes final preparations over the next several weeks to respond to the attacks that targeted SolarWinds last year, the White House finds itself confronted by a second major cyberthreat: the hacking of Microsoft Exchange servers throughout the U.S. The unfolding attacks against Exchange email servers, which Microsoft and other security researchers announced this month, appear to number in the thou...

The twin hacking campaigns involve the US’s two most powerful cyberspace adversaries, and both have led to emergency meetings of the White House National Security Council, in part because of the unusually wide net cast by the attackers.