Content by Scott Ferguson

Senate Approves Chris Inglis as National Cyber Director

Scott Ferguson  •  June 18, 2021

The U.S. Senate has unanimously approved Chris Inglis as national cyber director. He assumes the role as the country is still reeling from a series of ransomware attacks and the SolarWinds supply chain attack. Meanwhile, confirmation of a new CISA director is on hold.

Senators Draft a Federal Breach Notification Bill

Scott Ferguson  •  June 18, 2021

A bipartisan group of senators is circulating a draft of a federal breach notification bill that would require federal agencies, federal contractors and businesses that have oversight over critical infrastructure to report significant cyberthreats to CISA within 24 hours of discovery.

Analysis: The Cyber Impact of Biden/Putin Summit Meeting

Scott Ferguson  •  June 17, 2021

After U.S. President Joe Biden and Russian President Vladimir Putin discussed cybersecurity issues at their Wednesday summit meeting in Geneva, security experts and analysts began sizing up what the next steps might be following what some are calling a "transformational moment."

DHS Preparing More Cybersecurity Requirements for Pipelines

Scott Ferguson  •  June 16, 2021

The Department of Homeland Security unit that's responsible for the safety of the nation's interstate pipelines is preparing new cybersecurity requirements for oil and gas companies in the wake of the Colonial Pipeline Co. ransomware attack.

NATO Endorses Cybersecurity Defense Policy

Scott Ferguson  •  June 15, 2021

The U.S. and its NATO allies endorsed a new cybersecurity defense policy during President Biden's visit this week with member states in Brussels. The policy agreement comes as Biden prepares to meet Russian President Vladimir Putin on Wednesday to discuss cybersecurity and other issues.

Will Ransomware Attacks Push Congress to Enact Regs?

Scott Ferguson  •  June 14, 2021

After hearings in the Senate and House on a spate of ransomware attacks that have put the nation's critical infrastructure in danger, some security experts say Congress may be poised to take action to create greater regulatory oversight of cybersecurity within certain industries.

Biden's Nominees Face Questions Over Cybersecurity Concerns

Scott Ferguson  •  June 10, 2021

President Joe Biden's nominees for White House cyber director and CISA director faced questions from senators during their confirmation hearing Thursday, including how the federal government should respond to a recent spate of ransomware attacks and other cyberthreats.

House Probes Specifics of Colonial Ransomware Attack

Scott Ferguson  •  June 9, 2021

Colonial Pipeline Co. CEO Joseph Blount returned to Capitol Hill on Wednesday to answer additional questions about his company's response to the ransomware attack that affected the firm's operations for nearly a week, as well as his decision to pay the attackers.

CISA Expanding Mandatory Vulnerability Disclosure Program

Scott Ferguson  •  June 8, 2021

CISA is preparing to expand its vulnerability research and disclosure program, which is now mandatory for nearly all executive branch agencies, by creating a vulnerability disclosure platform service. As part of this effort, the cybersecurity agency is partnering with Bugcrowd and EnDyna.

Where's the Beef? Ransomware Hit Highlights Cyber Problems

Scott Ferguson  •  June 4, 2021

The ransomware attack that disrupted operations at meat processing giant JBS has exposed cybersecurity shortcomings in the U.S. agricultural sector and food supply chain. Experts say the industry demands the level of security scrutiny given to the electrical grid and other critical infrastructure.

DOJ Seizes 2 Domains Linked to USAID Phishing Campaign

Scott Ferguson  •  June 1, 2021

The Department of Justice announced Tuesday that it has seized two domains that were used during a recent phishing campaign that targeted a marketing firm used by the U.S. Agency for International Development - USAID - to send malicious messages to thousands of potential victims.

Biden Budget Seeks to Invest Billions in US Cybersecurity

Scott Ferguson  •  May 29, 2021

The White House officially released its fiscal year 2022 budget proposal on Friday. The Biden administration is seeking to spend billions on cybersecurity, including $750 million for "lessons learned" from the SolarWinds attack. Officials also want to boost CISA's budget by $110 million.

SolarWinds Attackers Return With Fresh Phishing Campaign

Scott Ferguson  •  May 28, 2021

A Russian group that was behind the massive SolarWinds supply chain attack has returned with a fresh phishing campaign, according to Microsoft. This new campaign compromised a marketing firm used by the U.S. Agency for International Development - USAID - to send malicious messages to thousands.

DHS Unveils New Cybersecurity Requirements for Pipelines

Scott Ferguson  •  May 27, 2021

The Department of Homeland Security has issued a cybersecurity directive that requires the operators of oil and gas pipelines to report ransomware attacks and other security incidents to the government and take other security steps.

Federal Agencies Struggling With Supply Chain Security

Scott Ferguson  •  May 26, 2021

More than five months after the SolarWinds supply chain attack came to light, federal agencies continue to struggle with supply chain security, according to a top GAO official who testified before a House committee.