America’s drinking water systems have a hard-to-swallow cybersecurity problem

November 19, 2024 at 03:02PM A recent EPA study found that nearly one-third of U.S. drinking water systems have cybersecurity vulnerabilities, affecting approximately 82.7 million people. The agency lacks a tracking system for potential attacks, relies on DHS for incident reporting, and faces ongoing challenges in enhancing cybersecurity amidst aging infrastructure. ### Meeting Takeaways: 1. … Read more

Jen Easterly, CISA Director, to Step Down on Inauguration Day

November 18, 2024 at 03:56PM Jen Easterly, director of CISA, will resign on Inauguration Day as part of a transition to a Trump administration. During her tenure, she addressed significant cybersecurity incidents, including the Colonial Pipeline attack, and implemented new initiatives. Future plans for CISA remain uncertain amid calls from Republicans for mission restrictions. ### … Read more

300 Drinking Water Systems in US Exposed to Disruptive, Damaging Hacker Attacks

November 18, 2024 at 08:34AM A recent EPA report reveals that over 300 drinking water systems serving 110 million people in the US face cybersecurity vulnerabilities, risking service disruptions and data breaches. The assessment identified critical weaknesses in IT infrastructure and highlighted a lack of effective incident reporting and coordination within the EPA and other … Read more

TSA Proposes Cyber Risk Mandates for Pipelines, Transportation Systems

November 14, 2024 at 09:01PM The TSA has proposed new cybersecurity rules for pipeline, railroad, bus, and public transportation systems, enhancing existing frameworks. Affected operators must implement cyber risk management programs, report incidents, and maintain security measures. This initiative aims to boost cybersecurity resilience, with public comments accepted until February 2, 2025. ### Meeting Takeaways … Read more

CISA Releases Its First Ever International Strategic Plan

November 13, 2024 at 05:58PM CISA has launched its first International Strategic Plan for 2025-2026, aimed at enhancing the security and resilience of critical infrastructure through international collaboration. The plan outlines three key goals: bolstering foreign infrastructure resilience, strengthening cyber defense, and unifying international coordination efforts, emphasizing global partnership importance. **Meeting Takeaways: CISA’s 2025–2026 International … Read more

Public sector cyber break-ins: Our money, our lives, our right to know

November 4, 2024 at 05:34AM Transport for London experienced a significant cyber attack in September, exposing customer data and affecting ticketing systems. Initial claims of minimal damage were contradicted by customer complaints. The piece argues for greater transparency in public sector cybersecurity, suggesting the need for independent investigations to improve accountability and prevent future breaches. … Read more

Feds investigate China’s Salt Typhoon amid campaign phone hacks

October 28, 2024 at 04:09PM The FBI is investigating cyberattacks by Chinese-linked group Salt Typhoon on US telecoms, targeting phones of prominent political figures including Kamala Harris and Donald Trump. Affected companies, like Verizon and AT&T, are under scrutiny, prompting questions from lawmakers about their security measures amid rising cyber threats linked to China. ### … Read more

Cybersecurity Isn’t Easy When You’re Trying to Be Green

October 25, 2024 at 09:06AM Renewable energy companies are less prepared for cybersecurity threats compared to traditional energy firms. A study revealed their median score as 85, below the oil and gas industry’s 94. The increased internet connectivity of renewable systems exposes them to risks, especially from third-party breaches, raising concerns for future cybersecurity defenses. … Read more

The US Needs a Better Energy Grid to Win the AI Arms Race

October 23, 2024 at 10:32AM The growing demand for electricity from data centers poses significant challenges for the U.S. as it competes globally in AI. Cyberattacks and climate change further threaten energy infrastructure. Federal initiatives aim to address these issues, but more robust, security-focused measures are essential to ensure resilience and maintain leadership in AI … Read more

American Water Reconnects Its Network Taps After Cyber Incident

October 11, 2024 at 04:53PM American Water, the largest US water utility, is reactivating its systems after a cyber incident reported on October 7. The company confirmed no impact on its services and resumed standard billing. This incident underscores vulnerabilities in critical infrastructure, emphasizing the need for improved cybersecurity measures across the industry. ### Meeting … Read more