-
What's the Deal with the Log4Shell Security Nightmare?
What started out as a Minecraft prank, has now resulted in a 5-alarm security panic as administrators and developers around the world desperately try to fix and patch systems before the cryptocurrency miners, ransomware attackers and nation-state adversaries rush to exploit thousands of software packages. Nicholas Weaver writes that “Not only does the vulnerability affect thousands of programs but the exploitation of this vulnerability is very straightforward. Attackers are already starting to launch widespread attacks. Further compounding the problem is the huge diversity of vulnerable systems, so those responsible for defending systems are going to have a very bad Christmas.”
-
-
Texas Energy Regulators, Gas Industry Try to Reassure the Public That the State’s Power Grid Is Ready for Winter
As state regulators and the companies that power the grid take steps to avoid another catastrophe like February’s winter storm, climate experts say this winter will likely be milder.
-
-
Human and Economic Impacts of Covid-19
The COVID-19 pandemic has altered the behavior of businesses and households. Those behavioral changes, intensified by government actions like mandatory closures, have had a reverberating impact on the U.S. economy.
-
-
Why the FCC Expelled a Chinese Telecom for National Security Risks
After months of investigating Chinese state-owned telecommunications companies for national security risks, the Federal Communications Commission (FCC) on Oct. 26 issued an order on one, China Telecom: It can no longer provide telecommunications services in the United States. But Justin Sherman writes that “the move also highlighted that there are many security risks at play with respect to certain foreign telecommunications companies, and mitigating one of those risks still leaves other risks in play.”
-
-
Can Europe Compete with China's Belt and Road Initiative?
The European Union this week launched a $340 billion “Global Gateway” fund to boost global infrastructure, which analysts say is aimed at rivaling China’s Belt and Road Initiative. But can the EU’s project compete with Beijing’s billions?
-
-
“People Should Probably Be Worried”: Texas Hasn’t Done Enough to Prevent Another Winter Blackout, Experts Say
Natural gas powers the majority of electricity in Texas, especially during winter. Some power companies say the state’s gas system is not ready for another deep freeze.
-
-
Stacked Deep Learning: Deeper Defense against Cyberattacks
Internet-based industrial control systems are widely used to monitor and operate factories and critical infrastructure. Moving these systems online has made them cheaper and easier to access, but it has also made them more vulnerable to attack. Stacked deep learning offers a better way to detect hacking into industrial control systems.
-
-
Big Batteries on Wheels: Zero-Emissions Rail While Securing the Grid
Trains have been on the sidelines of electrification efforts for a long time in the U.S. because they account for only 2 percent of transportation sector emissions, but diesel freight trains emit 35 million metric tons of carbon dioxide annually and produce air pollution that leads to $6.5 billion in health costs, resulting in an estimated 1,000 premature deaths each year. Researchers show how battery-electric trains can deliver environmental benefits, cost-savings, and resilience to the U.S.
-
-
Chinese Force Labor Connections in Global Retail Brands’ Supply Chains
More than 100 global retail brands could be at risk of using cotton that is produced by Uyghur forced labor according to new research. The findings suggest dozens of well-known international brands are at risk of using cotton that is produced or processed by forced labor in the Xinjiang Province in China.
-
-
How to Fix Global Supply Chains for Good
Truck-driver shortages, “lean” inventories, and an overreliance on China plagued global supply chains long before the pandemic. Permanently addressing these and other issues will help the United States and rest of the world better cope with the next shock.
-
-
Congress Restarts Push for China Legislation by Year’s End
Lawmakers are renewing a push to pass legislation that would boost U.S. competition with China, amid rising concerns about the global supply chain. Addressing U.S. competition with China is one of the few areas of broad bipartisan support on Capitol Hill, although lawmakers differ on the approach.
-
-
Supply Chain Disruptions—the Risks and Consequences
Supply chain disruptions cause general economic disruption and key commodity shortages, which then in turn can, in fact, drive aggressive national behavior and international instability. And ironically, this reactive aggressive national behavior can happen even if the health of a national economy itself depends upon continued international economic interdependence. Indeed, this very interdependence can create vulnerabilities.
-
-
Interpol Unveils Emerging Cyberthreats
The exceptional COVID-19 crisis has fueled the increase of cybercrime in all its forms, while grey infrastructure serves to facilitate the proliferation of crime.
-
-
German Engine Technology Used in Chinese Warships: Report
Engines developed in Germany can evade export control bans due to their status as a so-called dual-use technology, a German media investigation has revealed.
-
-
Protecting Infrastructure from Hackers
Two Midwestern universities lead an effort to form a coalition of regional research centers to work together to develop the region’s cyber defense talent with an eye to bolstering the defense of the region’s infrastructure against hackers.
-
More headlines
The long view
Need for National Information Clearinghouse for Cybercrime Data, Categorization of Cybercrimes: Report
There is an acute need for the U.S. to address its lack of overall governance and coordination of cybercrime statistics. A new report recommends that relevant federal agencies create or designate a national information clearinghouse to draw information from multiple sources of cybercrime data and establish connections to assist in criminal investigations.
Trying to “Bring Back” Manufacturing Jobs Is a Fool’s Errand
Advocates of recent populist policies like to focus on the supposed demise of manufacturing that occurred after the 1970s, but that focus is misleading. The populists’ bleak economic narrative ignores the truth that the service sector has always been a major driver of America’s success, for decades, even more so than manufacturing. Trying to “bring back” manufacturing jobs, through harmful tariffs or other industrial policies, is destined to end badly for Americans. It makes about as much sense as trying to “bring back” all those farm jobs we had before the 1870s.
The Potential Impact of Seabed Mining on Critical Mineral Supply Chains and Global Geopolitics
The potential emergence of a seabed mining industry has important ramifications for the diversification of critical mineral supply chains, revenues for developing nations with substantial terrestrial mining sectors, and global geopolitics.
Are We Ready for a ‘DeepSeek for Bioweapons’?
Anthropic’s Claude 4 is a warning sign: AI that can help build bioweapons is coming, and could be widely available soon. Steven Adler writes that we need to be prepared for the consequences: “like a freely downloadable ‘DeepSeek for bioweapons,’ available across the internet, loadable to the computer of any amateur scientist who wishes to cause mass harm. With Anthropic’s Claude Opus 4 having finally triggered this level of safety risk, the clock is now ticking.”