• Senate panel signs off on cybersecurity bill

    The Senate Commerce Committee has approved a cybersecurity bill aiming to bolster protection of U.S. critical infrastructure. The full Senate will vote on the bill by the end of the year. The bill codifies parts of of President Obama’s February 2013 cybersecurity executive order. Among other things, the executive order instructs the National Institute of Standard and Technology (NIST) to draft a set of cybersecurity practices and standards.

  • Cisco’s $2.7 billion acquisition of Sourcefire signals a trend

    Cisco Systems’ $2.7 billion acquisition of Sourcefire, a Columbia, Maryland-based cybersecurity firm, may be the start of trend, as firms are looking to keep hackers at bay in a more connected world. The Maryland and northern Virginia areas around Washington, D.C. have become a hub for cybersecurity companies.

  • Cars’ computers could be the next targets of cyberattacks

    Computers, known as Electronic Control Units (ECUs), were first installed more than thirty years ago, during the first gas crisis, to serve as computerized carburetors. Eventually these computers were upgraded for innovations like cruise control and anti-lock brakes. In modern cars, ECUs “talk” to each other, and “listen” and respond to the messages they receive, over an open network, making them vulnerable to hacking, and potentially dangerous.

  • Black Hat event highlights vulnerability of U.S. critical infrastructure

    Cybersecurity researchers at the Black Hat conference now going on in Las Vegas, will demonstrate how hackers can gain access to U.S. critical infrastructure, and even cause explosions in oil and gas facilities, by altering the readings on wireless sensors used by the oil and gas industry. The faulty sensors typically cost between $1,000 and $2,000 each, and hundreds or even thousands of them are used at a single oil, gas, or water facility.

  • NIST seeking comments on energy industry security scenarios

    The National Cybersecurity Center of Excellence (NCCoE) works with industry, academic, and government experts to create open, standards-based, modular, end-to-end solutions to cybersecurity challenges that are broadly applicable across a sector. The solutions are customizable to the needs of individual businesses, and help them more easily comply with relevant standards and regulations. The work is organized around use cases that describe sector-specific challenges.

  • Senate panel to vote this week on cybersecurity bill

    The Senate Commerce Committee will this week vote on an industry-backed cybersecurity bill before Congress takes an August recess. Last year the Senate twice tried, and failed, to pass a cybersecurity bill because of GOP opposition to it. GOP lawmakers objected to a bill imposing mandatory cybersecurity standards on industry, and instead called for a bill which would make the adoption of cybersecurity standards voluntary. The bill now being considered in the Commerce Committee calls for industry and NIST to develop a cybersecurity framework for industry (something NIST is already doing following a presidential executive order), and for industry voluntarily to adopt it.

  • Overconfident, introverted people more likely to be e-mail phishing victims

    New study shows that people who are overconfident, introverted, or women are less able accurately to distinguish between legitimate and phishing e-mails. Phishing is the use of fraudulent e-mail correspondence to obtain passwords and credit card information, or to send viruses.

  • Cost to U.S. of cybercrime lower than earlier estimates

    The Center for Strategic and International Studies (CSIS) and security firm McAfee published a revision of McAfee’s previous estimate of the cost of cybercrime to the United States, reducing the amount from $1 trillion to $100 billion. Experts say this should not be a reason for complacency.

  • White House considering incentives for cybersecurity compliance

    The Obama administration is considering whether to back tax breaks, insurance perks, and other legal benefits for companies which bolster their digital defenses. The incentives, which include limited protections from legal liability and tax incentives, would be set up to persuade  power plants, water systems, chemical plants, and other critical infrastructure companies to comply with the voluntary cybersecurity rules which are being drafted as part of President Obama’s cybersecurity executive order.

  • UN warns regulators of mobile phone vulnerabilities

    The United Nations  is warning telecommunications regulators and government agencies  about significant vulnerabilities in cell phone technology which would allow hackers to attack at least half a billion mobile phones worldwide.

  • Budget cuts force DHS to scale back cybersecurity programs

    Sequestration-mandated federal budget cuts are beginning to have an effect on DHS cybersecurity efforts. Since March, the department has been forced to cancel two conferences and three training sessions for utility companies on how to defend against cyberattacks.Security experts are concerned that the budget cuts are affectingimpacting cybersecurity efforts at a time where more money needs to be put into securing critical infrastructure.

  • Are nuclear weapons safe from cyber-attacks?

    Research will look into whether today’s nuclear weapons are safe from computer hacking. Specifically, the research seeks to address the question of whether the ability to use and the confidence in nuclear weapons is being eroded by new cyber capabilities being developed by an increasingly large range of actors.

  • Spending on cybersecurity for critical infrastructure to reach $46 billion by end of 2013

    The digitization of critical infrastructures has provided substantial benefits — improved productivity, better connectivity, greater efficiencies. Yet this digitization also carries significant risks. Always-on Internet connectivity has ushered in a new cyber-age in which the stakes are higher. Better to shield critical infrastructure, cyber security spending for critical infrastructure protection will hit $46 billion globally by the end of 2013.

  • U.S. research universities subject to sustained cyberattack campaign by China

    Leading U.S. research universities report that they have been subject to millions of Chinese hacking attempts weekly. The Chinese are aware that universities, and the professors who do research under the schools’ auspices, receive thousands of patents each year in areas such as prescription drugs, computer chips, fuel cells, aircraft, medical devices, food production, and more. The Chinese government-sponsored cyberattacks on American research universities are an expansion of efforts by China to steal information that has commercial, political, or national security value.

  • McAfee’s Phyllis Schneck leading candidate for DHS cybersecurity post

    Phyllis Schneck, the vice president and chief technology officer for public sector at McAfee, is the likely choice to be the next deputy undersecretary for cybersecurity at DHS. The DHS deputy undersecretary for cybersecurity oversees DHS’s cyber operations, including its relationship with private businesses which run utilities and critical infrastructure.