We’ve written a few times recently about municipalities, companies, and government agencies hit with ransomware attacks this year. In early July, it was reported that a court system in Georgia was attacked with ransomware, causing lawyers, court employees and the public to have to rely on “old school” paper to file pleadings and keep
Department of Homeland Security
Privacy Tip #162 – Cybersecurity Help for Small Businesses
Small businesses are targeted by hackers because they often do not have the resources to stay abreast of new schemes, or to protect against them with the latest technology or security solutions. Small businesses have historically struggled with data security, so any help is always welcome.
Recognizing that small businesses struggle with data security, the…
National Security, Technical and Legal Challenges for Counter-UAS Technology
National security concerns related to drones range from illicit intelligence gathering to smuggling drugs and guns over the border or into prisons, to attacks like those conducted by terrorist groups. However, currently, unmanned aerial systems (UAS) counter technology (or counter-UAS) legal authority is limited.
Only the Department of Defense (DOD) and Department of Energy (DOE)…
Department of Homeland Security Says the U.S. Isn’t Ready for the Growing Threat of Drones
Secretary of Homeland Security, Kirstjen M. Nielsen, wrote in an op-ed piece in the Washington Post, that the Department of Homeland Security (DHS) has been worrying about the dangers of drones for years; so much so, that DHS has sought legal authority in the past (and continues to do so) to protect the U.S.…
Russian Hackers Successfully Phished Hundreds of U.S. Companies Last Year
The Department of Homeland Security (DHS) has indicated that Russian hackers successfully attacked the energy, nuclear, aviation and critical manufacturing sectors through targeted phishing campaigns throughout 2017.
According to DHS, the coordinated attacks started in 2016 with one compromise that was dormant for a year until other infiltrations occurred. The hackers targeted real people by…
Russians Continue to Attack U.S. Energy and Power Sectors
Late last week, a joint statement by the Department of Homeland Security and the Federal Bureau of Investigation confirmed that the Russian government has been behind an ongoing targeted campaign to penetrate U.S. power plants and the electric grid.
Of course, this fact has been well known and has been reported on repeatedly in the…
The Report to the President for “Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats”
Back in January, a draft report from the U.S. Department of Commerce and the U.S. Department of Homeland Security was released to President Trump in order to address his May 11, 2017 Executive Order, which called for strengthening “Cybersecurity of federal Networks and Critical infrastructure”.
The Departments approached this issue by “hosting a workshop, publishing…
Remote Identification of Drones: For Commercial Operators Only or Hobbyists Too?
Last month, the Federal Aviation Administration (FAA) received recommendations regarding remote identification of drones in a report from the unmanned aircraft Identification and Tracking (UAS ID) Aviation Rulemaking Committee (ARC). One of the topics at issue: whether we need remote identification (ID) of all drones in the national airspace. Beyond the FAA, the Department of…
Energy and Critical Infrastructure Industries Warned of Increased Attacks by FBI and DHS
The FBI and Department of Homeland Security issued a joint statement on October 20 warning of an increased danger of a malicious “multi-stage intrusion campaign” to critical infrastructure industries, including the energy sector.
According to the warning, hackers are targeting company-controlled sites of different agencies to access information on equipment and designs, including “control-system capabilities”…
FERC Proposes New Cybersecurity Rules for Electric Grid
The Federal Energy Regulatory Commission (FERC) has proposed new rules to enhance cybersecurity for the electric grid in the U.S., which includes security management controls to specifically respond to risks associated with malware.
FERC suggested that the North American Electric Reliability Corporation, the nonprofit that helps regulate the U.S. electric utility industry, implement “mandatory controls…