There is the need for additional cyber defenses of growing 5G networks – and we should expect to see increasing policy pressure around the vetting process for hardware and software that are crucial to these upgraded networks. This is raising the importance of supply chain risk management for the telecommunications industry.
CISA notified 93 critical infrastructure organizations of the presence of a vulnerability that could lead to ransomware attacks, and plans to scale up the program and provide more warnings in the coming months.
Recent ransomware attacks by identified Russian organized cybercrime groups like Vice Society and Ryuk have shed light on the critical need for companies to revamp security protocols, particularly within critical infrastructures such as healthcare, energy, and public services.
Much of the new cybersecurity strategy addresses critical infrastructure companies, which were already in the administration's crosshairs, but software creators are also facing the prospect of a much greater degree of liability than in the past.
Royal Mail Group warned of disruptions in international export services and stopped accepting parcels for international delivery after a LockBit “cyber incident” caused severe disruption to export services.
When industrial environments integrated connected systems into their assets, attack surfaces are expanded, opening once-closed critical infrastructure sites and the companies that manage them to attacks from threat actors.
Ukraine warns of Russian plans for massive cyber attacks on Ukraine's critical infrastructure to slow down the counteroffensive and those of Kyiv's allies in retaliation for support.
The United States Department of Justice (DOJ) has indicted three Iranian hackers for a campaign of attacks dating back to 2020, including critical infrastructure companies and government agencies.
CISA published an insight document for critical infrastructure organizations to prepare for the transition to new post-quantum cryptography standards that NIST will announce soon.
While cyber defense efforts like those backed by DoE are clearly a net positive for the nation, the prospective contributions of these and other efforts must be tempered by both practical assessment of the strategic context of foreign critical infrastructure attacks.










