U.S.

Latest

U.S.

Spy satellite digital image showing government surveillance

New US Privacy Bill Focuses On Ending Domestic Government Surveillance Overreach At All Levels

November 13, 2023

Drawing on terms first proposed in a series of stalled-out data privacy bills that date back to at least 2018, the Government Surveillance Reform Act of 2023 (GSRA) narrows the focus specifically to warrantless government interception at all levels from federal to local.

Computer keyboard with China flag showing Chinese hackers theft of Microsoft signing key

Cyber Security News

Microsoft Releases Details of Theft of Signing Key by Chinese Hackers

September 11, 2023

Microsoft has traced the signing key theft back to a "crash dump" error. A breach of a Microsoft engineer's work account by the Chinese hackers then yielded access to the crash dump and the embedded signing key.

Digital shields over U.S. map showing implementation plan for cybersecurity strategy

Cyber Security News

White House Cybersecurity Strategy Implementation Plan Released: 65 Mandatory Initiatives, Increased Public-Private Partnerships

July 18, 2023

The National Cybersecurity Strategy Implementation Plan (NCSIP) establishes 65 high-impact initiatives that agencies will be required to meet within set timelines for each. A greater degree of public-private partnership is also being promoted.

Chinese National Flag overlaid on micro chip showing Chinese hackers in US critical infrastructure

Cyber Security News

Microsoft Threat Intelligence: Chinese Hackers Are “Living Off The Land” Inside US Critical Infrastructure

May 30, 2023

Microsoft reports a long-term campaign by Chinese hackers that has burrowed into a number of different aspects of US critical infrastructure, with the eventual goal being the creation of a system of widespread disruption that could be 'switched on' during another global crisis or a conflict between the two nations.

View of a large coal-fired power plant showing critical infrastructure warning of ransomware attacks by CISA

Cyber Security News

New CISA Program to Warn Critical Infrastructure Companies of Vulnerabilities That Could Invite Ransomware Attacks

March 28, 2023

CISA notified 93 critical infrastructure organizations of the presence of a vulnerability that could lead to ransomware attacks, and plans to scale up the program and provide more warnings in the coming months.

Capitol in Washington at night showing health data breach affecting members of Congress

Cyber Security News

Health Data Breach Exposes Members of Congress, 170K Records Offered on Underground Forum

March 13, 2023

A health data breach appears to have exposed the sensitive personal information of members of Congress and their employees. DC Health Link is used by many (but not all) members and their assorted staff.

Aerial view of wastewater treatment plant showing cybersecurity requirements for public water systems

Cyber Security News

US Public Water Systems Subject to New Cybersecurity Requirements as EPA Publishes Mandate

March 9, 2023

The EPA memo frames vulnerabilities in public water systems as a potential point of contamination, and thus a public health threat. The new cybersecurity requirements are part of an order to include new elements in periodic sanitary surveys.

Data Privacy News

TikTok Ban Requires Removal of the App From Government Devices by End of March

March 7, 2023

The White House has ordered federal agencies to remove TikTok from government devices within 30 days. The TikTok ban includes any app made by parent company Bytedance, and extends to government contractors to be implemented over a longer period of time.

President Joe Biden giving speech showing cybersecurity strategy

Cyber Security News

Biden Administration Releases National Cybersecurity Strategy: Incentivize Long-Term Defense Investment, More Aggressive Moves Against International Cyber Threats

March 6, 2023

Much of the new cybersecurity strategy addresses critical infrastructure companies, which were already in the administration's crosshairs, but software creators are also facing the prospect of a much greater degree of liability than in the past.

EU flags outside European Parliament showing opposition to EU-US data transfer framework

Data Protection News

European Parliament Committee Rejects Proposed EU-US Data Transfer Framework

February 27, 2023

The central objection raised is a predictable one, and one that some analysts believe will inevitably cause the EU-US data transfer proposal to fail yet another court challenge if it makes it to implementation: the lack of a federal-level data privacy law in the US.

U.S.

New US Privacy Bill Focuses On Ending Domestic Government Surveillance Overreach At All Levels

Microsoft Releases Details of Theft of Signing Key by Chinese Hackers

White House Cybersecurity Strategy Implementation Plan Released: 65 Mandatory Initiatives, Increased Public-Private Partnerships

Microsoft Threat Intelligence: Chinese Hackers Are “Living Off The Land” Inside US Critical Infrastructure

New CISA Program to Warn Critical Infrastructure Companies of Vulnerabilities That Could Invite Ransomware Attacks

Health Data Breach Exposes Members of Congress, 170K Records Offered on Underground Forum

US Public Water Systems Subject to New Cybersecurity Requirements as EPA Publishes Mandate

TikTok Ban Requires Removal of the App From Government Devices by End of March

Biden Administration Releases National Cybersecurity Strategy: Incentivize Long-Term Defense Investment, More Aggressive Moves Against International Cyber Threats

Data Breach Hits AssuranceAmerica Exposing Personal Information of Nearly 7 Million People

Data Breach at Aflac Japan Impacts 4.38 Million Customers and Sales Agents

Cyber Attack at Mount Royal University Disrupts Operations, Cybercrime Gang Demands $1.9 Million Ransom

Inside Sources Claim CISA is Using Mythos to Find Security Vulnerabilities Despite Government Ban