President Joe Biden has warned that Russia could launch a wave of cyber attacks targeting the US.
Biden previously warned about the potential that Russia could conduct malicious cyber activity against the US, including as a response to the unprecedented economic costs the country imposed on Russia, calling it part of the country's playbook. The president reiterated the warnings in a statement published this week, based on evolving intelligence that the Russian government is exploring options for potential cyber attacks.
Biden called it a critical moment to accelerate work to improve domestic cyber security and bolster national resilience. He underlined that his administration has worked to strengthen the nation’s cyber defences, mandating cyber security measures for the government and critical infrastructure sectors, as well as creating public-private partnerships to enhance security across all critical infrastructure.
The president added that his administration will continue to use every tool to deter, disrupt, and if necessary, respond to cyber attacks against critical infrastructure.
However, he warned the government can’t defend against the threat alone. Most of the US’s critical infrastructure is owned and operated by the private sector and owners and operators must accelerate efforts to lock their digital doors, underlined Biden.
“If you have not already done so, I urge our private sector partners to harden your cyber defences immediately by implementing the best practices we have developed together over the last year,” said Biden.
RELATED RESOURCE
Identity is key to stopping these five cyber security attacks
Many attacks begin with the same weakness: user accounts
“You have the power, the capacity, and the responsibility to strengthen the cyber security and resilience of the critical services and technologies on which Americans rely. We need everyone to do their part to meet one of the defining threats of our time — your vigilance and urgency today can prevent or mitigate attacks tomorrow.”
The government has also been implementing legislation to bolster the nation’s cyber security. A bill aiming to force critical infrastructure providers to declare when they have experienced a cyber attack was approved by the Senate earlier this month. Once signed into law by Biden, it looks to enhance the nation’s ability to combat ongoing cyber security threats against critical infrastructure.
Critical infrastructure owners will report to CISA within 72 hours if they’re experiencing a substantial cyber attack, and within 24 hours of making a ransomware payment.
-
Bigger salaries, more burnout: Is the CISO role in crisis?In-depth CISOs are more stressed than ever before – but why is this and what can be done?
-
Cheap cyber crime kits can be bought on the dark web for less than $25News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
-
UK cyber experts on red alert after Salt Typhoon attacks on US telcosAnalysis The UK could be next in a spate of state-sponsored attacks on telecoms infrastructure
-
Healthcare data breaches are out of control – here's how the US plans to beef up security standardsNews Changes to HIPAA security rules will require organizations to implement MFA, network segmentation, and more
-
The US could be set to ban TP-Link routersNews US authorities could be lining up the largest equipment proscription since the 2019 ban on Huawei networking infrastructure
-
US government IT contractor could face death penalty over espionage chargesNews The IT pro faces two espionage charges, each of which could lead to a death sentence or life imprisonment, prosecutors said
-
US identifies and places $10 million bounty on LockBit, Hive ransomware kingpinNews Mikhail Pavlovich Matveev was linked to specific ransomware attacks, including a 2021 raid on the DC police department
-
Breach at US Transportation Department exposes 240,000 employee recordsNews An investigation is underway into the breach, which affected former and current employee data
-
IRS mistakenly publishes 112,000 taxpayer records for the second timeNews A contractor is thought to be responsible for the error, with the agency reportedly reviewing its relationship with Accenture
-
US begins seizure of 48 DDoS-for-hire services following global investigationNews Six people have been arrested who allegedly oversaw computer attacks launched using booters
