Election security review. US DHS cyber plans. France to upgrade security after cyberattacks on hospitals. Cyberspace ambassador?

Summary

By the CyberWire staff

At a glance.

US Election Infrastructure Government Coordinating Council reviews lessons from 2020.
US Department of Homeland Security outlines cybersecurity plans.
French government to upgrade security after cyberattacks on hospitals.
US Congressional calls for a cyberspace ambassador.

Election Council reviews 2020 successes and areas for growth.

Last week the US Election Infrastructure Government Coordinating Council (GCC) met to discuss “lessons learned,” according to Meritalk, lauding the “unprecedented level” of intergovernmental collaboration in 2020. In a statement shared by the Cybersecurity and Infrastructure Security Agency (CISA), the GCC said “the election community continues to be unified and committed to working together on election cybersecurity.”

US Homeland Security Secretary outlines cyber plans.

The US Department of Homeland Security (DHS) summarized Secretary Mayorkas’ cybersecurity agenda and upcoming cyber projects, which include international outreach, domestic speaking engagements, raising FEMA grants’ baseline cybersecurity spend, elevating CISA’s “Reduce the Risk of Ransomware” initiative, and promoting the Secret Service’s ransomware response capabilities. Public-private partnership, workforce development, and infrastructure renovation are additional priorities.

The bulletin, reprinted in Homeland Security today, highlighted recent DHS cyber successes, like the Secret Service’s arrest of more than one-thousand individuals suspected of cyber-enabled financial offenses in 2020, and the commencement of the Secure and Resilient Mobile Network Infrastructure venture. CISA also developed “shared cybersecurity services” available to Federal, state, local, tribal, and territorial entities; interrupted North Korean mischief; and instituted a Federal vulnerability disclosure program.

The Hill noted the positive response of the House Homeland Security Committee and Cybersecurity Subcommittee chairs: “For several years, the Federal government has underestimated the cyber threats posed to state and local networks and neglected the federal government’s responsibility to help defend them.” The representatives plan to reintroduce the State and Local Cybersecurity Improvement Act, which would set up a $400 million grant scheme.

France plans to upgrade cyber defenses after hospital hacks.

In the wake of two recent attacks on French hospitals that left staff taking notes on paper and forced providers to relocate patients and delay procedures, SecurityWeek says Paris is setting aside €500 million to enhance public and private cyberdefenses. The country’s National Cybersecurity Agency found a two-hundred-fifty percent uptick in ransomware attacks last year, with health care networks as a primary target.

Members of Congress call for a cyberspace ambassador.

The Wall Street Journal reports that a cohort of congressmen intends to reintroduce a revamped Cyber Diplomacy Act that would create a cyber ambassador in charge of a cyber bureau with an economic, security, and human rights purview. The ambassador would work to build norms through foreign diplomacy and domestic outreach. Advocates maintain the now-defunct Office of the Coordinator for Cyber Issues encouraged other countries to beef up their cyber diplomacy, and the US is now falling behind.

Former Secretary of State Pompeo last month established an alternative to the proposed bureau with a narrower security focus: the Bureau of Cyberspace Security and Emerging Technologies. New Secretary of State Blinken has made favorable noises about the alternative and is considering its possibilities.

Selected Reading

SBU site targeted in massive DDoS attack (UNIAN) The cyberattack has been ongoing for several days already.

Chinese spyware code was copied from America's NSA: researchers (Reuters) Chinese spies used code first developed by the U.S. National Security Agency to support their hacking operations, Israeli researchers said on Monday, another indication of how malicious software developed by governments can boomerang against their creators.

SolarWinds CEO: This could have happened to anyone (FCW) In what will be the first of several public appearances this week, Sudhakar Ramakrishna says his company will be transparent about the supply chain attack it suffered as a way to help other companies prepare for the next attack.

SolarWinds Cyberattack Cleanup Costs: SWI Earnings, Senate & House Hearings May Provide Clues (MSSP Alert) How much will SolarWinds cyberattack cost to clean up? SWI Q4 2020 earnings & SolarWinds CEO testimony during House & Senate hearings may provide cleanup cost clues.

Analysis | The Cybersecurity 202: SolarWinds hearing puts the company's new CEO in the hot seat (Washington Post) Sudhakar Ramakrishna is looking to reframe the conversation after the massive Russian hack.

SolarWinds CEO Recommends Liability Protections for Sharing Information about Incidents (Nextgov.com) The new CEO had a couple of other asks for Congress too.

In the Middle East, War Is Going Digital (Foreign Policy) And that should scare everyone.

How China’s Digital Silk Road Is Leading Countries Away from the United States (Defense One) Beijing is using technology products, markets, and training to secure influence with U.S. security partners, a IISS report finds.

China Censors the Internet. So Why Doesn’t Russia? (New York Times) The Kremlin has constructed an entire infrastructure of repression but has not displaced Western apps. Instead, it is turning to outright intimidation.

Facebook reverses ban on news pages in Australia (BBC News) Facebook will reverse a decision to block access to news content, Australia's government says.

Facebook to reverse news ban in Australia after reaching an agreement with the government (Computing) Facebook and Google unlikely to be punished as long as they can demonstrate a 'significant contribution' to local journalism

Facebook Reaches Deal With Australia to Restore News (Wall Street Journal) The company reached a deal with the Australian government to restore news pages to its platform. The agreement includes changes to legislation requiring more negotiations before arbitration kicks in.

Why Facebook Is Right to Pull the Plug on Australia (Foreign Policy) This isn’t about regulating Big Tech. It’s about fleecing foreigners for news that Australians no longer want to pay for.

Looking behind the UK's new Cybersecurity Council (Includes interview) (Digital Journal) The UK government has launched a new independent body to set standards that professionals in cybersecurity will have to meet, much like there are standards for professionals in accountancy, finance, etc. What does this entail?

Is Congress Spending Enough on Cybersecurity? (Dispatch) Recent developments underscore legitimate concerns about our capacity to defend against a growing threat.

Election Infrastructure Council Applauds Cyber Cooperation in 2020 Cycle (Meritalk) The Election Infrastructure Government Coordinating Council – whose leadership spans Federal, state, and local government election officials – applauded inter-government cooperation on implementing cybersecurity safeguards in the 2020 election cycle, and pledged to use lessons learned going forward to improve election security and resiliency.

Election Infrastructure Government Coordinating Council Holds Winter Meeting to Discuss Path Forward on Election Security and Resilience (CISA) The Election Infrastructure Government Coordinating Council (GCC) held its winter meeting virtually the afternoon of Thursday, Feb. 18, 2021, to discuss lessons learned from the 2020 election and ways to improve coordination between the federal government and state and local election officials.

Lawmakers Call for Ambassador to Represent U.S. in Cyberspace (Wall Street Journal) A group of congressional lawmakers are renewing their call for a cyber ambassador in the State Department, reviving a bill that created friction between Congress and the Trump administration.

Biden pledges international cooperation on cyber in speech (FCW) Biden addressed the global security forum for the first time as president last week when he called for the United States to cooperate with European allies on establishing cyberspace norms.

Biden Wants International “Rules” to Combat Alleged Russian, Chinese Cyberattacks (MSSP Alert) The United States & democratic nations must jointly frame the “norms of behavior in cyberspace,” President Biden asserts at virtual Munich Security Conference.

The Cybersecurity 202: Investigations into Russian, North Korean hackers are shaping Biden's foreign policy (Washington Post) The Biden administration is plunging ahead in a pair of high-profile cybersecurity investigations into North Korean and Russian hackers, shedding light on how it plans to crack down on foreign hackers after the Trump administration downplayed the issue in the 2016 election and its aftermath.

DHS Announces Steps to Advance President’s Commitment to Elevate Cybersecurity (Department of Homeland Security) Secretary Alejandro N. Mayorkas announced the many ways the Department of Homeland Security (DHS) will carry out President Biden’s vision to elevate cybersecurity across the government. DHS will lead efforts to mitigate risks to the United States, further strengthen its partnerships with the private sector, and expand its investment in the infrastructure and people required to defend against malicious cyber attacks as part of a whole-of-government effort.

DHS announces new measures to boost nation's cybersecurity (TheHill) The Department of Homeland Security (DHS) on Monday announced a range of steps it will take to bolster the nation’s cybersecurity posture, including increasing funding for key cybersecurity issues.

Mayorkas Sets Out Steps to Elevate Cybersecurity (Homeland Security Today) Secretary Alejandro N. Mayorkas has today announced the many ways the Department of Homeland Security (DHS) will carry out President Biden’s vision to elevate cybersecurity across the government.

CISA Welcomes New Members to Leadership Team (CISA) The Cybersecurity and Infrastructure Security Agency (CISA) announced today that three new administration appointees have joined the agency in leadership roles. Nitin Natarajan has joined CISA as its Deputy Director, Eric Goldstein as Executive Assistant Director for Cybersecurity, and Dr. David Mussington as Executive Assistant Director for Infrastructure Security.

Navy says ‘liking’ or sharing extremists’ posts on social media can get you in trouble (Navy Times) Here's how the Navy will conduct its stand-down addressing extremism in the ranks.

New York issues cyber insurance framework as ransomware, SolarWinds costs mount (CSO Online) The state looks to protect one of its core industries, which is threatened by mounting and potentially "unsustainable" losses due to the SolarWinds and ransomware attacks.