Current Issues
Cybersecurity
Marshals Service Cyber Intrusion
The US Marshals Service (USMS), an agency within the Department of Justice, was hacked during February 2023 ...
_________________________
China
Dueling Restrictions on Technology
Politico is reporting (April 18) that the Biden Administration is nearing completion of a new Executive Order (EO) intended to further restrict China’s access to US technology ...
________________________
Russia & Ukraine
US Military Assistance to Ukraine
The US Defense Department announced (June 13) its latest military support package. The package is valued at $325 million, and comes just four days after the release ...
_________________________
Research & Analysis
Organizational Assessment: the National Counterterrorism and Security Center
Senate Select Committee on Intelligence
This report (September 2022) provides the results of a review by the staff of the Senate Select Committee on Intelligence on foreign intelligence threats. Among the findings: foreign intelligence entities are targeting the public and private sectors alike, including the financial sector, the U.S. industrial base, academic entities, U.S. government departments and agencies that are not part of the intelligence community, and national laboratories; and that today’s adversaries have access to a much wider variety of tools for stealing information, influencing U.S. officials or inflaming social and political tensions than in the past, including nontraditional human, cyber, advanced technical, and open source intelligence operations to collect against U.S. plans and policies, sensitive technology, personally identifiable information, and intellectual property, as well as to influence U.S. decision-making and public opinion.
_________________________
Are Blockchains Decentralized? Unintended Centralities in Distributed Ledgers
Trail of Bits
This report (June 2022), commissioned by the Department of Defense, to examine vulnerabilities in blockchain finance. Among other things, the report found that it only takes four entities to disrupt Bitcoin and only two to disrupt Ethereum; that 60% of all Bitcoin traffic moves through just three ISPs; and, that outdated and unencrypted software and blockchain protocols were identified.
_________________________
Impact of Tech in 2022 and Beyond
IEEE
This website of IEEE provides the results of its survey of tech industry leaders on critical technology trends and issues important to the industry for 2022. Among the findings are that manufacturing, financial services, healthcare and energy will be the sectors most impacted by technology, and that cybersecurity is consistently reported as one of the highest concerns.
_________________________
Consumer Privacy: Changes to Legal Framework Needed to Address Gaps
General Accountability Office (GAO)
This GAO report assesses the legal framework underpinning current personal information protection laws, identifies known gaps, and recommends that Congress take action to develop a Federal privacy framework in law and regulation.
_________________________
Microsoft Digital Defense Report: 2021
Microsoft
This report (October 2021) provides detail into what Microsoft is seeing with respect to cyber attacks, and also provides information into the strategies Microsoft and other companies must employ to address cyber threats.
_________________________
SolarWinds Cyberattack Demands Significant Federal and Private Sector Response
General Accountability Office (GAO)
This GAO article provides a summary of the 2019 SolarWinds cyberattack perpetrated by the Russian Foreign Intelligence Service.
_________________________
Supplemental Memo on Committee’s Investigation into Ransomware
House Committee on Oversight and Reform - Majority Staff
This memorandum (November 2021) of the majority staff of the House Committee on Oversight and Reform summarizes findings from recent ransomware attacks. The memorandum concludes that security lapses were small but that these led to major breaches, that there were a lack of clear points of contact in the Federal Government, and that pressure existed on companies to pay ransoms quickly.
_________________________
Cybersecurity: Federal Actions Urgently Needed to Better Protect the Nation's Critical Infrastructure
General Accountability Office
This GAO report (December 2021) summarizes current and past actions by the Federal Government to improve cybersecurity. The key future actions GAO identifies as needed include developing and executing a comprehensive national cyber strategy, and strengthening the federal role in protecting the cybersecurity of critical infrastructure.
_________________________
Key Federal Programs
Cybersecurity and Critical Infrastructure Grants [FEMA - DHS]
This Year (FY 22)
Budget Proposal (FY 23)
Enacted (FY 23)
% Change
$0
$0
---
---
Supplementals (FY 21-22)
$200,000,000
Cybersecurity, Energy Security, Emergency Response [DOE]
This Year (FY 22)
Budget Proposal (FY 23)
Enacted (FY 23)
% Change
$185,804,000
$202,143,000
---
---
Supplementals (FY 21-22)
$150,000,000