Cybersecurity, Privacy, & AI

Trending Now

Passing CMMC Is a Snapshot. Staying Compliant Is the Hard Part • Pentagon Suspends CMMC Phase Two Requirements, Launches Review of Program • How the Air Force Is Deploying AI From the Battlefield to the Back Office • AI-Generated Code Has Made Security Debt a Governance Problem • What the Pentagon’s New Post-Quantum Cryptography Directive Means for Defense Contractors

Published on May 20, 2021 • Cyber

CISA Learned of Pipeline Ransomware Attack from FBI, Not Colonial

ESB Professional | Shutterstock

Colonial Pipeline didn’t notify the Cybersecurity and Infrastructure Security Agency of its ransomware incident, and acting director Brandon Wales doesn’t think they would have if the FBI hadn’t alerted the agency. Senator Rob Portman (R-OH) questioned Wales about the attack during a hearing of the Senate Homeland Security and Governmental Affairs Committee. Committee chair Gary Peters (D-MI) also pressed representatives from the Departments of Commerce and Health & Human Services over what he considered inadequate notifications of their compromise by SolarWinds.

Source:

CyberScoop: Colonial Pipeline Didn’t Tell CISA About Ransomware Incident, Highlighting Questions About Information Sharing

Stay compliant and protected with daily updates on cybersecurity, data privacy, and federal oversight with our Cyber & Privacy newsletter, delivering up-to-the-minute intelligence Monday–Saturday — Subscribe here.