US State Department to establish cyber bureau
This comes as the country has experienced a number of high profile cyber attacks on its critical infrastructure in the last year
The US State Department is set to establish a cyber bureau after the country experienced a surge of cyber attacks on its critical infrastructure.
The Bureau of Cyberspace and Digital Policy will be led by a Senate-confirmed ambassador and will focus on three key areas: cyberspace security, international digital policy, and digital freedom.
The department hopes this will integrate the core security, economic, and values components of its cyber agenda. It also revealed its plans to establish a new special envoy for critical and emerging technology to lead the immediate technology diplomacy agenda with its allies and partners.
“The Bureau of Cyberspace and Digital Policy, that will include three sub-units focused on international cyberspace security – that’s cyber policy and negotiations, cyber deterrence, cyber operations, and capacity building – international digital policy – and so that includes, for example, engagement with the ITU, standard-setting bodies, promotion of trusted telecom systems, digital technology tracks and multilateral agenda – and digital freedom,” said Ned Price, State Department spokesperson.
The move comes as the US recovers from a number of high-profile cyber attacks, like the Colonial Pipeline attack in May which led to the shutdown of the US fuel pipeline. The company manages around 45% of the US east coast’s fuel supplies and was forced to suspend 5,500 miles of pipeline between Texas and New York after falling victim to ransomware from the DarkSide group.
RELATED RESOURCE
HP Wolf Security: Threat insights report
Equipping security teams with the knowledge to combat emerging threats
The following month, JBS Foods paid an $11 million ransom to hackers who compromised its IT systems. The company, the largest processor of meat in the world and produces close to a quarter of the US’s beef, fell victim to an attack at the end of May. The company confirmed it made the $11 million ransom payment in Bitcoin.
As part of its response to the growing threat, the US Treasury has also imposed sanctions on virtual currency exchange Suex for its alleged role in facilitating transactions for ransomware actors. The Treasury said in September that Suex facilitated transactions involving illicit proceeds from at least eight ransomware variants, underlining that over 40% of its transaction history is associated with illicit actors.
-
Companies are still paying ransoms to cyber criminals despite official adviceNews A Proofpoint survey found evolving ransomware techniques and the use of AI is exacerbating the situation for victims
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
