Cyber Official Warns ‘American Way of Life’ at Risk From Hackers

Jen Easterly
Jen Easterly, director of the Cybersecurity and Infrastructure Security Agency, appears before the House Homeland Security Committee. (House Homeland Security Committee via YouTube)

[Stay on top of transportation news: Get TTNews in your inbox.]

A top U.S. cybersecurity official offered a dire warning to members of Congress Nov. 3, saying the “American way of life” faces serious risks amid the drumbeat of ransomware attacks and physical threats to the nation’s critical infrastructure.

Jen Easterly, director of the Cybersecurity and Infrastructure Security Agency, known as CISA, told the House Homeland Security Committee that “ransomware has become a scourge on nearly every facet of our lives, and it’s a prime example of the vulnerabilities that are emerging as our digital and our physical infrastructure increasingly converge.”

Her appearance, with National Cyber Director Chris Inglis, comes as the private sector and governments have grappled with pervasive cyberattacks during the last 12 months. Some attacks, including the Colonial Pipeline Co. breach in May, have led to gas shortages, disrupted supply chains and exposed federal systems to significant compromise.



Easterly’s testimony came after CISA issued a binding operational directive that would create a catalog of known exploited cybersecurity vulnerabilities and would require federal agencies to fix these flaws within specific time frames. It would apply to all software and hardware on federal information systems, including those managed by an agency or hosted by third parties.

While the directive would only apply to federal agencies, Easterly said in a statement she wants every organization to adopt the directive “and prioritize mitigation of vulnerabilities listed in CISA’s public catalog.”

Rep. John Katko (R-New York) said, “The volume of alerts, advisories, and directives goes to show the pervasiveness of vulnerabilities affecting owners and operators of critical infrastructure and federal networks.”

Inglis said that privately owned critical infrastructure, which accounts for 85% of the total, is “increasingly core to the government’s imperative to protect and provide for national security.”

“Shared defense is not a choice but an imperative,” Inglis said.

Both Katko, the top Republican on the panel, and Rep. Bennie Thompson (D-Miss.), the panel’s chairman, have placed a rare bipartisan emphasis on the importance of countering cybersecurity threats and offering praise for CISA’s efforts. President Joe Biden has called cybersecurity a “core national security challenge,” and has since rearranged parts of the U.S. government to reflect new priorities.

Image

National Cyber Director Chris Inglis says cyberattacks by Russia-based groups have declined since June. House Homeland Security Committee via YouTube)

Inglis told members of Congress that there has been a “discernible decrease” in cyberattacks by Russia-based groups since President Joe Biden met with Russian President Vladimir Putin in June.

“It’s too soon to tell whether that’s because of material efforts taken by the Russians or the Russian leadership,” he said. “It may well be that the transgressors in this space have simply kind of lain low understanding that this is — for the moment — a very hot time for them.”

“We need to make sure that the continues to be the case,” Inglis said.

Want more news? Listen to today's daily briefing below or go here for more info: