On Cyber-Attacks and Recent Events
Photo by Michael Dziedzic
The following are recent comments on ransomware and cyber-threats - from the private and public sectors.
Last week, FBI Director Christopher Wray said:
“There are a lot of parallels [with 9/11 terrorists], there’s a lot of importance, and a lot of focus by us on disruption and prevention …
”There’s a shared responsibility, not just across government agencies but across the private sector and even the average American …The scale of this problem is one that I think the country has to come to terms with …”
JBS, the world's largest producer of beef, pork and chicken, said:
"[It had] determined that it was the target of an organized cybersecurity attack, affecting some of the servers supporting its North American and Australian IT systems …
"Resolution of the incident will take time, which may delay certain transactions with customers and suppliers."
In Massachusetts, the Steamship Authority said:
“The Woods Hole, Martha's Vineyard and Nantucket Steamship Authority has been the target of a ransomware attack that is affecting operations as of Wednesday morning. As a result, customers traveling with us today may experience delays.
“As we continue to work through our cyber-attack issues, we are posting our 2021 MV fares for those customers who need to buy tickets at the ticket offices. Please be prepared to bring cash if you need to buy a ticket, as credit card service is limited.”
Scripps Health, in a statement, said:
“We determined that an unauthorized person did gain access to our network, deployed malware, and, on April 29, 2021, acquired copies of some of the documents on our systems …
"We were able to access a limited number of documents involved in the incident and, after a thorough review, determined that some of those documents contained certain patient information.
"As the investigation is ongoing, we do not yet know the content of the remainder of documents we believe are involved, though we are working with third-party experts to determine those facts as quickly as possible."
Alejandro N. Mayorkas, U.S. Secretary of Homeland Security, said:
“The cybersecurity landscape is constantly evolving and we must adapt to address new and emerging threats.
"The recent ransomware attack on a major petroleum pipeline demonstrates that the cybersecurity of pipeline systems is critical to our homeland security. DHS will continue to work closely with our private sector partners to support their operations and increase the resilience of our nation’s critical infrastructure.”
Note: The comments focus on Colonial Pipeline, which supplies about 45 percent of the fuel in the eastern U.S.
Anne Neuberger, U.S. Deputy National Security Advisor for Cyber and Emerging Technology, said:
“No company is safe from being targeted by ransomware, regardless of size or location …
"Much as our homes have locks and alarm systems and our office buildings have guards and security to meet the threat of theft, we urge you to take ransomware crime seriously and ensure your corporate cyber defenses match the threat.
“Business executives should immediately convene their leadership teams to discuss the ransomware threat and review corporate security posture and business continuity plans to ensure you have the ability to continue or quickly restore operations.“
OUR TAKE
As the use of networked devices and automation increase, our data and our systems are more vulnerable.
To address the vulnerability challenges requires better system testing, timely software updates, using multifactor authentication security, and more.
The need to "do something" about the problem will confront debates about the role of government, personal privacy rights, and the potential weakness of free-market approaches.