Biden Wants Rules on Cybersecurity Sharpened after China, Russia Attacks

March 10, 2021 by Reece Nations
White House press secretary Jen Psaki speaks during a press briefing at the White House, Monday, March 8, 2021, in Washington. (AP Photo/Patrick Semansky)

WASHINGTON — Microsoft is placing the blame for a hack on its email software on China after President Joe Biden called on allied nations to create a new set of rules governing cybersecurity threats across the globe.

It is believed that a Chinese hacker group known as “Hafnium” orchestrated the breach by exploiting vulnerabilities in the Microsoft Exchange Server email software. The system is utilized by a wide range of industry sectors, including institutions of higher education, legal firms, defense contractors and infectious disease researchers, among many others. 

The hack was carried out using a “web shell,” an interface that allows infiltrators to remotely access web servers by executing arbitrary commands. Microsoft has since patched the flaws in the system, but the full extent of damage dealt by the widespread breach is still unknown. 

“This is an active threat,” White House Press Secretary Jen Psaki told reporters on Friday, March 5. “Everyone running these servers – government, private sector, academia – needs to act now to patch them.” 

News of the Microsoft breach broke as lawmakers were still debating their response to the SolarWinds hack allegedly tied to the Russian government last year. Last month, cybersecurity experts testified to the House Oversight and Reform Committee that the SolarWinds attack affected the software of roughly 17,000 of the company’s customers and impacted American technology companies and government agencies, The Well News previously reported

It is believed that in both instances, the hackers exploited old software loopholes to gain a backdoor into the systems. The only alterations in the systems, which went unnoticed for some time, deactivated firewalls preventing remote monitoring of the programs. 

“We must shape the rules that will govern the advance of technologies and the norms of behavior in cyberspace, artificial intelligence, biotechnology, so they are used to lift people up, not used to pin them down,” Biden said during the virtual Munich Security Conference last month. 

Through their exploits of the SolarWinds product known as “Orion,” Russian hackers were able to gain access to as many as 250 digital networks. Access to the U.S. Department of Commerce, Department of the Treasury, Department of Homeland Security, Federal Energy Regulatory Commission and other agencies was obtained through these hacks.

In response to the threats, the Biden-Harris administration is launching a task force to investigate the hacks. The White House also issued new direction through its Interim National Security Strategic Guidance plan on how to deter future technology breaches.

“U.S. and European companies are required to publicly disclose corporate governance structures, and abide by rules to deter corruption and monopolistic practices,” Biden said in remarks at the conference. “Chinese companies must be held to the same standards.” 

Biden has also tapped various veterans of cybersecurity from both the public and private sectors to lead his administration’s cybersecurity team, which had been previously left vacant by the Trump administration. 

In addition, Biden earmarked roughly $10 billion for various cybersecurity initiatives, further signaling his administration’s commitment to improving the nation’s cyber weaknesses. These funds will be allotted towards federal research and development funding, and investments in foundational computing technologies. 

As the scope of the hacks continues to come to light, Biden’s commitment to cyberinfrastructure remains a top administrative priority. 

“The challenges with Russia may be different than the ones with China, but they are just as real,” Biden said. “It is not about pitting East against West, it’s not about wanting conflict, we want a future where all nations are able to freely determine their own path without a threat of violence or coercion.” 

In The News

Health

Voting

Cybersecurity

US Cybersecurity Defense Must Meet Adversaries’ ‘Pace and Scale’
Geopolitics
US Cybersecurity Defense Must Meet Adversaries’ ‘Pace and Scale’
May 12, 2021
by Victoria Turner

“Make no mistake, our adversaries want to divide us to conquer us,” warned Erin Joe, section chief of the private sector office of the FBI, noting that nation-states like Russia, North Korea, Iran, and China are deploying daily cyberattacks against the US.  Opening yesterday’s CyberSatDigital conference,... Read More

Biden Says Colonial Pipeline Attack Tied to Russian Ransomware Hackers
Cybercrime
Biden Says Colonial Pipeline Attack Tied to Russian Ransomware Hackers
May 11, 2021
by Tom Ramstack

WASHINGTON -- The ongoing energy crisis created by a Russian gang’s ransomware attack late last week led the Biden administration to announce a multi-pronged strategy for confronting it on Monday. While President Biden declared an emergency, Colonial Pipeline officials said they expect to resume transporting most... Read More

Disaster Prevention and Recovery Plans Needed for Cybersecurity
Cybersecurity
Disaster Prevention and Recovery Plans Needed for Cybersecurity
May 11, 2021
by Victoria Turner

Last year saw an increase of 20% in cyberattacks against organizations, said James Turgal, vice president of Optiv, during the first day of the CyberSatDigital conference. The most common attack, with over 184 million reported last year, is known as a ransomware attack - when bad... Read More

FBI Accessing Private Servers to Subvert Cyberattacks
Cybersecurity
FBI Accessing Private Servers to Subvert Cyberattacks
April 30, 2021
by Reece Nations

WASHINGTON — In a covert operation to undercut hacking groups’ attempts to exploit vulnerabilities in Microsoft’s Exchange email program, the FBI has begun accessing hundreds of vulnerable computers in the United States to remove malicious web shells.  Web shells, interfaces that grant control over a web... Read More

US Cybersecurity Workforce Needed Quickly
Cybersecurity
US Cybersecurity Workforce Needed Quickly
April 22, 2021
by Victoria Turner

WASHINGTON - As Congress continues to worry about the nation’s cybersecurity, a key high-ranking military witness during a Senate hearing Wednesday said he was “concerned about the pace” of building an adequate cybersecurity workforce.  When Congress tasked the Department of Defense and military services with building... Read More

White House Expels Russian Diplomats, Imposes New Sanctions
Geopolitics
White House Expels Russian Diplomats, Imposes New Sanctions
April 15, 2021
by Dan McCue

The White House on Thursday unveiled sweeping sanctions on Russia in retaliation for cyberattacks, foreign influence operations and other behavior. The measures include the expulsion of 10 Russian diplomats. The moves were announced Thursday morning in a lengthy statement from the Biden administration which for the... Read More

News From The Well
scroll top