Rep. Andrew Garbarino, who chairs the House's Homeland cyber subcommittee, expressed concerns that two well-respected information sharing organizations may be getting squeezed out of their leading roles by CISA in favor of its own Joint Cyber Defense Collaborative.
It's the third time the Cl0p extortion group has targeted a piece of file-transfer software to steal data from their customers, but security experts collecting data on the fallout say the MOVEit hack is likely to dwarf the impact of previous campaigns.
The new rule has provoked numerous concerns over the short time of the four-day reporting requirement, the need for a national security exemption, and conflicts with proposed reporting laws around critical infrastructure.
New York’s Department of Financial Services hit OneMain Financial with a massive penalty, reflecting the severity of security failures found during an audit tied to multiple data breaches.