Latest news

The bill was aimed at enhancing the security and resiliency of the cyber and communications infrastructure of the United States and, among other things, would have allowed a the Department of Homeland Security to have access to the computer systems of all private companies that controlled infrastructure deemed critical for the normal day-to-day running of the country and the servicing of its citizens, in order to assess cyber risks.
First introduced back in February 2012 by independent Connecticut senator Joe Lieberman and four of his Democratic colleagues, it was modified before being presented to the Senate because the Electronic Frontier Foundation pointed out a number of problems with the wording defining some key issues.
Consequently, the term "cybersecurity threat" was more narrowly defined in order to exclude constitutionally-protected free speech and terms of service violations, the reporting of cyber security incidents related to the systems in question was made mandatory, and the participation of critical infrastructure owners in national cybersecurity programs was made voluntary instead of required.
It was also defined that the data collected under cybersecurity purposes would not be share with law enforcement and would not be used to prosecute unrelated crimes, and that only civilian agencies would be in charge of US' cybersecurity systems.
Still, some politicians were against the law for ideological reasons since it would allow government and its agencies to interfere with private companies, while the owners and the operators of the infrastructure in question were more concerned with the costs of setting and keeping of the security standards the law would have required of them.
According to the National Journal, Senator Lieberman didn't hide his disappointment at the result of the vote, saying that this was one of those days when he wasn't proud of the United States Senate.
Republican minority Leader Mitch McConnell retorted by saying that they all recognize the problem, and that no one doubts that the nation's cyberdefenses need strengthening, but that they weren't willing to let the majority leader "steamroll" the bill through senate.


Spotlight

Information security executives need to be strategic thinkers
Posted on 17 June 2013. | George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.

Large orgs in denial about own security breaches?
Posted on 14 June 2013. | Over two thirds (66%) of large organizations said they either had not experienced a security incident in the last 12-18 months or were unsure if they had.

Vulnerability scanning with PureCloud
Posted on 12 June 2013. | nCircle PureCloud is a cloud-based network security scanning product built upon the companies' vulnerability and risk management system IP360.

To hack back or not to hack back?
Posted on 12 June 2013. | If you think of cyberspace as a new resource for you and your organization, it makes sense to protect your part of it as best you can. But is it a good idea?

Reactions from the security community to the NSA spying scandal
Posted on 11 June 2013. | Read on for comments on this scandal that Help Net Security received from a variety of security professionals and analysts.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.







