🎃🍂 Fall is always a busy season for @CISAgov (cue this long thread!). Between #CyberMonth, election security, and everything else in-between.
Here's @CISAgov's September month in review & what's in store for October. A thread 🧵 #CISAInReview
🗳️ Exercise your right to vote! We’re proud to support our partners throughout September’s National Vote Registration Month. Visit vote.gov to check on your voter registration.
🏫 A critical part of our mission is to help protect schools from physical & cyber threats. Vice Society targeted schools - including @LASchools - & we worked w/partners over the holiday weekend (shoutout to EVERYONE's dedication) to mitigate this threat.
💬 We opened public comment & listening sessions for CIRCIA: cisa.gov/CIRCIA
Long story short: CIRCIA requires reporting certain cyber & ransomware incidents to @CISAgov so that we can help assist victims & analyze the breach to protect others.
I can’t say enough about how important collaboration is to our collective defense. I’m proud of the work we have done to grow the value and depth of our partnerships. Here are a few allies we met with this September.
🧵On the demise of public-private partnership & the rise of operational collaboration: In Dec 20, a significant cyber-espionage campaign was discovered by @FireEye, illuminating the reality that in our highly-digitized world, tech companies are often first to see an attack.1/
🛡Based on this recognition & new authority from Congress, in Aug 21, we launched the Joint Cyber Defense Collaborative to enable collective cyber defense of the nation. JC⚡️DC has now grown to 20+ of the biggest tech cos w/unique visibility into the critical infra ecosystem.2/
Thrilled to see that the cyber incident reporting legislation has passed! This bill is a game-changer & a critical step forward for our Nation's cybersecurity. As the nation's cyber defense agency, it will help @CISAgov better protect our networks & critical infrastructure.
@CISAgov will use this info to render assistance to victims suffering attacks, analyze reporting to spot trends across sectors, & quickly share information with network defenders to warn potential victims & help prevent further attacks.
We look forward to working collaboratively w/our industry & fed partners to leverage this historic legislation to enhance the security & resilience of our nation’s critical infrastructure. We made it easy to report a cyber incident 24/7: report@cisa.gov or call @ (888) 282-0870.
🛡️A cyber🧵While there are currently no specific or credible cyber threats to the US homeland as a result of the unprovoked Russian invasion of Ukraine, @CISAgov strongly urges continued vigilance by all orgs – large & small. See cisa.gov/shields-up for info & updates 1/
Just because we have not seen threats to date doesn’t mean we will not see them manifest quickly. Risks may emerge rapidly from a) unintended impacts of cyber attacks within & beyond Ukraine by both state & non-state actors; 2/
b) opportunistic targeting of US-based critical infrastructure by criminal ransomware gangs; or c) deliberate targeting by Russian state-sponsored malicious cyber actors in retaliation for actions taken by the US & our Allies to impose costs on Russia. 3/