ICYMI: @boblord & I put out a blog go.dhs.gov/ZpX as part of our @AuthenticateCon preso: HELP US AMPLIFY THE CALLS TO ACTION TO THE TECHNOLOGY VENDORS that power our digital lives to provide the visibility we need to to raise the cybersecurity baseline for the nation: 1. EMBRACE RADICAL TRANSPARENCY FOR MFA STATS: We can’t improve what we don’t measure. Publish what % of enterprise users are using SMS vs FIDO vs an authenticator app. And tell us how those numbers are changing quarter to quarter. Tech providers can inform the whole ecosystem.

🎃🍂 Fall is always a busy season for @CISAgov (cue this long thread!). Between #CyberMonth, election security, and everything else in-between.

Here's @CISAgov's September month in review & what's in store for October. A thread 🧵 #CISAInReview 🗳️ Exercise your right to vote! We’re proud to support our partners throughout September’s National Vote Registration Month. Visit vote.gov to check on your voter registration.

https://twitter.com/NASSorg/status/1565318849012158465

🧵On the demise of public-private partnership & the rise of operational collaboration: In Dec 20, a significant cyber-espionage campaign was discovered by @FireEye, illuminating the reality that in our highly-digitized world, tech companies are often first to see an attack.1/ 🛡Based on this recognition & new authority from Congress, in Aug 21, we launched the Joint Cyber Defense Collaborative to enable collective cyber defense of the nation. JC⚡️DC has now grown to 20+ of the biggest tech cos w/unique visibility into the critical infra ecosystem.2/

Thrilled to see that the cyber incident reporting legislation has passed! This bill is a game-changer & a critical step forward for our Nation's cybersecurity. As the nation's cyber defense agency, it will help @CISAgov better protect our networks & critical infrastructure. @CISAgov will use this info to render assistance to victims suffering attacks, analyze reporting to spot trends across sectors, & quickly share information with network defenders to warn potential victims & help prevent further attacks.

🛡️A cyber🧵While there are currently no specific or credible cyber threats to the US homeland as a result of the unprovoked Russian invasion of Ukraine, @CISAgov strongly urges continued vigilance by all orgs – large & small. See cisa.gov/shields-up for info & updates 1/ Just because we have not seen threats to date doesn’t mean we will not see them manifest quickly. Risks may emerge rapidly from a) unintended impacts of cyber attacks within & beyond Ukraine by both state & non-state actors; 2/