Ransomware attacking countries opposing Russia

What is happening? Politico Cybersecurity says  Conti ransomware gang and the LockBit 2.0 ransomware group have vowed in recent days to attack the critical infrastructure of any nation that retaliates against Russia

Why is this important? Remember the hackers who seized control of the Colonial Pipeline.

How will this be important? Besides wondering whether cyber insurance policies hold to cover losses, this is the environment for a hacker free for all.

Politico | U.S. cyber officials brace for attacks in wake of Ukraine invasion

State Data Security Reactions Amid Ukraine Invasion

What is happening? In Texas, “Gov. Greg Abbott sent a letter to the Texas Department of Information Resources and the Department of Public Safety directing both agencies to use their resources to safeguard critical infrastructure and to help local governments and school districts with their needs.”

“Colorado Gov. Jared Polis issued an executive order directing the Office of Information Technology (OIT) to focus on protecting the state’s critical infrastructure from Russian cyberattacks or misinformation efforts.”

New York launched a Joint Security Operations Center to bring together federal, state, county, local governments and critical infrastructure partners to improve coordination and bolster cybersecurity efforts. 

North Carolina Gov. Roy Cooper tweeted that he had instructed the Joint Cybersecurity Task Force to increase outreach and assistance. 

New Jersey Cybersecurity & Communications Integration Cell, a component organization in the state’s Office of Homeland Security and Preparedness urged agencies to be on the lookout for information operations, cyber espionage and various cyberattacks and “ensure all preventive, detective, and responsive cybersecurity controls and plans are fully implemented and updated.”

Why is this important? There are continued denial of service and destructive malware attacks affecting Ukraine and other countries

How will this be important? Sharing information on attacks is a form of mitigating more attacks

Route Fifty | Governors Tighten IT Cybersecurity Amid Ukraine Attacks

45 Organizations Call for no 3rd Party Vendors for Digital IDs

What is happening? 45 organizations including the Electronic Privacy Information Center, the Algorithmic Justice League, Fight for the Future, the American Civil Liberties Union, and the Project on Government Oversight are calling on state and federal government to cease using 3rd party digital identification systems, ID.me.

Why is this important? There is no comprehensive law regulating the collection, use, disclosure and retention of biometric data.

How will this be important? Not only is there no comprehensive law, but also there is a 2019 study by the National Institute of Standards and Technology that found that the majority of facial recognition systems have demographic bias.

Route Fifty | Agencies Shouldn’t Use Facial Recognition for ID Verification, Group Says

IRS stopped using facial recognition for identity verification

What is happening? The IRS has stopped verifying identities with facial recognition software because it as using a 3rd party product and the government has an identity verification program. (e.g. don’t give 3rd parties access)

Why is this important? At the heart of this is the concept that  “digital identity management a “core government service.”

How will this be important? States, you’re up!

FCW | IRS backs away from facial recognition technology

Expunging Government Data

What is happening? The City of Baltimore is expunging data collected by a now defunct low level  surveillance plane program.

Why is this important? Expunging this data is complicated. During the time the planes flew, 1,532 crimes were committed, only 158 crimes that relied on evidence from the planes, and 38 crimes were cleared with the evidence. Some prosecutions may rely on it which means the data has to be maintained until all appeals are exhausted. The legal system is not known for being fast.

How will this be important? Other cities have stopped programs that used a variety of techniques like facial recognition. How are cities expunging that data? Is the data every really gone? Not if Hollywood crime movies are to be believed.

Baltimore Sun via Governing | Baltimore Police to Expunge Surveillance Plane Records

New Crypto Enforcement Structure

What is happening? The FBI has formed a new team dedicated to cryptocurrency

Why is this important? The FBI team will coordinate with the National Cryptocurrency Enforcement Team in relation to cyber crimes.

How will this be important? The policy objective is to allow digital currencies to grow will limiting the illicit use of cryptocurrency.

The Hill | FBI to form new cryptocurrency unit

Anatomy of Legislation to Define Crypto Market

What is happening? Congressman Josh Gottheimer proposes legislation to “designate certain digital currencies as “qualified” stablecoins if they can be redeemed on a one-for-one basis for U.S. dollars.”

Why is this important? Stablecions would be backed by banks or designated reserve assets in a non-bank.

How will this be important? Concerns include : “that a spike in redemption requests, or a stablecoin “run,” could result in bankruptcy at the issuer and start a domino of insolvency”

CNBC | Democratic lawmaker unveils bill that would define boundaries for stablecoin market

Bitcoin Mining in Texas Estimates

What is happening? The BlockCain Council of Texas estimates 27 bitcoin mining companies in Texas. One of those companies, Geosyn Mining expects to operate 531 mining machines.

Why is this important? Texas as Bitcoin Fund in operation and  two new natural gas-powered bitcoin mining facilities in Texas

How will this be important? Over the next year, Poolin CEO Kevin Pan, plans to quadruple its current 2GW mining facility in Texas.

TechCrunch | How Texas is becoming a bitcoin mining hub

COVID Effect. New Data Disclosure Rules.

What’s happening? PA had a COVID tracing contractor data breach that resulted in SB 696 (2022 | PA) that would require governmental entities, including school districts, to disclose known data breaches within 7 days to those impacted

Why is this important? The bill was amended to include 3rd party vendors.

How will this be important? The breach disclosure time frame is 3 days from discovery for notification to the state attorney general.

AP & WKPN | Pa. Senate advances data breach timely notice bill