Post

The House Homeland Security cyber subcommittee is holding a hearing this morning on the changing threats to operational technology, tied to the 15-year anniversary of the Stuxnet worm: homeland.house.gov/hearing/full...

Chairman Andrew Garbarino (who will soon be moving up to chair the full committee) says Congress needs to reauthorize "two key authorities" expiring this year: the 2015 Cybersecurity Information Sharing Act and the State and Local Cybersecurity Grant Program.

Garbarino: "Reauthorizing CISA 2015 will ensure we keep encouraging rapid and trusted information sharing among public and private sector entities, and extending the [local grant program] will make sure that states and localities have reliable funding to strengthen their cybersecurity."

Ranking member Eric Swalwell congratulates Garbarino on his promotion, noting that they've worked well together over the past three years, especially on cyber. He says it's vital "to have somebody at the full committee with your cyber knowledge and expertise" as it addresses AI, quantum, and more.

Swalwell also criticizes Trump's massive CISA cuts. "Fewer brains and reduced funding means less capability, less capacity, and less collaboration, which is detrimental to ongoing efforts to mature operational technology security programs."

"Despite the elevated risks associated with attacks on OT systems," Bolton says, "this area of cybersecurity remains significantly underprioritized and underfunded."

In response to questioning from Swalwell, Lawrence Livermore's Gleason reveals that his lab's contract with CISA expired on Sunday, so LLNL cyber experts are no longer analyzing data collected by CyberSentry (free sensors deployed on critical infrastructure networks).

"National laboratories are not legally able to operate without being funded by a government agency," Gleason says, "so our threat hunters stopped monitoring networks on Sunday."