Post

The House Homeland Security cyber subcommittee is holding a hearing this morning on the changing threats to operational technology, tied to the 15-year anniversary of the Stuxnet worm: homeland.house.gov/hearing/full...

Chairman Andrew Garbarino (who will soon be moving up to chair the full committee) says Congress needs to reauthorize "two key authorities" expiring this year: the 2015 Cybersecurity Information Sharing Act and the State and Local Cybersecurity Grant Program.

Garbarino: "Reauthorizing CISA 2015 will ensure we keep encouraging rapid and trusted information sharing among public and private sector entities, and extending the [local grant program] will make sure that states and localities have reliable funding to strengthen their cybersecurity."

Ranking member Eric Swalwell congratulates Garbarino on his promotion, noting that they've worked well together over the past three years, especially on cyber. He says it's vital "to have somebody at the full committee with your cyber knowledge and expertise" as it addresses AI, quantum, and more.

Swalwell also criticizes Trump's massive CISA cuts. "Fewer brains and reduced funding means less capability, less capacity, and less collaboration, which is detrimental to ongoing efforts to mature operational technology security programs."

The witnesses — journalist @kimzetter.bsky.social, Dragos CEO Robert M. Lee, Operational Technology Cyber Coalition's Tatyana Bolton, and Lawrence Livermore National Laboratory's Nate Gleason — are delivering their opening statements.

"Despite the elevated risks associated with attacks on OT systems," Bolton says, "this area of cybersecurity remains significantly underprioritized and underfunded."

In response to questioning from Swalwell, Lawrence Livermore's Gleason reveals that his lab's contract with CISA expired on Sunday, so LLNL cyber experts are no longer analyzing data collected by CyberSentry (free sensors deployed on critical infrastructure networks).

"National laboratories are not legally able to operate without being funded by a government agency," Gleason says, "so our threat hunters stopped monitoring networks on Sunday."

Another partnership on pause: LLNL's contract with CISA to support its National Infrastructure Simulation and Analysis Center expired in March, Gleason tells Swalwell.

"Our work for [CISA's] National Risk Management Center looking at infrastructure interdependencies and cascading consequences of disruption to infrastructure has been going on for a decade," Gleason says.

Gleason: With many attacks on critical infrastructure, "the target may not be that...system itself. It may be what is supported by that...system. And when we fail to understand those interdependencies, we are opening up avenues for our adversaries to disrupt key national security capabilities."