Post

Scoop: The lone employee behind CISA's Pre-Ransomware Notification Initiative resigned on Friday rather than take a forced reassignment to FEMA. CISA says PRNI will continue, but sources said David Stern's loss will be a major setback for it. My story: www.cybersecuritydive.com/news/cisa-ra...

129 reposts254 likes

Ransomware attacks are great for the crypto industry bc the threat actors always demand the victims to buy crypto to make the ransom payment. Not surprising that this admin would actively encourage attacks.

The PRNI, which launched in late 2022, is one of the most tactile ways in which CISA helps protect critical infrastructure organizations. When CISA gets intelligence from a partner about hackers prepping ransomware activity on a victim network, it alerts the victim.

In an interview with the SANS Institute in August, Stern said the PRNI had delivered 4,300 warnings — including some to foreign governments about targeted companies in their countries — and saved victims roughly $9 billion in economic damages.

For at least the past several months, Stern has been the only CISA employee staffing the PRNI. One source called him "absolutely critical to national security." Another source said the PRNI was "some of the most impactful work CISA does."