Connect with us

Tech

White House aims to shift cybersecurity burden from individuals and small businesses to tech providers

Published

on

107113346-1662133662085-gettyimages-148770684-9cb3a082-ca16-438e-84b3-96a91fd6d012.jpeg


Advertisement
The White House released its long-awaited National Cyber Strategy on Thursday, providing a road map for how the Biden administration aims to defend the U.S. from a rapidly growing number of online threats.
Advertisement

A key element of the new framework involves shifting the burden of cybersecurity from individuals, small businesses and local governments and putting responsibility in the hands of software developers and other institutions with the requisite resources and expertise.

“The president’s strategy fundamentally reimagines America’s cyber social contract,” Acting National Cyber Director Kemba Walden said during a press briefing on Wednesday. “It will rebalance the responsibility for managing cyber risk onto those who are most able to bear it.”

Advertisement

Walden added, “the biggest, most capable and best-positioned actors in our digital ecosystem can and should shoulder a greater share of the burden for managing cyber risk and keeping us all safe.” She said that laying responsibility on individuals and groups who lack the resources to protect themselves is both “unfair” and “ineffective.”

The White House is proposing that legislation establish liability for software makers which fail to take reasonable precautions to secure their products and services. The administration said in its draft report that it would work with Congress and the private sector to develop the language of such a bill, which would include “an adaptable safe harbor framework” to protect companies that “securely develop and maintain their software products and services.”

Advertisement

A senior administration official, who wasn’t authorized to be named, said the legislation isn’t expected to pass in the next year, but is part of a longer-term plan.

The Biden administration said it will explore a national insurance backstop in the case of a catastrophic cyberattack to supplement the existing cyber insurance market. It will also focus on defending critical infrastructure by expanding minimum security requirements in certain sectors and streamlining regulations, and will treat ransomware as a national security threat, not just a criminal issue.

Advertisement

The strategy also includes an increased focus on incentivizing long-term investments into cybersecurity, even while dealing with urgent threats. The administration said it will prioritize cybersecurity research and development for newer technologies as well as invest in expanding the cyber workforce.

In addition, the framework calls for a focus on international partnerships to work with like-minded nations to fight threats and create secure global supply chains for communications technology and other kinds of tools and information.

Advertisement

The White House said the work has already started. In May 2021, for example, President Biden signed an executive order aiming to strengthen the nation’s cyber defenses. That was shortly after the cyberattack on Colonial Pipeline that led to widespread fuel shortages.

The order directed IT service providers to inform the government about cyberattacks that could effect national networks. It also created a Cybersecurity Safety Review Board consisting of officials from the public and private sector to analyze cyberattacks and make recommendations for future protections.

Advertisement

Subscribe to CNBC on YouTube.

WATCH: Closing keynote: The White House is serious about cybersecurity

Advertisement
Closing keynote: The White House is serious about cybersecurity



Source link

Advertisement

Tech

Google’s failure to preserve employee messages in Epic antitrust case merits sanctions, judge says

Published

on

By

106950251-16330172692021-09-30t155221z_1182655650_rc2f0q9iha9q_rtrmadp_0_eu-alphabet-antitrust.jpeg


Advertisement
A Google sign is pictured during the company’s presentation of a detailed investment plan for Germany outside the Google office in Berlin, Germany, August 31, 2021.
Advertisement

Annegret Hilse | Reuters

Google should be sanctioned for failing to preserve chat messages between employees related to an antitrust case brought by Epic Games, a federal judge in California ruled on Tuesday.
Advertisement

The company “adopted a ‘don’t ask, don’t tell’ policy for keeping messages, at the expense of its preservation duties,” the judge said in the filing.

The judge did not yet determine what sanctions Google should face, writing that, “the Court would like to see the state of play of the evidence at the end of fact discovery. At that time, plaintiffs will be better positioned to tell the Court what might have been lost in the Chat communications.”

Advertisement

Google faces similar allegations about destroying potential evidence by the Department of Justice in its antitrust litigation against the company. A Google spokesperson said at the time of the DOJ’s filing that it disagrees with the DOJ’s claims.

The latest filing included a string of messages between Google executives debating whether they needed to keep chat history on issues that might relate to the litigation.

Advertisement

Epic alleged that Google failed to retain chat messages between employees that it should have preserved while under a litigation hold. Google allegedly left it to employees to determine when to turn on and off their chat history when discussing matters relevant to the legal proceedings. Epic said Google should have ensured those messages were preserved by default. Exhibits presented by Epic seem to show that Google employees saw chats as a less formal way to communicate.

The judge, James Donato, made clear the case “will not be decided on the basis of lost Chat communications,” but said deciding on the proper non-monetary sanction requires more proceedings.

Advertisement

Donato ordered Google to cover reasonable attorneys fees related to the motion over the evidentiary issue.

“Our teams have conscientiously worked, for years, to respond to Epic and the state AGs’ discovery
requests and we have produced over three million documents, including thousands of chats,” a Google spokesperson said in an emailed statement.

Advertisement

Epic did not provide a statement for this story.

WATCH: Colorado Attorney General weighs in on Google lawsuit

Advertisement
Colorado Attorney General weighs in on Google antitrust lawsuit



Source link

Advertisement
Continue Reading

Tech

Apple launches its Pay Later service

Published

on

By

107161974-1670353109910-gettyimages-1424302021-km203691_103b26d2-4228-403a-b5d0-6b8f0df68ff4.jpeg


Advertisement
Apple CEO Tim Cook visits the Fifth Avenue Apple Store on September 16, 2022 in New York City.
Advertisement

Kevin Mazur | Getty Images

Apple on Tuesday introduced Apple Pay Later, which will allow users to split purchases into four payments spread over the course of six weeks.
Advertisement

Affirm dropped 4% on the news.

Apple Pay Later users will be able to manage, track and repay their loans in their Apple Wallet, the company said in a release Tuesday. Individuals can apply for Apple Pay Later loans between $50 and $1,000 and use them for in-app and online purchases made through merchants that accept Apple Pay. Payments have no interest and no fees.

Advertisement

Users can apply for a loan within the Apple Wallet app without it impacting their credit score, Apple said. Once they select the amount they would like to withdraw, a soft credit pull will be conducted to make sure they are in “a good financial position” to take on a loan, according to the release.

Apple will invite select people to access a prelease version of Apple Pay Later Tuesday, and the company said it plans to expand access to all eligible users in the coming months.

Advertisement

Approved users will see a “Pay Later” option while using Apple Pay to check out online and in apps on iPhones and iPads. They will also be able to apply for a loan right at checkout. Apple said purchases using the software will be authenticated using Face ID, Touch ID or a passcode.

The company said users can see the amount due for their existing loans, as well as the total amount due in the next 30 days, in Apple Wallet. Users will be asked to link a debit card as their loan repayment method. Credit cards won’t be accepted.

Advertisement

This story is developing. Please check back for updates.



Source link

Advertisement

Advertisement
Continue Reading

Tech

Microsoft introduces an A.I. chatbot for cybersecurity experts

Published

on

By

106901172-1624474214482-106901172-1624408705315-gettyimages-491551484-MS_WINDOWS_10.jpg


Advertisement
Satya Nadella, chief executive officer of Microsoft Corp., speaks during the Windows 10 Devices event in New York on Oct. 6, 2015. Microsoft Corp. introduced its first-ever laptop, three Lumia phones and a Surface Pro 4 tablet, the first indication of the company’s revamped hardware strategy three months after saying it would scale back plans to make its own smartphones.
Advertisement

John Taggart | Bloomberg | Getty Images

Microsoft on Tuesday announced a chatbot designed to help cybersecurity professionals understand critical issues and find ways to fix them.
Advertisement

The company has been busy bolstering its software with artificial intelligence models from startup OpenAI after OpenAI’s ChatGPT bot captured the public imagination following its November debut.

The resulting generative AI software can at times be “usefully wrong,” as Microsoft put it earlier this month when talking up new features in Word and other productivity apps. But Microsoft is proceeding nevertheless, as it seeks to keep growing a cybersecurity business that fetched more than $20 billion in 2022 revenue.

Advertisement

The Microsoft Security Copilot draws on GPT-4, the latest large language model from OpenAI — in which Microsoft has invested billions — and a security-specific model Microsoft built using daily activity data it gathers. The system also knows a given customer’s security environment, but that data won’t be used to train models.

The chatbot can compose PowerPoint slides summarizing security incidents, describe exposure to an active vulnerability or specify the accounts involved in an exploit in response to a text prompt that a person types in.

Advertisement

A user can hit a button to confirm an answer if it’s right or select an “off-target” button to signal a mistake. That sort of input will help the service learn, Vasu Jakkal, corporate vice president of security, compliance, identity, management and privacy at Microsoft, told CNBC in an interview.

Engineers inside Microsoft have been using the Security Copilot to do their jobs. “It can process 1,000 alerts and give you the two incidents that matter in seconds,” Jakkal said. The tool also reverse-engineered a piece of malicious code for an analyst who didn’t know how to do that, she said.

Advertisement

That type of assistance can make a difference for companies that run into trouble hiring experts and end up hiring employees who are inexperienced in some areas. “There’s a learning curve, and it takes time,” Jakkal said. “And now Security Copilot with the skills built in can augment you. So it is going to help you do more with less.”

Microsoft isn’t talking about how much Security Copilot will cost when it becomes more widely available.

Advertisement

Jakkal said the hope is that many workers inside a given company will use it, rather than just a handful of executives. That means over time Microsoft wants to make the tool capable of holding discussions in a wider variety of domains.

The service will work with Microsoft security products such as Sentinel for tracking threats. Microsoft will determine if it should add support for third-party tools such as Splunk based on input from early users in the next few months, Jakkal said.

Advertisement

If Microsoft were to require customers to use Sentinel or other Microsoft products if they want to turn on the Security Copilot, that could very well influence the purchasing decisions, said Frank Dickson, group vice president for security and trust at technology industry researcher IDC.

“For me, I was like, ‘Wow, this may be the single biggest announcement in security this calendar year,’” he said.

Advertisement

There’s nothing stopping Microsoft’s security rivals, such as Palo Alto Networks, from releasing chatbots of their own, but getting out first means Microsoft will have a head start, Dickson said.

Security Copilot will be available to a small set of Microsoft clients in a private preview before wider release at a later date.

Advertisement

WATCH: Microsoft threatens to restrict data from rival AI search tools

Microsoft threatens to restrict data from rival AI search tools



Source link

Advertisement
Continue Reading

Trending