Top US cyber official asks Americans to look out for Russian hacking efforts
The U.S. government is wary about the possibility of a Russian cyberattack on U.S. critical infrastructure paired with Kremlin attempts to spread disinformation about any incident’s effects to sow panic among Americans, a top U.S. cyber official told CNN.”All businesses, all critical infrastructure owners and operators need to assume that disruptive cyber activity is something that the Russians are thinking about, that are preparing for, that are exploring options, as the President said,” Jen Easterly, director of the U.S. Cybersecurity and Infrastructure Security Agency (CISA), said.”That’s why we are so focused on making sure that everybody understands the potential for this disruptive cyber activity,” Easterly said. “And it’s not about panic. It’s about preparation.”Easterly pointed to the example of a cybercriminal attack on Colonial Pipeline last year, which shut down delivery of fuel to the East Coast for days and led to Americans hoarding gasoline.The Biden administration has for months warned that Moscow could respond to U.S. sanctions over Russia’s invasion of Ukraine with cyberattacks on U.S. infrastructure — or that ransomware gangs like the one that hit Colonial Pipeline could lash out.”The magnitude of Russia’s cyber capacity is fairly consequential and it’s coming,” President Joe Biden told business leaders March 21.Easterly called Biden’s statement, which said Russia was conducting “preparatory activity” for a potential cyberattack, “pretty unprecedented.””I think what makes the moment different is just seeing what the Russians have done with this unprovoked invasion of Ukraine and then understanding there can be some very real consequences of that in cyberspace,” Easterly told CNN.Easterly’s agency, established in 2018, is charged with advising the owners and operators of power plants, manufacturing facilities and other critical infrastructure on how to defend against such threats.Agencies like CISA and the departments of Treasury and Energy have in recent months held cyberthreat briefings on Russian hacking capabilities for America’s biggest banks and electric utilities.Many of those critical infrastructure operators have spent years investing in network…
