Good-To The Moon - Tiger Brokers Online Investing Community - To The Moon

5
1
Favorite

BeaverTrader
2021-03-26

Good

Software vendors would have to disclose breaches to U.S. government users under new order: draft

SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man

Software vendors would have to disclose breaches to U.S. government users under new order: draft

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

5

Report

Comment（1）

Top
Latest

chahcx
·2021-03-26
Please like and comment :D
Reply
Like
Report

Most Discussed

Terms and Conditions·Privacy Policy

Company: TTMF Limited. Tech supported by Xiangshang Yixin.

Email：uservice@ttm.financial

{"i18n":{"language":"en_US"},"data":{"magic":2,"id":358577317,"tweetId":"358577317","gmtCreate":1616719593539,"gmtModify":1704797811517,"author":{"id":3575226075672377,"authorId":3575226075672377,"authorIdStr":"3575226075672377","name":"BeaverTrader","avatar":"https://static.tigerbbs.com/aeaa28af46ebc499b5865ab2e409655b","vip":1,"userType":1,"introduction":"","boolIsFan":false,"boolIsHead":false,"crmLevel":5,"crmLevelSwitch":0,"individualDisplayBadges":[],"fanSize":1,"starInvestorFlag":false},"themes":[],"images":[],"coverImages":[],"extraTitle":"","html":"<html><head></head><body><p>Good</p></body></html>","htmlText":"<html><head></head><body><p>Good</p></body></html>","text":"Good","highlighted":1,"essential":1,"paper":1,"likeSize":5,"commentSize":1,"repostSize":0,"favoriteSize":0,"link":"https://ttm.financial/post/358577317","repostId":1167544085,"repostType":4,"repost":{"id":"1167544085","pubTimestamp":1616719164,"share":"https://www.laohu8.com/m/news/1167544085?lang=&edition=full","pubTime":"2021-03-26 08:39","market":"us","language":"en","title":"Software vendors would have to disclose breaches to U.S. government users under new order: draft","url":"https://stock-news.laohu8.com/highlight/detail?id=1167544085","media":"reuters","summary":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man","content":"<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.</p>\n<p>A National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.</p>\n<p>The SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.</p>\n<p>In the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.</p>\n<p>The hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.</p>\n<p>The proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.</p>\n<p>The order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.</p>\n<p>The notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.</p>\n<p>The order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.</p>\n<p>In practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.</p>\n<p>In the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.</p>\n<p>If finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.</p>\n<p>The draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.</p>\n<p></p>","source":"lsy1601381805984","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Software vendors would have to disclose breaches to U.S. government users under new order: draft</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSoftware vendors would have to disclose breaches to U.S. government users under new order: draft\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-26 08:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I><strong>reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1167544085","content_text":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.\nA National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.\nThe SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.\nIn the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.\nThe hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.\nThe proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.\nThe order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.\nThe notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.\nThe order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.\nIn practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.\nIn the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.\nIf finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.\nThe draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.","news_type":1},"isVote":1,"tweetType":1,"viewCount":150,"commentLimit":10,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"symbols":[],"verified":2,"subType":0,"readableState":1,"langContent":"EN","currentLanguage":"EN","warmUpFlag":false,"orderFlag":false,"shareable":true,"causeOfNotShareable":"","featuresForAnalytics":[],"commentAndTweetFlag":false,"upFlag":false,"length":4,"xxTargetLangEnum":"ORIG"},"commentList":[{"id":3886437,"gmtCreate":1616720352461,"gmtModify":1680781771869,"authorId":3577935469270315,"author":{"id":3577935469270315,"authorId":3577935469270315,"name":"chahcx","avatar":"https://static.tigerbbs.com/2fec84ea15dbb88ff2a986853bbb3fcc","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":358577317,"type":1,"supId":0,"prevId":0,"content":"Please like and comment :D","text":"Please like and comment :D","html":"Please like and comment :D","likeSize":0,"commentSize":0,"subComments":[],"verified":10,"allocateAmount":0,"commentType":"invalid","coins":0,"score":0}],"hasMoreComment":true,"orderType":2}