National: Russian hack reveals weaknesses in government cybersecurity protections | Joseph Marks/The Washington Post
A major Russian breach is prompting fears the government’s cybersecurity protections have fallen dangerously behind. Lawmakers and experts are sounding alarms that billions of dollars’ worth of custom-made government cybersecurity systems aren’t equipped to spot the most nefarious Russian hacker activity. And they’re warning the government is poorly organized to respond to such breaches once they come to light. “This really reinforced the need to double down on our cyber defensive strategy,” Rep. Jim Langevin (D-R.I.), co-founder of the Congressional Cybersecurity Caucus, told me. The breach is highlighting how years of efforts to create state-of-the-art cybersecurity protections within government have nevertheless failed to keep out sophisticated Russian hackers who’ve also been improving their game. Notably, the government has fallen behind at keeping tabs on the vast supply chain of technology that runs its computer systems, making it more vulnerable to attacks such as the recent one, which began with Russian hackers breaking into the Texas software company SolarWinds. The hackers then sent corrupted updates to customers including the State, Treasury, Commerce and Homeland Security departments, and probably to many other government agencies and companies as well. “It’s going to take far too long for the executive branch to inventory precisely where Orion [the SolarWinds system] is deployed and utilized and that demonstrates the critical importance of supply chain security,” Langevin said.