Editor’s Note: No good can come from this.
From: InfoSecurity-Magazine
The National Zoo’s Panda Cam, the World War II memorial, vast swaths of FEMA and food stamps are all casualties of the US government’s ongoing shutdown in the wake of Congress failing to approve funding for government operations. Cybersecurity isn’t escaping the furloughs either, leaving some to postulate that the US is essentially asleep at the switch right now – and eminently vulnerable.
“Let’s hope that any security-related work being done to harden these websites from malicious attack was not interrupted by the government shutdown, and fingers crossed that no new critical patches come out that are needed to protect them from exploits and hackers,” said security researcher Graham Cluley, in his blog.
Steven VanRoekel, CIO for the federal government, said that he fears exactly that. With websites lying dormant and the number of cybersecurity staff across federal agencies having been greatly reduced, hackers and spies could see an opportunity to infiltrate US systems with a far lesser threat of detection.
“I worry about cybersecurity in the midst of a shutdown,” VanRoekel told the Wall Street Journal. “If I were a wrongdoer looking for an opportunity, I’d contemplate poking at infrastructure when there are fewer people looking at it.”
The shutdown also means that bad actors could take their time knocking around the compromised systems. “Additionally, compromised systems may go for a longer period without detection, allowing an attacker to take more than one step toward their target without being noticed,” said Tripwire director of product management Tim Erlin, in a news report. “These deeper intrusions are more likely during this shutdown and harder to uncover when the shutdown ends.
For its part, the National Institute of Standards and Technology (NIST) has gone mostly dark. A forlorn message on its home page reads:
NIST Closed, NIST and Affiliated Web Sites Not Available Due to a lapse in government funding, the National Institute of Standards and Technology (NIST) is closed and most NIST and affiliated web sites are unavailable until further notice. We sincerely regret the inconvenience.
The Computer Security Resource Center (CSRC) is one of the victims of collateral damage, although some services such as the National Vulnerability Database and NIST Internet Time Service websites are still running, Cluley noted. However, they’re not being updated as often.
VanRoekel said that cybersecurity forces are down to a “skeleton crew,” with the staff that specialize in responding to cyberattacks out on furlough. They would need to be called in to respond after any attack, losing a crucial real-time edge. That reality “is a little bit worrisome for me,” he said. “I have fewer eyes out there.”
![Share on Facebook Facebook](https://www.thecre.com/fisma/wp-content/plugins/social-media-feather/synved-social/image/social/regular/96x96/facebook.png)
![Share on Twitter twitter](https://www.thecre.com/fisma/wp-content/plugins/social-media-feather/synved-social/image/social/regular/96x96/twitter.png)
![Share on Google+ google_plus](https://www.thecre.com/fisma/wp-content/plugins/social-media-feather/synved-social/image/social/regular/96x96/google_plus.png)
![Share on Reddit reddit](https://www.thecre.com/fisma/wp-content/plugins/social-media-feather/synved-social/image/social/regular/96x96/reddit.png)
![Pin it with Pinterest pinterest](https://www.thecre.com/fisma/wp-content/plugins/social-media-feather/synved-social/image/social/regular/96x96/pinterest.png)
![Share on Linkedin linkedin](https://www.thecre.com/fisma/wp-content/plugins/social-media-feather/synved-social/image/social/regular/96x96/linkedin.png)
![Share by email mail](https://www.thecre.com/fisma/wp-content/plugins/social-media-feather/synved-social/image/social/regular/96x96/mail.png)
Leave a Reply