Task force unveils cyber recommendations for the next president

The 40-member panel has suggestions for whoever wins, from how to handle regulations to deterring malicious hackers.

The victor of the 2024 presidential election must resolve conflicting cybersecurity regulations, better deter cyberattacks, address the cyber workforce shortage, develop plans with the private sector on critical infrastructure protection and review how to keep the economy going in the event of major hacks, a task force of cyber experts said in a report released Tuesday.

Those were the “immediate priorities” in a longer list of recommendations from the McCrary Institute for Cyber and Critical Infrastructure at Auburn University, and the Cyberspace Solarium Commission 2.0, the successor to the congressionally established, influential panel of the same name.

The 40-member task force released the report — entitled “Securing America’s Digital Future: A Bipartisan Cybersecurity Roadmap for the Next Administration” — less than two weeks before Election Day, with Democrat Kamala Harris and Republican Donald Trump running neck-and-neck in polls, and with both sides having gotten a late start on their transition into the White House should they win.

“The incoming administration has a unique opportunity — and a solemn responsibility — to chart a new course in our nation’s cybersecurity journey,” the report says. “This is not just about defending against threats; it’s about positioning the United States to maintain the lead in the growing global digital economy, fostering innovation, and preserving the values that define us as a nation, recognizing that cybersecurity now impacts every aspect of American life — from our economy and national security to our daily personal interactions and democratic processes.”

Beyond the immediate priorities, the report also recommends:

• Strengthening the Office of the National Cyber Director and the Cybersecurity and Infrastructure Security Agency, and improving coordination with state, local, tribal and territorial governments.
• Developing an offensive cyber strategy.
• Establishing security standards for operational technology and information technology systems in each sector.
• Giving more authority to the State Department’s Bureau of Cyberspace and Digital Policy to be the focal point of cyber diplomacy work.
• Creating a national K-12 cybersecurity curriculum and expanding programs that award scholarships in exchange for a tenure of government service.
• Increasing the budgets of agencies that have responsibility for safeguarding critical infrastructure sectors.

Because the incoming administration won’t be able to do all of that without help from Congress, the report also recommends that lawmakers collaborate in a bipartisan basis with the next president, and consider reestablishing an Office of Technology Assessment or similar office  to help them with technical expertise.

“With the release of this important report, we are offering the next administration a set of sound policy recommendations to further improve national security in the face of growing cybersecurity threats,” said Frank Cilluffo, director of the McCrary Institute.

The push to designate AI as the next critical infrastructure sector

The designation would unlock a range of federal services, tools and resources for an industry that policymakers view as increasingly tied to national and economic security.

Trump blames Minnesota for cyberattacks on water sector, drawing pushback from cyber world

CISA is rethinking how it prioritizes risks and vulnerabilities for feds, private sector

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure