Biden orders US intelligence review of SolarWinds hack

Biden has also tasked intelligence agencies with reviewing the extent of Russian interference in the 2020 election.

President Joe Biden is ordering U.S. intelligence agencies to provide him with an assessment of a suspected Russian hacking operation that breached multiple U.S. federal agencies and exposed glaring weaknesses in U.S. cyber-defenses, the White House said Thursday.

The move highlights how responding to the sophisticated spying operation, which has exploited software made by federal contractor SolarWinds, will shape the early days of Biden’s administration. It was not immediately clear what the intelligence review would entail, but Biden has vowed to get a full understanding of the computer intrusions and their impact.

“Even as we work with Russia to advance U.S. interests, so, too, we work to hold Russia to account for its reckless and adversarial actions,” White House Press Secretary Jen Psaki told reporters.

Moscow has denied involvement in the hacking campaign.

Biden has also tasked intelligence agencies with reviewing the extent of Russian interference in the 2020 election, the poisoning of Russian opposition leader Alexei Navalny and reports of Russian bounties on U.S. soldiers in Afghanistan, Psaki said.

The moves draw a contrast with former President Donald Trump, who consistently downplayed Russian hacking operations and interference in U.S. affairs. Trump baselessly suggested China could be responsible for the hacking, but U.S. intelligence agencies have said it is “likely Russian in origin.”

A top Senate Democrat accused the Trump White House of “water[ing] down” that statement.

As president-elect, Biden suggested Russia was responsible for the hack and said that the U.S. would respond to the perpetrators at a time of its choosing. What that means in practice remains to be seen.

U.S. Director of National Intelligence Avril Haines said at her Senate confirmation hearing on Tuesday that it “was pretty alarming” that a private firm, FireEye, and not U.S. intelligence and security agencies had uncovered the SolarWinds breach.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Election official says Tina Peters would be consultant, won’t have access to election systems