House cybersecurity subcommittee chairman says GOP speaker drama is impacting cyber legislation

Rep. Andrew Garbarino, R-N.Y., tells CyberScoop that making sure “CISA is protected in the appropriations process” is his top priority once a House speaker is selected.

House Republicans’ chaotic search for a new speaker is stymieing lawmakers’ work on ensuring that the Cybersecurity and Infrastructure Security Agency is properly funded, the chairman of the chamber’s Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection said Thursday.

Speaking on the sidelines of a panel hosted by Punchbowl News, Rep. Andrew Garbarino, R-N.Y., told CyberScoop that “the lack of a speaker is going to keep us from doing legislation right now.” Once Republicans settle on a successor to Rep. Kevin McCarthy, R-Calif., “the next step, which I think is the most important thing, is to make sure that CISA is protected in the appropriations process. We made sure they were properly funded in our House bill — just making sure that happens through committee.”

Garbarino thinks otherwise, saying that he is a big supporter of CISA Director Jen Easterly and would actually like to see the Biden administration “let her be a little more of a leader.”

“If there is a big cyberattack tomorrow, I don’t know who the administration will put out as, ‘OK, this is the go-to person,'” Garbarino said. “It is a little bit of a mess right now.”

At another panel Thursday, hosted by the Information Technology Industry Council, Garbarino reiterated that he thinks “CISA should be the center for cyber in the administration.”

“We have given CISA a lot of authority and a lot of money — Congress has — over the past couple of years,” he said. “We’re going to continue to do that in our homeland [appropriations] bill.”

Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks

The administration set a target date of September for CISA to finalize the rule, but where the agency is headed remains a mystery to some.

Most federal cybersecurity reporting rules are duplicative, study finds

House intel bill includes provisions on state and local threat intelligence, election security, AI

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure