Skip to main content

Cybersecurity plan unveiled by White House

white houseIn a move intended to help Americans sleep more soundly in their beds at night, the White House has proposed legislation as part of a cybersecurity plan to protect the country from damaging cyberattacks.

In a statement, the White House said, “The cybersecurity vulnerabilities in our government and critical infrastructure are a risk to national security, public safety and economic prosperity.”

A report by the Wall Street Journal highlighting key parts of the legislation – similar to legislation currently being discussed in Congress – says that it is designed to encourage (rather than force) companies key to the nation’s infrastructure, such as those running financial systems, transportation and power plants, to beef up their security systems.

Progress of the bipartisan bill now depends on how fast Senator Harry Reid can pass his proposal, with Reid himself hoping it can happen this summer. The proposed law is keen to let companies in the private sector make their own plans regarding cyber security and should not dictate measures.

The US Chamber of Commerce regarded the proposal positively, calling it “the latest in a series of important actions” by the White House on the issue of cybersecurity. Critics, on the other hand, said the legislation didn’t go far enough. Stewart Baker, a former senior official at the National Security Agency and the Department of Homeland Security in the Bush administration, said, “The administration’s proposal shows no sense of urgency.” He added, “It tells even critical industries on which our lives and society depend that they will have years before anyone from government begins to evaluate their security measures.”

Cyberattacks can cost companies billions of dollars, and in some cases can be a threat to national security. Attacks by hackers are getting bigger and bolder and are of course a serious concern for many people, not just those responsible for large institutions. It is hoped that the new legislation will go some way toward providing the US with stronger protection against such threats.

Trevor Mogg
Contributing Editor
Not so many moons ago, Trevor moved from one tea-loving island nation that drives on the left (Britain) to another (Japan)…
A dangerous new jailbreak for AI chatbots was just discovered
the side of a Microsoft building

Microsoft has released more details about a troubling new generative AI jailbreak technique it has discovered, called "Skeleton Key." Using this prompt injection method, malicious users can effectively bypass a chatbot's safety guardrails, the security features that keeps ChatGPT from going full Taye.

Skeleton Key is an example of a prompt injection or prompt engineering attack. It's a multi-turn strategy designed to essentially convince an AI model to ignore its ingrained safety guardrails, "[causing] the system to violate its operators’ policies, make decisions unduly influenced by a user, or execute malicious instructions," Mark Russinovich, CTO of Microsoft Azure, wrote in the announcement.

Read more