Software vendors would have to disclose breaches to U.S. government users under new order: draft_老虎社区_美港股上老虎

Software vendors would have to disclose breaches to U.S. government users under new order: draft

reuters2021-03-26

SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...

网页链接

免责声明：本文观点仅代表作者个人观点，不构成本平台的投资建议，本平台不对文章信息准确性、完整性和及时性做出任何保证，亦不对因使用或信赖文章信息引发的任何损失承担责任。

StocKing
·2021-03-26
C
回复
1
举报
收起
- TanWeiHan:
  like and comment
  2021-03-27
  回复
  举报
JoeK
·2021-03-26
They can only report if they know
回复
点赞
举报
Shifeng
·2021-03-26
Probably regulation to catch up industry changes.
回复
点赞
举报
xoxoll
·2021-03-26
Help me like and comment
回复
4
举报
收起
- Acella:
  😀
  2021-03-26
  回复
  举报
- xoxoll:
  Thank You
  2021-03-26
  回复
  举报
- Yagami:
  gogo
  2021-03-26
  回复
  举报
Ricoz3143
·2021-03-26
Nice
回复
3
举报
收起
- Ricoz3143:
  ComMent pls
  2021-03-26
  回复
  举报
- xoxoll:
  Help me ComMent
  2021-03-26
  回复
  举报
- Ricoz3143:
  Okieee sure
  2021-03-26
  回复
  举报
AlexWong
·2021-03-26
Good practice!
回复
3
举报
收起
- chahcx:
  Please like and comment :D
  2021-03-26
  回复
  举报
BeaverTrader
·2021-03-26
Good
回复
5
举报
收起
- chahcx:
  Please like and comment :D
  2021-03-26
  回复
  举报

热议股票

7x24

全部

关于我们·老虎社区守则·老虎社区账号管理规范·老虎社区服务协议·老虎社区隐私政策

公司名称：北京至简风宜信息技术有限公司

违法和不良信息投诉：010-5681-3562（工作时间9:30-18:30）

邮箱：service@laohu8.com

营业执照：91110105MA01A4U55R

ICP备：京ICP备18016422号

网安备：京公网安备11010502036490

关注我们

{"i18n":{"language":"zh_CN"},"data":{"share":"https://www.laohu8.com/m/news/1167544085?lang=zh_CN&edition=full","thumbnail":"","is_english":true,"pubTime":"2021-03-26 08:39","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"1167544085","market":"us","top_or_hot":-1,"title":"Software vendors would have to disclose breaches to U.S. government users under new order: draft","media":"reuters","content":"<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">网页链接</a>\n\n</div>\n","source":null,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Software vendors would have to disclose breaches to U.S. government users under new order: draft</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSoftware vendors would have to disclose breaches to U.S. government users under new order: draft\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-26 08:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I><strong>reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">网页链接</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":null,"symbol_name":null,"start_time":0,"source_url":"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I","article_id":"1167544085","we_media_id":null,"thumbnails":[],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=1167544085","pubTimestamp":1616719164,"columns":[],"sourceInfo":null,"weMediaInfo":null,"summary":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man","collect":0,"end_time":0,"defaultTopTitle":"reuters.com","property":[],"viewcount":null,"language":"en","relate_stocks":{},"translate_title":"根据新命令：草案，软件供应商必须向美国政府用户披露违规行为","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{},"content_text":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.\nA National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.\nThe SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.\nIn the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.\nThe hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.\nThe proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.\nThe order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.\nThe notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.\nThe order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.\nIn practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.\nIn the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.\nIf finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.\nThe draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.","kind":"news","is_publish_news":false,"is_publish_highlight":true,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[{"id":358479496,"gmtCreate":1616725828915,"gmtModify":1634524337970,"author":{"id":"3567718913207982","authorId":"3567718913207982","name":"StocKing","avatar":"https://static.tigerbbs.com/7085474f693ba246cba305df32163a9d","vip":1,"crmLevel":4,"crmLevelSwitch":0,"idStr":"3567718913207982","authorIdStr":"3567718913207982"},"htmlText":"C","listText":"C","text":"C","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":1,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/358479496","repostId":1167544085,"repostType":4,"repost":{"id":"1167544085","kind":"news","pubTimestamp":1616719164,"share":"https://www.laohu8.com/m/news/1167544085?lang=&edition=full","pubTime":"2021-03-26 08:39","market":"us","language":"en","title":"Software vendors would have to disclose breaches to U.S. government users under new order: draft","url":"https://stock-news.laohu8.com/highlight/detail?id=1167544085","media":"reuters","summary":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man","content":"<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.</p>\n<p>A National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.</p>\n<p>The SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.</p>\n<p>In the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.</p>\n<p>The hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.</p>\n<p>The proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.</p>\n<p>The order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.</p>\n<p>The notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.</p>\n<p>The order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.</p>\n<p>In practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.</p>\n<p>In the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.</p>\n<p>If finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.</p>\n<p>The draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.</p>\n<p></p>","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Software vendors would have to disclose breaches to U.S. government users under new order: draft</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSoftware vendors would have to disclose breaches to U.S. government users under new order: draft\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-26 08:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I><strong>reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1167544085","content_text":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.\nA National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.\nThe SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.\nIn the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.\nThe hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.\nThe proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.\nThe order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.\nThe notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.\nThe order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.\nIn practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.\nIn the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.\nIf finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.\nThe draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3897603,"gmtCreate":1616806935278,"gmtModify":1635748519015,"authorId":3569966648692639,"author":{"id":3569966648692639,"idStr":"3569966648692639","authorId":3569966648692639,"name":"TanWeiHan","avatar":"https://static.tigerbbs.com/e67d481d90c7fb95af43e020fe0c253b","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":358479496,"type":1,"supId":0,"prevId":0,"content":"like and <u>comment</u>","text":"like and <u>comment</u>","html":"like and <u>comment</u>"}],"langContent":"EN"},{"id":358480131,"gmtCreate":1616722351723,"gmtModify":1634524368672,"author":{"id":"3575261937306050","authorId":"3575261937306050","name":"JoeK","avatar":"https://static.tigerbbs.com/162445e8b6a553bd412b8a06e3f44c9e","vip":1,"crmLevel":6,"crmLevelSwitch":0,"idStr":"3575261937306050","authorIdStr":"3575261937306050"},"htmlText":"They can only report if they know&nbsp;","listText":"They can only report if they know&nbsp;","text":"They can only report if they know","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/358480131","repostId":1167544085,"repostType":4,"repost":{"id":"1167544085","kind":"news","pubTimestamp":1616719164,"share":"https://www.laohu8.com/m/news/1167544085?lang=&edition=full","pubTime":"2021-03-26 08:39","market":"us","language":"en","title":"Software vendors would have to disclose breaches to U.S. government users under new order: draft","url":"https://stock-news.laohu8.com/highlight/detail?id=1167544085","media":"reuters","summary":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man","content":"<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.</p>\n<p>A National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.</p>\n<p>The SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.</p>\n<p>In the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.</p>\n<p>The hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.</p>\n<p>The proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.</p>\n<p>The order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.</p>\n<p>The notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.</p>\n<p>The order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.</p>\n<p>In practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.</p>\n<p>In the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.</p>\n<p>If finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.</p>\n<p>The draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.</p>\n<p></p>","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Software vendors would have to disclose breaches to U.S. government users under new order: draft</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSoftware vendors would have to disclose breaches to U.S. government users under new order: draft\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-26 08:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I><strong>reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1167544085","content_text":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.\nA National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.\nThe SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.\nIn the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.\nThe hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.\nThe proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.\nThe order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.\nThe notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.\nThe order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.\nIn practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.\nIn the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.\nIf finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.\nThe draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":358417028,"gmtCreate":1616722268664,"gmtModify":1634524369517,"author":{"id":"3554690739454545","authorId":"3554690739454545","name":"Shifeng","avatar":"https://static.tigerbbs.com/7eba636a69f64b047187455fad28835a","vip":1,"crmLevel":5,"crmLevelSwitch":0,"idStr":"3554690739454545","authorIdStr":"3554690739454545"},"htmlText":"Probably regulation to catch up industry changes.&nbsp;","listText":"Probably regulation to catch up industry changes.&nbsp;","text":"Probably regulation to catch up industry changes.","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/358417028","repostId":1167544085,"repostType":4,"repost":{"id":"1167544085","kind":"news","pubTimestamp":1616719164,"share":"https://www.laohu8.com/m/news/1167544085?lang=&edition=full","pubTime":"2021-03-26 08:39","market":"us","language":"en","title":"Software vendors would have to disclose breaches to U.S. government users under new order: draft","url":"https://stock-news.laohu8.com/highlight/detail?id=1167544085","media":"reuters","summary":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man","content":"<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.</p>\n<p>A National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.</p>\n<p>The SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.</p>\n<p>In the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.</p>\n<p>The hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.</p>\n<p>The proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.</p>\n<p>The order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.</p>\n<p>The notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.</p>\n<p>The order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.</p>\n<p>In practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.</p>\n<p>In the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.</p>\n<p>If finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.</p>\n<p>The draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.</p>\n<p></p>","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Software vendors would have to disclose breaches to U.S. government users under new order: draft</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSoftware vendors would have to disclose breaches to U.S. government users under new order: draft\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-26 08:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I><strong>reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1167544085","content_text":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.\nA National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.\nThe SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.\nIn the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.\nThe hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.\nThe proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.\nThe order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.\nThe notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.\nThe order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.\nIn practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.\nIn the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.\nIf finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.\nThe draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":358496860,"gmtCreate":1616720602450,"gmtModify":1634524382973,"author":{"id":"3572249185724220","authorId":"3572249185724220","name":"xoxoll","avatar":"https://static.tigerbbs.com/8ed65c2962af2a6fbd414f4d6fe9e378","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3572249185724220","authorIdStr":"3572249185724220"},"htmlText":"Help me like and comment&nbsp;","listText":"Help me like and comment&nbsp;","text":"Help me like and comment","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":3,"repostSize":0,"link":"https://laohu8.com/post/358496860","repostId":1167544085,"repostType":4,"repost":{"id":"1167544085","kind":"news","pubTimestamp":1616719164,"share":"https://www.laohu8.com/m/news/1167544085?lang=&edition=full","pubTime":"2021-03-26 08:39","market":"us","language":"en","title":"Software vendors would have to disclose breaches to U.S. government users under new order: draft","url":"https://stock-news.laohu8.com/highlight/detail?id=1167544085","media":"reuters","summary":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man","content":"<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.</p>\n<p>A National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.</p>\n<p>The SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.</p>\n<p>In the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.</p>\n<p>The hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.</p>\n<p>The proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.</p>\n<p>The order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.</p>\n<p>The notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.</p>\n<p>The order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.</p>\n<p>In practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.</p>\n<p>In the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.</p>\n<p>If finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.</p>\n<p>The draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.</p>\n<p></p>","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Software vendors would have to disclose breaches to U.S. government users under new order: draft</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSoftware vendors would have to disclose breaches to U.S. government users under new order: draft\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-26 08:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I><strong>reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1167544085","content_text":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.\nA National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.\nThe SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.\nIn the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.\nThe hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.\nThe proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.\nThe order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.\nThe notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.\nThe order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.\nIn practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.\nIn the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.\nIf finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.\nThe draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3886593,"gmtCreate":1616720954589,"gmtModify":1635749049445,"authorId":3563150446821026,"author":{"id":3563150446821026,"idStr":"3563150446821026","authorId":3563150446821026,"name":"Acella","avatar":"https://static.tigerbbs.com/2712c4bb0bfbec4d2773e012189db3bc","vip":1,"crmLevel":9,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":358496860,"type":1,"supId":0,"prevId":0,"content":"😀","text":"😀","html":"😀"},{"id":3886640,"gmtCreate":1616721106783,"gmtModify":1635749044383,"authorId":3572249185724220,"author":{"id":3572249185724220,"idStr":"3572249185724220","authorId":3572249185724220,"name":"xoxoll","avatar":"https://static.tigerbbs.com/8ed65c2962af2a6fbd414f4d6fe9e378","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":358496860,"type":1,"supId":3886593,"prevId":0,"content":"Thank You","text":"Thank You","html":"Thank You"},{"id":3893771,"gmtCreate":1616771151250,"gmtModify":1635748691690,"authorId":3557383846065950,"author":{"id":3557383846065950,"idStr":"3557383846065950","authorId":3557383846065950,"name":"Yagami","avatar":"https://static.tigerbbs.com/75715a6be809adb20122e1ffecfdbe45","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":358496860,"type":1,"supId":0,"prevId":0,"content":"<u>gogo</u>","text":"<u>gogo</u>","html":"<u>gogo</u>"}],"langContent":"EN"},{"id":358490582,"gmtCreate":1616720386246,"gmtModify":1634524386462,"author":{"id":"3576243705895352","authorId":"3576243705895352","name":"Ricoz3143","avatar":"https://static.tigerbbs.com/8b650feee6a0b76b777c86e2f871ab8c","vip":1,"crmLevel":1,"crmLevelSwitch":0,"idStr":"3576243705895352","authorIdStr":"3576243705895352"},"htmlText":"Nice&nbsp;","listText":"Nice&nbsp;","text":"Nice","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":3,"repostSize":0,"link":"https://laohu8.com/post/358490582","repostId":1167544085,"repostType":4,"repost":{"id":"1167544085","kind":"news","pubTimestamp":1616719164,"share":"https://www.laohu8.com/m/news/1167544085?lang=&edition=full","pubTime":"2021-03-26 08:39","market":"us","language":"en","title":"Software vendors would have to disclose breaches to U.S. government users under new order: draft","url":"https://stock-news.laohu8.com/highlight/detail?id=1167544085","media":"reuters","summary":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man","content":"<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.</p>\n<p>A National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.</p>\n<p>The SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.</p>\n<p>In the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.</p>\n<p>The hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.</p>\n<p>The proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.</p>\n<p>The order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.</p>\n<p>The notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.</p>\n<p>The order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.</p>\n<p>In practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.</p>\n<p>In the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.</p>\n<p>If finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.</p>\n<p>The draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.</p>\n<p></p>","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Software vendors would have to disclose breaches to U.S. government users under new order: draft</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSoftware vendors would have to disclose breaches to U.S. government users under new order: draft\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-26 08:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I><strong>reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1167544085","content_text":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.\nA National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.\nThe SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.\nIn the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.\nThe hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.\nThe proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.\nThe order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.\nThe notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.\nThe order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.\nIn practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.\nIn the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.\nIf finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.\nThe draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3886518,"gmtCreate":1616720722613,"gmtModify":1635749055594,"authorId":3576243705895352,"author":{"id":3576243705895352,"idStr":"3576243705895352","authorId":3576243705895352,"name":"Ricoz3143","avatar":"https://static.tigerbbs.com/8b650feee6a0b76b777c86e2f871ab8c","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":358490582,"type":1,"supId":0,"prevId":0,"content":"ComMent pls ","text":"ComMent pls ","html":"ComMent pls "},{"id":3886624,"gmtCreate":1616721035157,"gmtModify":1635749045620,"authorId":3572249185724220,"author":{"id":3572249185724220,"idStr":"3572249185724220","authorId":3572249185724220,"name":"xoxoll","avatar":"https://static.tigerbbs.com/8ed65c2962af2a6fbd414f4d6fe9e378","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":358490582,"type":1,"supId":0,"prevId":0,"content":"Help me ComMent ","text":"Help me ComMent ","html":"Help me ComMent "},{"id":3888483,"gmtCreate":1616736337428,"gmtModify":1635748918471,"authorId":3576243705895352,"author":{"id":3576243705895352,"idStr":"3576243705895352","authorId":3576243705895352,"name":"Ricoz3143","avatar":"https://static.tigerbbs.com/8b650feee6a0b76b777c86e2f871ab8c","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":358490582,"type":1,"supId":3886624,"prevId":0,"content":"Okieee sure ","text":"Okieee sure ","html":"Okieee sure "}],"langContent":"EN"},{"id":358403512,"gmtCreate":1616719872036,"gmtModify":1634524392653,"author":{"id":"3560730969024945","authorId":"3560730969024945","name":"AlexWong","avatar":"https://static.tigerbbs.com/5355aad69cfd852f084e4c841a5fb0b0","vip":1,"crmLevel":7,"crmLevelSwitch":0,"idStr":"3560730969024945","authorIdStr":"3560730969024945"},"htmlText":"Good practice!","listText":"Good practice!","text":"Good practice!","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/358403512","repostId":1167544085,"repostType":4,"repost":{"id":"1167544085","kind":"news","pubTimestamp":1616719164,"share":"https://www.laohu8.com/m/news/1167544085?lang=&edition=full","pubTime":"2021-03-26 08:39","market":"us","language":"en","title":"Software vendors would have to disclose breaches to U.S. government users under new order: draft","url":"https://stock-news.laohu8.com/highlight/detail?id=1167544085","media":"reuters","summary":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man","content":"<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.</p>\n<p>A National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.</p>\n<p>The SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.</p>\n<p>In the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.</p>\n<p>The hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.</p>\n<p>The proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.</p>\n<p>The order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.</p>\n<p>The notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.</p>\n<p>The order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.</p>\n<p>In practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.</p>\n<p>In the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.</p>\n<p>If finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.</p>\n<p>The draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.</p>\n<p></p>","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Software vendors would have to disclose breaches to U.S. government users under new order: draft</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSoftware vendors would have to disclose breaches to U.S. government users under new order: draft\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-26 08:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I><strong>reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1167544085","content_text":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.\nA National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.\nThe SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.\nIn the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.\nThe hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.\nThe proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.\nThe order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.\nThe notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.\nThe order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.\nIn practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.\nIn the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.\nIf finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.\nThe draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3886432,"gmtCreate":1616720344602,"gmtModify":1635749061804,"authorId":3577935469270315,"author":{"id":3577935469270315,"idStr":"3577935469270315","authorId":3577935469270315,"name":"chahcx","avatar":"https://static.tigerbbs.com/2fec84ea15dbb88ff2a986853bbb3fcc","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":358403512,"type":1,"supId":0,"prevId":0,"content":"Please like and comment :D","text":"Please like and comment :D","html":"Please like and comment :D"}],"langContent":"EN"},{"id":358577317,"gmtCreate":1616719593539,"gmtModify":1634524395556,"author":{"id":"3575226075672377","authorId":"3575226075672377","name":"BeaverTrader","avatar":"https://static.tigerbbs.com/aeaa28af46ebc499b5865ab2e409655b","vip":1,"crmLevel":3,"crmLevelSwitch":0,"idStr":"3575226075672377","authorIdStr":"3575226075672377"},"htmlText":"Good","listText":"Good","text":"Good","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":5,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/358577317","repostId":1167544085,"repostType":4,"repost":{"id":"1167544085","kind":"news","pubTimestamp":1616719164,"share":"https://www.laohu8.com/m/news/1167544085?lang=&edition=full","pubTime":"2021-03-26 08:39","market":"us","language":"en","title":"Software vendors would have to disclose breaches to U.S. government users under new order: draft","url":"https://stock-news.laohu8.com/highlight/detail?id=1167544085","media":"reuters","summary":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require man","content":"<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.</p>\n<p>A National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.</p>\n<p>The SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.</p>\n<p>In the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.</p>\n<p>The hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.</p>\n<p>The proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.</p>\n<p>The order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.</p>\n<p>The notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.</p>\n<p>The order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.</p>\n<p>In practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.</p>\n<p>In the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.</p>\n<p>If finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.</p>\n<p>The draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.</p>\n<p></p>","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Software vendors would have to disclose breaches to U.S. government users under new order: draft</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSoftware vendors would have to disclose breaches to U.S. government users under new order: draft\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-26 08:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I><strong>reuters</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a ...</p>\n\n<a href=\"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"https://www.reuters.com/article/us-usa-biden-cyber-exclusive/exclusive-software-vendors-would-have-to-disclose-breaches-to-u-s-government-users-under-new-order-draft-idUSKBN2BH37I","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1167544085","content_text":"SAN FRANCISCO/WASHINGTON (Reuters) - A planned Biden administration executive order will require many software vendors to notify their federal government customers when the companies have a cybersecurity breach, according to a draft seen by Reuters.\nA National Security Council spokeswoman said no decision has been made on the final content of the executive order. The order could be released as early as next week.\nThe SolarWinds Corp hack, which came to light in December, showed “the federal government needs to be able to investigate and remediate threats to the services it provides the American people early and quickly. Simply put, you can’t fix what you don’t know about,” the spokeswoman said.\nIn the SolarWinds case, hackers suspected of working for the Russian government infiltrated its network management software and added code that allowed the hackers to spy on end users.\nThe hackers penetrated nine federal agencies and 100 companies, including Microsoft Corp and other major tech companies.\nThe proposed order would adopt measures long sought by security experts, including requiring multi-factor authentication and encryption of data inside federal agencies.\nThe order would impose additional rules on programs deemed critical, such as requiring a “software bill of materials” that spells out what is inside. An increasing amount of software activates other programs, expanding the risk of hidden vulnerabilities.\nThe notification requirement will have the most immediate impact. The rule aims to override non-disclosure agreements, which vendors have said limited information sharing, and allow officials to view more intrusions.\nThe order also would compel vendors to preserve more digital records and work with the FBI and the Homeland Security Department’s Cybersecurity and Infrastructure Security Agency, known as CISA, when responding to incidents.\nIn practice, the changes will occur through updates to federal acquisition rules. Major software companies that sell to the government, like Microsoft and SalesForce, will be affected by the change, said people familiar with the plans.\nIn the past, Congress has tried to establish a national data breach notification law but has failed because of industry resistance. Such a bill would have obligated companies that experience hacks to disclose them publicly through government agencies.\nIf finalized in close to the draft form, the executive order would partially achieve the broad disclosure goal. A new law on public disclosure may also be introduced.\nThe draft order would also create a cybersecurity incident response board, with representatives from federal agencies and cybersecurity companies. The forum would encourage vendors and victims to share information, perhaps with a combination of incentives and liability protections.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3886437,"gmtCreate":1616720352461,"gmtModify":1635749061557,"authorId":3577935469270315,"author":{"id":3577935469270315,"idStr":"3577935469270315","authorId":3577935469270315,"name":"chahcx","avatar":"https://static.tigerbbs.com/2fec84ea15dbb88ff2a986853bbb3fcc","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":358577317,"type":1,"supId":0,"prevId":0,"content":"Please like and comment :D","text":"Please like and comment :D","html":"Please like and comment :D"}],"langContent":"EN"}],"hasMoreComments":true,"newsSizeData":{"likeSize":31,"commentSize":7,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false}}