Legislation mandating cyber incident reporting for certain critical organizations was left out of the compromise version of the annual National Defense Authorization Act (NDAA) that the House is set to vote on
The committee leaders questioned Wales and DeRusha about the progress the administration has made garnering information about the SolarWinds hack, which U.S. intelligence agencies assessed in January was “likely” carried out by Russian hackers, and compromised at least nine federal agencies and 100 private sector groups.
ADVERTISEMENT
The senators also asked questions about recently discovered vulnerabilities in Microsoft’s Exchange Server, which the company said last month was actively exploited by at least one state-sponsored Chinese hacking group to gain access to thousands of organizations around the world.
“There is no easy solution to advanced persistent cyber threats,” the senators wrote.