EU Sets Up An Emergency Team To Handle Large Scale Attacks

European Union agencies have suffered from damaging cyber attacks over the last year and in a recent Briefing Paper the EU Commission said it has identified weaknesses in cyber security governance abound in the public and private sectors across the EU as well as at the international level.  “This impairs the global community’s ability to respond to and limit cyber attacks and undermines a coherent EU-wide approach. The challenge is thus to strengthen cyber security governance”. 

In pursuit of this aim, the European Commission has announced that it plans to build a Joint Cyber Unit to be based in Brussels that  and it will take-on large scale cyber attacks. The rapid-response Joint Cyber Unit will pool European cyber-security powers to launch operations against ongoing hacking threats.

Currently cyber security communities, including civilian, law enforcement, diplomatic and cyber defence communities, as well as private sector partners, often operate separately.  However, while the sectors are specific, the threats are often common with consequent benefits from coordination, knowledge sharing and advance warning across communities.

National level cyber security attacks in Europe rose from 432 in 2019 to 756 in 2020 and the recent massive ransomware incidents on critical services in Ireland and the US has "focused minds" according to EU Commission sources.

The Health Service Executive (HSE) in Ireland was hit by a ransomware group called Conti which scrambled IT systems, causing major disruption to many hospitals.HSE chief Paul Reid told the Oireachtas health committee recently that it will take months to fix the system and that it will cost as much as €100m (£85m) to recover.

The Commission intends that dedicated cyber team will be immediately deployed to EU countries during serious attacks and Commission Vice-President Margaritis Schinas has said recently that the hack on the vital US fuel pipeline was a "nightmare scenario that we have to prepare against".

In both instances, hackers use malicious software to scramble and steal an organisation's computer data and then used attempted to extort ransomware from the corporate victims in return for returning services back to normal. While the criminals were successful in being paid off by the US pipeline operator, the Irish Government has refused to pay. 

The EU’s aim is to ensure that the Joint Cyber Unit will be operational by June 2022, and that it will be fully established one year later, by 30 June 2023.

In the US the Biden Administration is taking urgent steps to address the wave of major ransomware attacks by strengthening and cetralising national capabilities and by appealing for international co-operation, notably form Russia, where many of these attacks originate:  

European Court of Auditors:    Bloomberg:      BBC:      ITGovernance:   ITPro:      The National:    Smart Energy

You Might Also Read:

The European Union's Digital Security Plan:

 

« What Is The Best Defense Against Phishing?
SANS & AWS Marketplace Webinar: (Re)Defining XDR In AWS »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

CrowdStrike

CrowdStrike

CrowdStrike is a global provider of security technology and services focused on identifying advanced threats and targeted attacks.

Device Authority

Device Authority

Device Authority specialises in security automation for the Internet of Things (IoT).

DG Technology

DG Technology

DG Technology is a customer-centric technology expert and business consultant that delivers services and products to minimize your information security, compliance, and business risks.

SecureNinja

SecureNinja

SecureNinja provides professional training, certifications & professional services related to all facets of Information Technology and Cyber Security.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

NextVision

NextVision

NextVision is a Cybersecurity and Technology company offering a range of solutions and services for Security, Compliance and IT Infrastructure Management.

SecuLetter

SecuLetter

SecuLetter is able to detect unknown attacks with hybrid approaches, static and dynamic analysis.

M12

M12

M12 (formerly Microsoft Ventures) is the corporate venture capital subsidiary of Microsoft.

Adyta

Adyta

Adyta specializes in cybersecurity solutions adapted to the needs of sovereign institutions, business groups and other organizations that handle information and sensitive or classified data.

Gula Tech Adventures

Gula Tech Adventures

Gula Tech Adventures invests in companies and nonprofits that help close the gap in needed technology and workforce to defend the country in cyberspace.

JaCIRT

JaCIRT

JaCIRT is the national Cyber Incident Response Team for Jamaica, established to deliver on the mandate outlined in the GoJ’s National Cyber Security Strategy.

Realsec

Realsec

RealSec is an international company and is a developer of encryption and digital signature systems and Blockchain for the Banking and Methods of Payment sectors, Government and Defense and Multisector

SnapAttack

SnapAttack

SnapAttack is a collaborative platform that empowers your security team to stay ahead of threats, create robust behavioral analytics for your existing tools, and prove your program's effectiveness.

CSIR Information & Cybersecurity Research Centre

CSIR Information & Cybersecurity Research Centre

The CSIR Information & Cybersecurity Research Centre focuses on research, development, and innovation of home-grown cyber and information security.

CloudWave

CloudWave

CloudWave, the expert in healthcare data security, provides cloud, cybersecurity, and managed services to healthcare organizations.

Nokod Security

Nokod Security

Nokod Security delivers an application security platform for low-code / no-code custom applications and Robotic Process Automation (RPA).