The Silent Cybersecurity Crisis No One's Talking About

Let’s cut through the crap and noise. While the headlines focus on Trump and Musk gutting the CIA, NSA, and CISA, there’s a much bigger issue that U.S. businesses cannot afford to ignore — the security of your company’s data, networks, and operations.

For years, federal intelligence agencies have been the quiet guardians of the internet, identifying threats, sharing critical intelligence, and helping private businesses defend against cyberattacks. That safety net is unraveling fast.

If these agencies are defunded, dismantled, or have their authority gutted, here’s what happens next:

🔥 The Coming Cyberstorm: What Businesses Should Expect 🔥

🔴 More Ransomware & Data Breaches — The FBI and CISA help disrupt ransomware gangs like REvil and Conti before they cripple entire industries. Without them? Expect more attacks like the Colonial Pipeline hack, which shut down gas supplies for the East Coast, or MGM Resorts, where hackers used social engineering to bring casino operations to a halt.

🔴 Nation-State Cyberattacks on U.S. Companies — China, Russia, North Korea, and Iran don’t just target governments — they target private businesses, stealing intellectual property, financial data, and customer records. CISA and the NSA alert companies to these threats — but if they’re weakened, who will warn you?

🔴 Supply Chain Attacks Will Skyrocket — Remember SolarWinds? A Russian-backed attack compromised 18,000 businesses and U.S. agencies. The private sector didn’t detect it — government intelligence did. Without those agencies in full force, businesses may not know they’re compromised until it’s too late.

🔴 More AI-Powered Fraud & Deepfake Scams — Cybercriminals are already using AI-generated deepfakes to impersonate CEOs and steal millions. The NSA and FBI work to disrupt these threats, but without them, businesses will be completely on their own.

📉 Why This is a Business Problem, Not Just a Government One 📉

If these agencies are gutted, the burden shifts directly to private companies. The Fortune 500 might have the resources to adapt, but what about mid-size businesses, hospitals, manufacturers, and local governments?

Cybersecurity has always been underfunded in the private sector. Now, without strong federal intelligence backing, companies must increase cybersecurity budgets, hire more experts, and implement stronger protections — or risk being the next headline.

🚀 What Business Leaders Must Do NOW 🚀

✅ Increase Cybersecurity Budgets — Security is no longer a “nice to have.” It’s as critical as payroll and legal compliance. If your cybersecurity budget is less than 5% of IT spending, it’s time for a serious adjustment.

✅ Hire & Retain Cybersecurity Talent — Your overworked security team won’t be able to handle nation-state attacks and sophisticated ransomware alone. Invest in hiring, training, and paying them what they’re worth.

✅ Prioritize Threat Intelligence & Incident Response — If you can’t rely on CISA alerts, you need your own threat intelligence strategy. Subscribe to private threat intel services, conduct regular penetration testing, and have an incident response plan ready to go.

✅ Bolster Zero Trust & Security Controls — The days of relying on perimeter security are over. Adopt Zero Trust architecture, enforce multi-factor authentication (MFA), and strengthen endpoint security.

✅ Educate Leadership on the Risk — Cybersecurity isn’t just IT’s problem. CEOs, CFOs, and boards must understand that cyber threats are existential business risks. A single breach can cost millions — or even destroy a company.

💡 The Bottom Line: Step Up or Get Left Behind

If federal cybersecurity agencies are defunded or dismantled, private businesses must take up the fight. There is no cavalry coming — we ARE the front line now.

The question isn’t IF your business will be attacked — it’s WHEN. Will you be ready?

 — John

#CyberSecurity #BusinessRisk #Infosec #CISA #NSA #CIA #RiskManagement #ZeroTrust #CyberThreats

Links:

Linktree

Medium

Substack

LinkedIn

Banning TikTok Is Meaningless

 Why Banning TikTok Is a Useless and Meaningless Act

The ongoing debates about banning TikTok in the United States have dominated headlines, ignited public discourse, and raised important concerns about national security and data privacy. But let’s cut to the chase and focus on a core reality: banning TikTok would be like trying to bail out the Titanic with a leaky bucket. Why? Because there are no systemic safeguards in place to prevent adversarial foreign companies from creating new social media platforms and targeting Americans again.

The Problem with Targeting TikTok Alone

TikTok, owned by the Chinese company ByteDance, has faced scrutiny due to allegations that it shares data with the Chinese government. While these concerns are valid, banning TikTok is like slapping a Band-Aid on a broken arm.

The United States lacks comprehensive regulations or legislation to prevent other companies—potentially linked to adversarial foreign governments—from launching similar apps. A TikTok ban addresses a symptom but leaves the system vulnerable to an endless stream of replacements. Tencent, Alibaba, or any other foreign corporation with ties to governments seen as adversarial could easily develop and launch the "next big thing" in social media, targeting millions of American users just like TikTok did.

Why the Cycle Will Repeat

Here's how the vicious cycle plays out:

1. New Entrants, Same Risks: If TikTok disappears, users will flock to the next entertaining app, potentially owned by a company with similar privacy and security concerns. Without legal guardrails, nothing stops these apps from collecting and mishandling user data.
2. Addiction to Innovation: Americans love innovation, especially when it’s flashy, fast, and free. TikTok became a phenomenon because it hit the right mix of fun, creativity, and social connection. Any new app replicating this formula will capture attention, regardless of its origins.
3. Reactive, Not Proactive Policies: The U.S. government’s approach to technology regulation has been reactive—addressing problems after they arise. This lack of foresight guarantees that the TikTok debacle will be a template for future crises.

What Needs to Change?

A TikTok ban, by itself, does nothing to address the broader challenge of securing the digital ecosystem. Instead, policymakers should focus on creating laws and frameworks that mitigate future risks. This includes:

• Comprehensive Data Privacy Legislation: Enact robust laws that protect user data regardless of where the company is headquartered. If an app operates in the U.S., it must comply with strict privacy standards.
• Transparent Ownership Rules: Mandate clear disclosures about company ownership and governance structures for any app that collects data from U.S. citizens.
• Enhanced Security Audits: Require social media platforms to undergo regular, independent security audits, with penalties for non-compliance.
• Education for Users: Raise public awareness about the risks of data sharing and how to identify apps that may compromise their security.

The Bottom Line

Banning TikTok may appease some critics and create the illusion of action, but it’s not a solution—it’s a distraction. Unless the U.S. addresses the systemic gaps that allow any adversarial company to launch a similar app, we’re doomed to repeat this debate every few years.

A meaningful approach isn’t about targeting one company; it’s about creating a resilient, secure, and transparent digital ecosystem. Without that, banning TikTok is as useless as pressing pause on a tape recorder and expecting the music to stop playing altogether. The song—and the risks—will keep going.

--John

Linktree https://linktr.ee/johnjrice

Medium https://medium.com/@johnjrice

Substack https://johnjrice.substack.com

LinkedIn https://www.linkedin.com/in/johnjrice315

2024: Lessons From the Cyber Dumpster Fire and How to Prevent the Next One

2024: Lessons From the Cyber Dumpster Fire and How to Prevent the Next One

The cybersecurity landscape of 2024 can best be described as one giant, smoldering cyber dumpster fire. No, really—what a year! Between the usual suspects like the ever-present Windows vulnerabilities and Okta’s (oops) regular appearances in the news, we were also treated to the bizarre "XZ caper," featuring the new international man of mystery, Jia Tan. But hey, every disaster is an opportunity to learn, right? Even those disasters that feel like a script rejected by Hollywood for being too far-fetched.

The chaos of 2024 didn’t just entertain; it spotlighted several critical vulnerabilities and exploitation trends that demand deeper analysis and a much-needed unified response from tech companies and IT/InfoSec professionals. To avoid a sequel to this year’s fiasco, here are some actionable strategies:  

Accelerated Patch Management With 75% of new vulnerabilities exploited within 19 days, while the average patch time drags on past 100 days, organizations must overhaul their patch management processes. Automating patch deployment and prioritizing critical vulnerabilities will significantly reduce the window of exposure. 

Enhanced Collaboration and Information Sharing The persistence of vulnerabilities like Log4Shell—still haunting us two years after disclosure—shows the urgent need for better communication across the cybersecurity community. Establishing robust platforms for sharing threat intelligence and best practices can speed up vulnerability identification and remediation. 

Investment in Secure Software Development When 91% of companies admit to knowingly releasing vulnerable applications, it’s clear that secure coding practices need to take center stage. Integrating security into the software development lifecycle through DevSecOps ensures vulnerabilities are minimized before software ever hits production. 

Regular Security Audits and Training The high prevalence of critical vulnerabilities in sectors like Finance and Healthcare underscores the importance of regular security assessments and ongoing employee training. Frequent audits can uncover weaknesses, while training keeps teams updated on emerging threats and protocols. 

Adoption of Advanced Threat Detection Technologies As attackers get faster and more sophisticated, organizations must leverage cutting-edge threat detection tools. AI-driven analytics and real-time monitoring systems are invaluable for early detection and prevention of attacks. 

Compliance with Security Frameworks and Regulations Adhering to established security frameworks and meeting regulatory standards can provide a structured approach to vulnerability management. Mandatory guidelines from bodies like the Cybersecurity and Infrastructure Security Agency (CISA) can help organizations stay ahead of threats.

By adopting these strategies, tech companies and cybersecurity professionals can fortify their defenses, shrink the attack window, and mitigate the risks tied to software vulnerabilities. Let’s make 2025 a year of fewer dumpster fires and more proactive cybersecurity wins.

--John

Linktree https://linktr.ee/johnjrice

Medium https://medium.com/@johnjrice

Substack https://johnjrice.substack.com

LinkedIn https://www.linkedin.com/in/johnjrice315

2024 LinkedIn Rewind Analysis

Coauthor Studio analyzed my LinkedIn posts, professional profile, audience, and writing style to create a personalized year-in-review post and highlights card. The results are as follows:

2024 wasn’t just another year in cybersecurity — it was a masterclass in organizational resilience. When Anydesk’s massive security breach hit, it wasn’t just a technical problem; it was a wake-up call about how quickly our digital infrastructures can become vulnerable. Throughout 2024 I learned that true security isn’t about perfect systems — it’s about adaptive leadership and continuous learning. Three moments crystallized this year’s lessons: • Anydesk Security Alert: Proactive threat identification saves organizations. “Any organization that has any connection with Anydesk needs to kill all instances of Anydesk and start looking for breach.” https://lnkd.in/eHntmmwY • Mental Health in Security: Our greatest vulnerability isn’t in our networks, but in our people. “Positions in cybersecurity, cyber intelligence, and IT fields are renowned for their demanding and stressful nature.” https://lnkd.in/eAvtZ3qD • Continuous Vigilance: Cybersecurity isn’t a month — it’s a mindset. “Cybersecurity Month is Great, But We Need Vigilance All Year Long!” https://lnkd.in/e_9tG9_v Strategic initiatives like our Help Desk replacement and new imaging platform weren’t just technical upgrades — they were resilience builders. Each project reinforced that technology transforms when human insight guides it. Looking ahead to 2025, I’m seeking a senior technology leadership role where I can continue bridging technical expertise with strategic vision. For my fellow cybersecurity professionals: our greatest asset isn’t our tools, but our ability to adapt, learn, and protect. hashtag#cybersecurity hashtag#infosec hashtag#ITsecurity hashtag#LinkedInRewind hashtag#Coauthor hashtag#2024wrapped https://www.linkedin.com/posts/activity-7278587276664664064-u7wB?utm_source=share&utm_medium=member_desktop

Who is Jia Tan? What is a supply chain? What is GitHub?

     

     In today's digitized world, software is the backbone of almost every aspect of our lives. From the apps on our smartphones to the complex systems that power our financial institutions and healthcare systems, software plays a crucial role. However, the increasing complexity and interconnectedness of software systems have also made them vulnerable to various security threats. One of the often-overlooked aspects of software security is the supply chain, which encompasses all the components and processes involved in the creation, delivery, and maintenance of software.

What is the Software Supply Chain?

The software supply chain refers to the entire lifecycle of a software product, from its initial conception and development to its deployment and maintenance. This includes the code repositories, third-party libraries, frameworks, and other components that are used to build and run the software. In today's "agile developer" world, where speed is paramount, organizations often rely on various third-party components and open-source libraries to accelerate the development process. While this approach offers many benefits, it also introduces new security risks.

The Risks of an Unsecured Software Supply Chain

Dependency Vulnerabilities: Third-party libraries and dependencies may contain vulnerabilities that can be exploited by attackers. If these vulnerabilities are not identified and patched promptly, they can pose a significant risk to the security of the entire software ecosystem.

Malicious Code Injection: Hackers can inject malicious code into third-party libraries or components, which can then be propagated to all the applications that use them. This can lead to data breaches, unauthorized access, and other security incidents.

Compromised Build Environments: Attackers can compromise the build and deployment environments to inject malicious code or tamper with the software during the build process. This can result in the distribution of compromised software to end-users.

Supply Chain Attacks: Sophisticated attackers may target the software supply chain itself, compromising the repositories or distribution channels to distribute malicious versions of legitimate software. These attacks can be highly damaging as they can affect a large number of users and organizations.

Securing Every Aspect of the Software Supply Chain

Given the critical role that the software supply chain plays in the overall security posture of an organization, it is essential to adopt a comprehensive approach to securing it. Here are some best practices to consider:

1. Inventory and Risk Assessment

-Maintain an inventory of all the components and dependencies used in your software.

-Regularly conduct risk assessments to identify and prioritize potential vulnerabilities and threats.

2. Dependency Management

-Keep all third-party libraries and dependencies up to date.

-Monitor for vulnerability disclosures related to your dependencies and apply patches promptly.

3. Secure Build and Deployment Processes

-Implement strong access controls and authentication mechanisms to secure your build and deployment environments.

-Use secure build pipelines and automated testing to detect and prevent the inclusion of malicious code during the build process.

4. Code Signing and Verification

-Use code signing to verify the authenticity and integrity of your software.

-Implement robust verification mechanisms to ensure that only signed and trusted code is deployed to production environments.

5. Continuous Monitoring and Incident Response

-Implement continuous monitoring and logging to detect any suspicious activities or anomalies in your software supply chain.

-Develop and maintain a robust incident response plan to address any security incidents promptly and effectively.

6. Collaborate with Stakeholders

-Foster collaboration with all stakeholders involved in the software supply chain, including developers, vendors, and third-party providers.

-Establish clear security policies and guidelines for all parties involved and ensure regular communication and training on security best practices.

Securing every aspect of our software supply chain is no longer optional—it's a necessity. With the increasing sophistication of cyber threats and the growing reliance on third-party components and open-source libraries, organizations must adopt a proactive and comprehensive approach to software supply chain security. By implementing the best practices outlined above and fostering a culture of security awareness and collaboration, we can mitigate the risks associated with an unsecured software supply chain and build more resilient and trustworthy software systems for the future

--John

Condition Critical ! How The Change Healthcare event exposed how badly actual change is needed.

In the wake of the recent Change Healthcare breach, the healthcare industry finds itself at a critical crossroads, grappling with the ramifications of a significant security incident. This breach, affecting millions of individuals, underscores the urgent need for heightened cybersecurity measures and renewed efforts to safeguard sensitive patient data.

Change Healthcare, a key player in the healthcare technology sector, serves as a vital link between healthcare providers, payers, and patients. However, the breach has exposed vulnerabilities within this ecosystem, raising concerns about the integrity of personal health information and the overall security infrastructure of the healthcare sector.

At its core, this breach not only compromises patient privacy but also erodes trust in the healthcare system. Patients rely on healthcare organizations to safeguard their sensitive data, trusting that their information will be handled with the utmost care and diligence. When breaches occur, this trust is shattered, leaving individuals feeling vulnerable and exposed.

The ramifications of the Change Healthcare breach extend beyond individual privacy concerns. They also have broader implications for healthcare delivery and data governance. Healthcare organizations must now reassess their cybersecurity protocols, ensuring they have robust systems in place to detect and mitigate threats effectively. Additionally, regulatory bodies may need to revisit compliance standards to address evolving cybersecurity risks adequately.

Furthermore, this breach serves as a stark reminder of the interconnected nature of cybersecurity and healthcare. In an era where digital transformation is revolutionizing the way healthcare is delivered and managed, the protection of patient data must be a top priority. As technologies such as telemedicine, electronic health records, and wearable devices become more prevalent, the surface area for potential cyber threats expands, necessitating a proactive and vigilant approach to security.

In light of these challenges, it is imperative for stakeholders across the healthcare ecosystem to collaborate closely to strengthen cybersecurity defenses. This includes healthcare providers, technology vendors, regulators, and policymakers. By fostering a culture of shared responsibility and accountability, we can work towards a future where patient data is safeguarded against evolving threats.

Moving forward, the Change Healthcare breach should serve as a wake-up call for the entire healthcare industry. It underscores the urgent need for investment in cybersecurity infrastructure, employee training, and proactive risk management strategies. By prioritizing patient privacy and security, we can uphold the trust and integrity of the healthcare system while ensuring that individuals receive the quality care they deserve.

While the Change Healthcare breach has undoubtedly shaken the healthcare industry, it also presents an opportunity for reflection and improvement. By learning from this incident and taking decisive action, we can strengthen our cybersecurity posture and better protect the privacy and security of patient data. Together, let us rise to the challenge and forge a more resilient and secure healthcare ecosystem for all.

-John