Eric Geller

@ericgeller
4.3K Followers
97 Following
22 Posts
Senior reporter at Cybersecurity Dive covering all things digital security. I also co-host @hothtakes. | Send me tips: bit.ly/contactejg
Twitterhttps://fedified.com/@ericgeller
👋 It's my first day as a senior reporter at Cybersecurity Dive! I'm still getting onboarded, but please send me your cyber news tips! My email is [email protected] and my Signal username is ericgeller.01.
I'm excited to announce that I'll be joining Cybersecurity Dive as their senior reporter on April 21. My exact beat is TBD, but I'll still be covering many of the same stories. I'll be focusing on news that decision-makers need to do their jobs. Can't wait to get started! https://www.cybersecuritydive.com/
Cybersecurity News and Analysis | Cybersecurity Dive

Cybersecurity Dive provides in-depth journalism and insight into the most impactful news and trends shaping cybersecurity.

I've got a big new story in WIRED about how Trump's layoffs and policy changes have plunged the Cybersecurity and Infrastructure Security Agency into turmoil.

https://www.wired.com/story/inside-cisa-under-trump/

‘People Are Scared’: Inside CISA as It Reels From Trump’s Purge

Employees at the Cybersecurity and Infrastructure Security Agency tell WIRED they’re struggling to protect the US while the administration dismisses their colleagues and poisons their partnerships.

WIRED
I wrote about the fate of President Biden's cybersecurity agenda under a second Trump administration — what's out, what's in jeopardy, and what's next. https://www.wired.com/story/trump-administration-cybersecurity-policy-reversals/
More Spyware, Fewer Rules: What Trump’s Return Means for US Cybersecurity

Experts expect Donald Trump’s next administration to relax cybersecurity rules on businesses, abandon concerns around human rights, and take an aggressive stance against the cyber armies of US adversaries.

WIRED

I also checked in with some of the big companies that have signed the pledge.

Here's how AWS, Fortinet, Microsoft, Okta, and Sophos have improved their cybersecurity postures to meet the pledge's goals: https://therecord.media/cisa-secure-by-design-pledge-microsoft-okta-fortinet-sophos-aws

These major software firms took CISA’s secure-by-design pledge. Here’s how they’re implementing it

The Cybersecurity and Infrastructure Security Agency’s (CISA) secure-by-design pledge has hit its six-month mark, and companies that took the pledge say they’ve made significant security improvements since they signed onto the initiative.

It's the six-month anniversary of CISA's secure-by-design pledge. I talked to @jackhcable about how things are going and what's next: https://therecord.media/cisa-jack-cable-interview-secure-by-design-pledge-update

New details in here about participant workshops, CISA's plans for tracking progress, and version 2.0 of the pledge.

CISA’s Jack Cable on secure-by-design pledge progress — and next steps

The pledge, and CISA’s broader secure-by-design initiative, are key parts of the White House’s push to hold tech companies accountable for the cascading harms of poorly designed products and vulnerable software.

Six years after a major congressionally chartered cybersecurity commission urged lawmakers to make software vendors legally liable for product failures, very little has been done.

My new story explores the legal, technical, and political challenges facing software liability.

https://therecord.media/cybersecurity-software-liability-standards-white-house-struggle

The struggle for software liability: Inside a ‘very, very, very hard problem’

Legal experts, technologists and tech-industry representatives say software liability is extremely difficult to design, with multiple competing approaches. But some lawmakers want to make it a top priority.

NEW: Trump has promised to scrap Biden's AI executive order if he wins re-election. What would that mean for Biden's AI safety and security agenda?

My WIRED story explores why conservatives hate these projects and why many experts say they're vital: https://www.wired.com/story/donald-trump-ai-safety-regulation/

A Trump Win Could Unleash Dangerous AI

Donald Trump's opposition to “woke” safety standards for artificial intelligence would likely mean the dismantling of regulations that protect Americans from misinformation, discrimination, and worse.

WIRED

New: Project 2025 would strip CISA of key election security roles, transfer the agency to a new department, and slash various missions.

Experts say it would profoundly weaken the agency.

My story for WIRED: https://www.wired.com/story/project-2025-cisa-election-critical-infrastructure-security/

How Project 2025 Would Put US Elections at Risk

Experts say the “nonsensical” policy proposal, which largely aligns with Donald Trump’s agenda, would weaken the US agency tasked with protecting election integrity, critical infrastructure, and more.

WIRED

Tucked into the Senate's intelligence community funding bill: Mark Warner and Susan Collins' bill codifying the Election Assistance Commission's penetration testing of voting equipment and creating a vulnerability disclosure pilot program for election technology.

My story: https://www.wired.com/story/a-senate-bill-would-radically-improve-voting-machine-security/

A Senate Bill Would Radically Improve Voting Machine Security

This year’s Intelligence Authorization Act would mandate penetration testing for federally certified voting machines and allow independent researchers to work on exposing vulnerabilities.

WIRED