Bluepurple Pulse: week ending March 5th

US goes large on its new national cyber security strategy

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading). Not everything makes it in, but the best bits do.

Operationally this week nothing overly standout but as you’ll see below there is no sign of a slowdown.

In the high-level this week:

• FACT SHEET: Biden-Harris Administration Announces National Cybersecurity Strategy - Defend Critical Infrastructure, Disrupt and Dismantle Threat Actors, Shape Market Forces to Drive Security and Resilience, Invest in a Resilient Future and Forge International Partnerships to Pursue Shared Goals  – lets be honest this is the singly likely the most impactful line Shifting liability for software products and services to promote secure development practices;

  • IST Reviews the 2023 National Cybersecurity Strategy: Analysis and Next Steps - interesting assertion here - To achieve success, implementation must be collaborative. For example, the first attempt at extending regulatory frameworks in the wake of the 2021 Colo…