On Monday, the White House’s proposed a budget for fiscal year 2025 calling for $13 billion of the $1.67 trillion discretionary spending to go to cybersecurity funding for civilian agencies, including additional investments to the DOJ, Homeland Security and Health and Human Services to bolster digital defenses.
The White House’s proposal seeks $3 billion for CISA, which is a $103 million increase from the 2023 enacted budget. The funding would include:
- $470 million to deploy network tools like endpoint detection and response capabilities for federal assets
- $394 million for its internal cybersecurity and analytical efforts
- $116 million to oversee the implementation of the Cyber Incident Reporting for Critical Infrastructure Act of 2022
- $41 million for “critical infrastructure security coordination”
Also notable is the proposed funding for healthcare cybersecurity efforts:
- $800 million to help “high need, low-resourced hospitals” cover the initial costs of implementing basic cybersecurity practices
- $500 million incentive program for more robust digital defenses
- $141 million for HHS’s own security, including $11 million to better protect health information
The budget also includes a handful of other proposals aimed at improving cybersecurity including:
- The National Highway Traffic Safety Administration’s Office of Automation Safety to “address vehicle cyber security risks,” as well as AI risks
- The Department of Energy would receive $455 million “to extend the frontiers of AI”, in addition to its cybersecurity efforts
- Military cybersecurity spending would be $7.4 billion, with another $6.4 billion for activities such as cyberspace operations and $630 million for R&D
- The Department of Defense total would be $14.5 billion which is an increase from $13.5 billion since last year
The budget would also add additional funding to address workforce challenges via minority-serving institutions.
The next immediate deadline for government spending is March 22, when the continuing resolution funding DHS, DOD and other agencies expire.
Emily Phelps, VP, Cyware had this to say:
“The White House’s emphasis on cybersecurity in the 2025 budget reflects a strong commitment to national and economic security. This significant investment reinforces the importance of collaborative efforts between public and private sectors to combat sophisticated and persistent cyber threats. By focusing on key areas such as healthcare cybersecurity and leveraging advancements in AI and military defenses, the budget aims to fortify the resilience of our critical infrastructure, economy, and the protection of citizens and industries against the concerted efforts of threat actors.”
This is a good move by The White House to keep cyber assets safe. Hopefully this is a budget that can get through The House and Senate as this is something that the nation needs.
Apple’s Plan To Deal With Massimo Is To Win On Appeal Or Let The Clock Run Out
Posted in Commentary with tags Apple on March 13, 2024 by itnerdI have to admit that when I heard about this, my first thought that Apple was being super crafty here. What I mean by “this” is this report is this one by MacRumors where they talk about how Apple got around the pulse oximetry ban that came about via the patent lawsuit that Masimo brought against Apple:
The original January 12 order from CBP that allowed Apple to bring Apple Watch models with a disabled sensor in the United States was published recently (via ip fray), and it gives some insight into how Apple disabled pulse oximetry. While some of the order is redacted, Apple implemented a fix that turns off pulse oximetry when an Apple Watch is paired to an iPhone. Blood oxygen sensing becomes inaccessible to the user, and opening the blood oxygen app gives a warning that the feature is not available. Apple said that it hardcoded each Apple Watch at the factory with new software.
As part of the process to get approval to sell Apple Watch Series 9 and Ultra 2 models without pulse oximetry enabled, Apple had to provide the code disabling the feature and test devices to Masimo. Masimo didn’t want Apple to have such an easy fix, so it paired the “redesigned” Apple Watches with a jailbroken iPhone running an older version of iOS, and was able to get pulse oximetry working.
Masimo tried to argue that activating pulse oximetry through a jailbroken phone meant Apple had not effectively removed the feature and the devices should not be allowed to be imported in to the U.S. Masimo also tried to say that jailbreaking is “permissible, common, and readily known,” but Masimo’s arguments were unsuccessful. The Exclusion Order Enforcement Branch of the U.S. Customs and Border Patrol ultimately decided that disabling pulse oximetry in the Apple Watch Series 9 and Ultra 2 was enough to avoid infringing on Masimo patents, allowing those models to be offered for sale at Apple retail stores in the U.S.
Because Masimo was able to get blood oxygen sensing working using software on a jailbroken iPhone, Apple too would be able to reactivate the blood oxygen sensor in the models where it has been disabled through a software update. When no longer subject to an import ban, Apple will be able to reintroduce blood oxygen sensing for Apple Watch Series 9 and Apple Watch Ultra 2 users who are not able to access the feature.
As noted by ip fray, the patents that Apple was found to have infringed on expire in August of 2028, which means that Apple will be able to re-enable pulse oximetry in affected models at that time. Apple filed an appeal with the United States International Trade Commission to attempt to get the ruling overturned, so if the appeal is successful, Apple could be able to re-add blood oxygen sensing sooner.
That’s pretty crafty by Apple seeing as they have no interest in coming to a settlement with Masimo. Likely because everyone and every company that Apple has “Sherlocked” over the years would come out of the woodwork to get paid as well. So that makes letting the clock run out or winning on appeal the best options for the folks at Apple Park. Let’s see how well that works out for them.
Leave a comment »