U.S. moves to control sales of hacking tools abroad – Reuters Leave a comment

A computer keyboard lit by a displayed cyber code is seen in this illustration picture taken on March 1, 2017. REUTERS/Kacper Pempel/File Photo
Oct 20 (Reuters) – The U.S. Commerce Department on Wednesday announced new rules intended to curb the sale of offensive cybersecurity products to some countries with "authoritarian" practices, according to a Federal Register submission.
U.S. companies and any company that sells U.S.-made cyber software will need a license when selling hacking tools to certain foreign governments or any buyers, including middlemen, located in Russia or China.
"The United States Government opposes the misuse of technology to abuse human rights or conduct other malicious cyber activities, and these new rules will help ensure that U.S. companies are not fueling authoritarian practices," the Commerce Department said in a statement.
A license would be required for sales to foreign governments that are categorized as "countries of national security or weapons of mass destruction concern," or which are already subject to an arms embargo.
Historically, U.S. companies were already required to seek a license from the federal government when selling sensitive encryption technologies or communication interception systems abroad.
"These items warrant controls because these tools could be used for surveillance, espionage, or other actions that disrupt, deny or degrade the network or devices on it," a summary of the new rules in the Federal Register states.
Experts say it is difficult to regulate this market because of how the industry categorizes offensive and defensive cybersecurity products.
Depending on how a certain defensive tool is deployed or re-engineered, it can be potentially transformed into a surveillance capability.
The United States is a leader in the sale of cybersecurity products, alongside Israel.
"The United States is committed to working with our multilateral partners to deter the spread of certain technologies that can be used for malicious activities that threaten cybersecurity and human rights," U.S. Secretary of Commerce Gina Raimondo said in a statement.
The rules will become final in 90 days, following a public comment period.
The announcement follows charges by the U.S. Justice Department against three former U.S. intelligence community officials who offered hacking services to the United Arab Emirates government, helping it spy on dissidents and geopolitical rivals. The three men worked for a Maryland defense contractor before joining a local Emirati company.
The Biden administration has instituted a series of new cybersecurity regulations to help protect critical infrastructure, like gas pipelines and transportation hubs, from being attacked by hackers. But the rules announced on Wednesdayare among the most consequential concerning the export of American cyber technologies abroad.
Our Standards: The Thomson Reuters Trust Principles.
Subscribe for our daily curated newsletter to receive the latest exclusive Reuters coverage delivered to your inbox.
Reuters, the news and media division of Thomson Reuters, is the world’s largest multimedia news provider, reaching billions of people worldwide every day. Reuters provides business, financial, national and international news to professionals via desktop terminals, the world's media organizations, industry events and directly to consumers.
Build the strongest argument relying on authoritative content, attorney-editor expertise, and industry defining technology.
The most comprehensive solution to manage all your complex and ever-expanding tax and compliance needs.
The industry leader for online information for tax, accounting and finance professionals.
Information, analytics and exclusive news on financial markets – delivered in an intuitive desktop and mobile interface.
Access to real-time, reference, and non-real time data in the cloud to power your enterprise.
Screen for heightened risk individual and entities globally to help uncover hidden risks in business relationships and human networks.
All quotes delayed a minimum of 15 minutes. See here for a complete list of exchanges and delays.
© 2021 Reuters. All rights reserved


Leave a Reply

Your email address will not be published. Required fields are marked *