Biden signs sweeping cybersecurity order, just in time for Trump to gut it

A sweeping executive order issued at the end of the Biden administration aims to bolster US cybersecurity by tightening software supply chain requirements via federal procurement, strengthening federal network defenses (including phishing-resistant authentication and default transport encryption), and advancing both the use of AI for cyber defense and the security of AI systems, with NIST/CISA guidance and interagency information sharing. Experts warn of feasibility challenges, likely industry pushback, the lack of mandated end-to-end encryption, and limited focus on critical infrastructure, especially given the timing before an administration change. The article provides context from recent Chinese and Russian cyber activity and ransomware disruptions, as well as Microsoft’s warning about renewed FSB-linked phishing operations.