The U.S. Cybersecurity and Infrastructure Agency is moving its Einstein intrusion detection system deeper into federal networks to better detect supply chain attacks. The Einstein system failed to spot the SolarWinds supply chain attack, which led to follow-on attacks on nine federal agencies and 100 companies. CISA is using some of the $650 million allocated to the agency under the American Rescue Plan to make changes in Einstein implementations, the agency’s acting director says. Einstein will be able to pick up data from endpoints, such as servers and workstations, he says.”]
Source: https://www.cuinfosecurity.com/cisa-shifting-einstein-detection-system-deeper-into-networks-a-16922