On June 20, 2024, the U.S. Department of Commerce's Bureau of Industry and Security (BIS) announced a ban on Kaspersky Lab, Inc., the U.S. branch of the Russian cybersecurity company. This decision stops Kaspersky from selling its antivirus software and providing cybersecurity services in the U.S. due to national security concerns.
The BIS found that Kaspersky's operations could be influenced by the Russian government, which poses a risk to U.S. security. Secretary of Commerce Gina Raimondo explained, "Russia has shown time and again they have the capability and intent to exploit Russian companies, like Kaspersky Lab, to collect and weaponize sensitive U.S. information" (BIS.gov).
In addition to the ban, BIS added three Kaspersky entities to the Entity List, limiting their ability to cooperate with Russian intelligence services. The entities include AO Kaspersky Lab and OOO Kaspersky Group in Russia, and Kaspersky Labs Limited in the UK.
The Commerce Department advises U.S. users to switch to other cybersecurity providers as soon as possible to avoid potential risks. The prohibition allows Kaspersky to continue some operations, like providing antivirus updates, until September 29, 2024, to give users time to transition.
The US Secretary of Homeland Security Alejandro N. Mayorkas stressed the importance of this action for protecting American privacy and security. He stated, "The actions taken today are vital to our national security and will better protect the personal information and privacy of many Americans".
The BIS, with other government bodies, are collaborating to inform U.S. customers, including state and local government agencies and critical infrastructure operators, about the steps needed to remove Kaspersky software and find alternatives. This action follows previous U.S. government measures against Kaspersky, including a 2017 directive to remove its software from federal systems and a 2018 law banning its use by the federal government. Kaspersky can continue some operations, like providing antivirus updates, until September 29, 2024, to give users time to transition.
Kaspersky has responded to the ban, stating that it is aware of the decision but believes it is based on geopolitical concerns rather than a fair evaluation of its products. The company emphasized, "Kaspersky does not engage in activities which threaten U.S. national security and, in fact, has made significant contributions with its reporting and protection from a variety of threat actors that targeted U.S. interests and allies".
Kaspersky further argued that the ban would benefit cybercriminals by reducing international cooperation among cybersecurity experts. "This will cause a dramatic disruption for our customers, who will be forced to urgently replace technology they prefer and have relied upon for their protection for years," the company stated.
For more security news, follow us on Cyberkach.com.