{"database": "press", "table": "releases", "rows": [["https://www.wyden.senate.gov/news/press-releases/wyden-calls-on-nsa-to-update-federal-cybersecurity-guidance-for-vpns", "Wyden Calls on NSA to Update Federal Cybersecurity Guidance for VPNs", "2026-09-02", "2026", "2026-09", "Democrat", "Senate", "OR", "Ron Wyden", "W000779", "www.wyden.senate.gov", "wyden", "https://www.wyden.senate.gov/news/press-releases", "scraper", "Following a CRS memo, Wyden presses the NSA for answers on protecting Americans\u2019 communications from foreign surveillance\n\nWashington, D.C. \u2013 U.S. Senator Ron Wyden, D-Ore., today urged General Joshua M. Rudd, the Director of the National Security Agency (NSA) to update federal cybersecurity guidance for Virtual Private Networks (VPNs) to address surveillance threats posed by foreign intelligence agencies.\n\nA Congressional Research Service (CRS) memo, requested by Senator Wyden and released along with the letter, highlights the vulnerability of consumer VPNs to surveillance by intelligence agencies capable of monitoring large swaths of the internet. The CRS memo cautions that \u201cencryption strength alone does not protect users from an advanced, persistent threat conducting bulk data traffic collection.\u201d Even when data traffic is encrypted, it can reveal metadata \u2013 such as its source, destination, timing, and volume \u2013 that foreign adversaries can analyze and correlate across networks to potentially identify and track users\u2019 internet browsing without breaking the encryption\n\nThe CRS memo notes that other technologies, including Apple iCloud Private Relay, Tor, Nym can better protect users from such surveillance by sending their data through multiple servers, often in different jurisdictions.\n\n\u201cAmericans facing advanced foreign threats\u2014including government personnel, defense contractors, journalists, and human rights defenders\u2014deserve clear, honest advice about how best to protect their communications from surveillance by foreign adversaries,\u201d Wyden wrote to General Joshua M. Rudd.\n\nWyden also released a letter he received in July from the Office of the Director of National Intelligence (ODNI), which recommends VPNs as part of basic cyber hygiene but stressed the importance of VPN providers\u2019 data retention and encryption practices. The DNI guidance did not address the vulnerability of consumer VPNs to foreign surveillance or the relative benefits of multi-server technologies like Apple iCloud Private Relay, Tor and Nym. In addition to requesting that NSA update its existing guidance related to VPNs, Wyden requested that NSA provide unclassified responses to the following questions by September 20, 2026:\n\nAre standard, single-hop commercial VPNs sufficient to protect Americans\u2019 sensitive digital footprints from foreign adversaries monitoring internet backbones?\n\nDoes the NSA recommend multi-hop tools such as Apple Private Relay, Tor, or Nym over standard VPNs for Americans facing heightened surveillance threats?\n\nWhat technical features, such as random delays, padding, and cover traffic, are needed to defend against sophisticated surveillance, and how does the NSA assess multi-hop systems like Apple Private Relay compared with Tor and Nym?\n\nWyden has been at the forefront of this issue, urging the Trump administration last month to end its use of insecure remote access software.\n\nA copy of the full letter sent to General Rudd, the CRS memo and the letter sent to Senator Wyden from the ODNI is available here.\n\n###", 1, "2026-09-03T09:29:33Z", "2026-09-03T09:31:32Z"]], "columns": ["url", "title", "date", "year", "month", "party", "chamber", "state", "member_name", "bioguide_id", "domain", "scraper", "source", "date_source", "text", "has_text", "collected_at", "updated_at"], "primary_keys": ["url"], "primary_key_values": ["https://www.wyden.senate.gov/news/press-releases/wyden-calls-on-nsa-to-update-federal-cybersecurity-guidance-for-vpns"], "units": {}, "query_ms": 0.8409330621361732, "source": "dwillis/congress-press", "source_url": "https://github.com/dwillis/congress-press", "license": "MIT", "license_url": "https://github.com/dwillis/congress-press/blob/main/LICENSE"}