Cybersecurity

More than 1,000 federal system flaws fixed via CISA's bug reporting platform

The nation’s cyber defense agency is scaling up a key program that gives federal agencies a chance to remediate vulnerabilities before they can be exploited.

Cybersecurity

New bill would require all federal contractors to develop vulnerability disclosure policies

The Federal Cybersecurity Vulnerability Reduction Act aims to establish standardized vulnerability disclosure policies across all federal contractors. 

Cybersecurity

North Korean hackers poised to cash out $40 million in bitcoin after crypto heists, FBI warns

The law enforcement agency says it has been tracking large volumes of cryptocurrency stolen by North Korean hackers during a summer of high-profile cyber heists.

Cybersecurity

National intelligence office issues cyber warning for government and commercial satellites

The warning comes just about a month after three teams at the DEF CON 23 convention in Las Vegas managed to successfully hack a government satellite in orbit.

Cybersecurity

Threat actor targeted DOD contracting website

Malware leveraging flaws in edge routers has been spying on military contracting websites, according to research from Lumen's Black Lotus Labs.

Cybersecurity

CISA prioritizing on-site K-12 cybersecurity reviews this school year

The nation’s cyber defense agency is aiming to work with schools “where they’re at instead of where they should be.” 

Cybersecurity

CISA conducts largest annual election security drills amid threats targeting voting systems

The nation’s cyber defense agency hosted a three-day election security exercise with state, local and federal officials ahead of the 2024 race.

Cybersecurity

New CISA guidance looks to guard against supply chain hacks

The Cybersecurity and Infrastructure Security Agency advocates constant communication and education as cyber threat mitigative measures.

Cybersecurity

New bill aims to address private sector cyber risks to FEMA operations

A proposed amendment to the Homeland Security Act would task FEMA and the Cybersecurity and Infrastructure Security Agency to work with private entities to ensure digital risks to agency operations are mitigated. 

Cybersecurity

Voting machine hacking plot figures into Trump indictment

A plot allegedly hatched by lawyer Sidney Powell to use stolen data to rewrite the results of the Georgia vote in the 2020 election is a key piece of the fourth indictment of former President Donald Trump.

Cybersecurity

White House cyber office has its eye on workforce data

Data on the cybersecurity workforce is fragmented and inconsistent. A top White House official is looking to change that.

Cybersecurity

DHS cyber review board to examine China-linked cyberattacks of Microsoft 

The Cyber Safety Review Board will assess how a hacking group reportedly linked to China leveraged a vulnerability in Microsoft Exchange Online to access government emails. 

Cybersecurity

China not ahead of U.S. in cyber and surveillance, NSA head says

NSA Director Paul Nakasone said working with the private sector is “tremendously important” when it comes to maintaining the nation’s edge over adversaries like Russia and China.

Cybersecurity

House committee asks FCC for more action on IoT device security

A letter from the House Select Committee on the Chinese Communist Party asks the FCC for investigations into Chinese-linked connectivity modules as the agency launches its IoT cyber labeling program.

Cybersecurity

White House looks to shore up open source software security

The Office of the National Cyber Director wants software providers to "contribute back to the security of the open source software they depend upon."

Cybersecurity

Biden orders greater restrictions on emerging technology transactions with China 

The new executive order updating the sanctions regime between U.S. citizens and China is a “national security action,” according to an administration official.

Cybersecurity

White House plan to secure schools from cyber threats ‘may not go far enough,’ experts say

As families across the country prepare for the back-to-school season, federal officials are preparing for increased cyberattacks targeting the nation’s education system.

Cybersecurity

Updated NIST cyber framework focuses on on governance

The National Institute of Standards and Technology is seeking public feedback on its revamped Cybersecurity Framework, which includes guidance on operationalizing cyber best practices.

Cybersecurity

White House cyber office makes new workforce-focused hire

Daniel “Rags” Ragsdale is joining the White House Office of the National Cyber Director, following work in the private sector, Defense Department and cyber research space.

Cybersecurity

White House launches new cybersecurity campaign to safeguard schools

The administration and its private sector partners announced a slate of new initiatives on Monday aimed at protecting the nation’s school systems and their digital infrastructure.