Cybersecurity

White House to officially ban TikTok from government devices within 30 days

New guidance from the Office of Management and Budget finalizes a congressional push to ban the popular Chinese social networking app from all government devices amid privacy and security concerns.

Cybersecurity

CISA Director Calls Out Industry Using Consumers as Cyber 'Crash Test Dummies'

The head of the Cybersecurity and Infrastructure Security Agency said technology companies need to be more proactive when it comes to promoting safety and security.

Cybersecurity

CISA Seeks Private Sector Support for Cybersecurity Risk Management

The agency is looking to identify contractors capable of offering services for its Insights Branch, which provides technical cyber risk reduction.

Cybersecurity

CISA Tells Agencies What to Prioritize to Meet Cybersecurity Log Mandate

The guidance document also explains how CISA and the FBI will work with agencies to investigate cybersecurity incidents.

Cybersecurity

CISA Urges 'Increased Vigilance' for Cyber Threats on Anniversary of Russia’s Invasion of Ukraine

As Russia’s full-scale war in Ukraine reaches its one-year anniversary, CISA has warned that the U.S. and European nations “may experience disruptive and defacement attacks against websites in an attempt to sow chaos and societal discord.”

Cybersecurity

White House Committee Advocates Collaboration, Consensus in Cybersecurity Standards

The fourth installment of cybersecurity recommendations from the National Security Telecommunications Advisory Committee advocates more blanket requirements to strengthen the nation's cybersecurity posture.

Cybersecurity

House Dems Call for Info on Racially-Motivated Cyber Attacks

Several House lawmakers tasked DHS and CISA with providing information on “racially- or ethnically- motivated” violent attacks on the U.S. electrical sector.

Cybersecurity

Census Bureau data susceptible to ‘reconstruction attacks’ exposing individual data, report claims

A team of computer scientists demonstrated how cybercriminals can leverage commercial laptops to reverse engineer the Bureau’s statistics, leaving Americans exposed to risks like identity theft and discrimination. 

Cybersecurity

DOD IG: Officials Failed to Identify Security Risks When Authorizing Cloud Services

An audit conducted by the Defense Department’s inspector general found agency components “may be unaware of known vulnerabilities and cybersecurity risks associated with operating their systems or storing their data.”

Cybersecurity

Zero Trust Presents 'Doable' Cybersecurity Goals, State Department's CIO Says 

To shore up its cyber defenses, State is identifying potential vulnerabilities across its many disparate systems and working to boost its use of multifactor authentication.

Cybersecurity

DOD Unveils Updates to its Cyber Workforce Job Qualifications

Defense’s updated plan focuses on role-specific requirements and comes as the agency’s cyber workforce strategy is slated for imminent release.

Cybersecurity

Pending National Cyber Strategy to Feature ‘Strong Stand’ on Quantum Cryptography

An Office of the National Cyber Director official discussed the path of transitioning public and private networks to post-quantum cryptographic standards, and emphasizes data inventory in organizations’ efforts to transition cryptographic systems.

Cybersecurity

Almost 60% of GAO's Privacy Recommendations Since 2010 Are Unresolved

A watchdog report found that federal agencies have only implemented approximately 41% of recommendations related to the protection and security of sensitive data as of December 2022.

Cybersecurity

Report: Pentagon Personnel Use Unauthorized, Unsafe Apps on Work Devices

The Defense Department’s inspector general found that unsanctioned apps downloaded onto government-issued mobile devices “could pose operational and cybersecurity risks to DOD information and information systems.”

Cybersecurity

Report Reveals How US Has 'Not Advanced the Ball' on Top Cyber Risks

The top cybersecurity risks of 2023 include a shortage of trained cyber professionals, international strife and continued vulnerabilities in critical infrastructure services, according to a new report from the Bipartisan Policy Center.

Cybersecurity

CISA, South Korean Agencies Issue Joint Warning on North Korean Ransomware

The new cybersecurity advisory spotlights North Korean-backed actors targeting healthcare networks with ransomware.

Cybersecurity

Pentagon to Release New Cyber Workforce Strategy 'Any Day Now'

To address its workforce challenges, the Pentagon is undertaking new initiatives that will minimize education and certification requirements in favor of cyber knowledge and performance.

Cybersecurity

US and UK Join Forces to Sanction Russian Hackers

Members of cybercrime group Trickbot, which favors deploying ransomware on critical infrastructure, were handed sanctions in the first-of-its-kind collaboration between U.S. and U.K. agencies.