Cybersecurity

White House Attributes Attack on Albania’s Critical Infrastructure to Iran 

A statement from the National Security Council noted the potential for deviations from international norms to escalate conflict and promised accountability.

Cybersecurity

Army Updates Cyber Training After Some Graduates Weren’t Ready for Their Jobs

New classes and updated curriculum reflect evolving threats and lessons from the Ukraine war.

Cybersecurity

Treasury Reissues Rules to Enforce Cyber Sanctions on Foreign Adversaries  

The rules could apply to any new executive order related to the national security emergency President Obama declared in 2015, in advance of a cybersecurity agreement with China.

Cybersecurity

NTSB Only Federal Agency Lacking a CISA-Mandated Vulnerability Disclosure Policy

CISA’s 2020 directive required that federal agencies under its authority develop policies allowing researchers to report bugs and flaws in public-facing systems.

Cybersecurity

GSA Seeks Info on Automated and Expert Tools to Analyze Application Security

The agency requested details on the tools available to address weaknesses in the applications and testing process, in an effort to boost security measures.

Cybersecurity

Election Officials Have Been Largely Successful in Deterring Cyber Threats, CISA Official Says

The head of CISA’s National Risk Management Center pointed to public-private partnerships and enhanced resource sharing activities as key to defending against outside threats to voting systems.

Cybersecurity

CFPB warns firms on poor cyber hygiene

The agency says that bad password and data management and other practices can expose companies to legal consequences.

Cybersecurity

NIST to Launch New Guidance on Security Risks of Telehealth and Smart Home Integration

The agency notes that “user experience” improvements may come with less control over privacy and security.

Cybersecurity

Housing agency didn't complete cyber orders from DHS, report says

The agency said that some of its websites failed to comply with binding operational directives from the Department of Homeland Security.

Cybersecurity

NSA, CISA and ODNI release new software supply chain guidelines for developers

An interagency, public-private working group “strongly encouraged” software developers to begin implementing a suite of best practices aimed at further securing the software development lifecycle.

Cybersecurity

National Cyber Director’s Office Elevates Key Personnel

Nick Leiserson helped develop legislation that created the cyber director’s office. A year after its establishment, he’s moving to a position where he can use it to shape policy.

Exclusive Cybersecurity

Much-hyped Effort to Help DHS Land Cyber Talent is Slow to Make Hires

So far about four hires have been made under the Cybersecurity Talent Management System, with the agency hoping to make offers to 150 new cyber specialists by the end of September.

Cybersecurity

DHS watchdog digs into uneven cyber awareness training, outdated policies

Some DHS policies and procedures aren’t up-to-date with the latest cybersecurity standards, a new report from the Office of the Inspector General at DHS says. The department, however, says that it’s taking action to mature their training program.

Cybersecurity

House Lawmaker Asks 9 Entities to Illuminate Crypto’s Security Concerns

Rep. Raja Krishnamoorthi issued nine letters to regulatory agencies and crypto trading platforms alike asking for future plans, emphasizing consumer protections.

Cybersecurity

Crucial Help Wanted at Cyber Director’s Office as CHIPS Act Adds to Responsibilities

The Office of the National Cyber Director is looking to fill two critical positions, while a recent executive order requires participation on a new steering council.

Cybersecurity

FTC sues location data collector, alleging lax security

The Federal Trade Commission is going after data broker Kochava over its practice of selling “sensitive geolocation data.”

Cybersecurity

U.S. and Israel Strengthen Cybersecurity Partnership

Both countries have pursued a bilateral cybersecurity agreement between their financial agencies since 2021, amid critical infrastructure threats. 

Cybersecurity

Capitol Hill Takes Aim at Twitter Following Whistleblower Complaint

The allegation of rampant security failures on Twitter’s platform prompted lawmakers to double down on data handling practices.

Cybersecurity

CISA Warns Critical Infrastructure to Prepare for Mass Post-Quantum Systems Migration

Quantum computing is the latest frontier in technological innovation, and its hacking potential has regulators advising companies to begin to safeguard their networks.