Cybersecurity

CISA Orders Agencies to Mitigate VMWare Vulnerabilities Under Deadline

Advanced adversaries appear to be exploiting the vulnerabilities to get around multifactor authentication.

Cybersecurity

Legislation Promoting Cyber Collaboration Between DHS and States Awaits Biden Signature

The legislation would improve information sharing between federal cybersecurity authorities and state and local governments.

Cybersecurity

Agencies are sharing cyber data with CISA, officials say

The Cybersecurity and Infrastructure Security Agency is rapidly expanding its visibility into federal networks under the Biden administration's cybersecurity executive order.

Cybersecurity

Agencies Showcase Federal Cyber Progress, Outline Future Threats

Witnesses from CISA, NIST, and the GSA spoke before a House Homeland subcommittee on their current efforts to bolster the nation’s cyber defenses.

Cybersecurity

Key Convener Releases Plan for Securing Open Source Software with White House

A crucial entity within the open source ecosystem is urging prioritization of libraries that support widespread applications like internet routing, among other things.

Ideas

The Cybersecurity Executive Order: From Missed Opportunity to Unexpected Progress

The impact of President Joe Biden’s cybersecurity executive order over the last year proved to go beyond initial expectations.

Cybersecurity

Survey: Most Agencies Expect to Meet Zero Trust Requirements

More than half of federal IT professionals surveyed are actively implementing a zero trust strategy.

Cybersecurity

US Signs on to New Electronic Evidence Protocol in International Cybercrime Agreement 

The new protocol is officially being added to the Budapest Convention—an arrangement between 66 member-states—after four years of negotiations.

Cybersecurity

Why the USAF's IT chief is 'bullish' on open source

While there's no such thing as completely secure software, open source can make it stronger through the "power of the crowd," said Lauren Knausenberger, the Air Force's chief information officer.

Ideas

One Year Later: A Hacker’s View on the Cybersecurity Executive Order

Federal network adversaries have evolved in the year since the order’s signing.

Cybersecurity

US, Allied Cybersecurity Agencies, Advise Reviewing Contracts with Tech Vendors

A joint advisory from CISA, domestic partners and counterpart agencies in the Five Eyes intelligence alliance warns of a heightened threat to managed service providers and their customers.

Cybersecurity

US and Allies Attribute Attack on U.S. Satellite Provider in Ukraine to Russia

Officials are highlighting significant spillover effects from the attack—including damage to infrastructure supporting wind farms—into Central Europe.

Cybersecurity

Cyber assistance ranks high on National Guard requested services, chief says

Gen. Daniel Hokanson, chief of the National Guard Bureau, said cybersecurity assistance is "one of the most frequently requested things that we're seeing right now" thanks to nearly 4,000 cyber professionals, many of whom acquired their skills as civilians.

Cybersecurity

Survey: 93% of Americans Fear Cyber Warfare Against U.S.

A consumer survey suggests Americans are taking some steps to prepare for possible cyber warfare.

Cybersecurity

Transportation Proposes Near $1M Fine for Colonial Pipeline One Year After Hack

The firm has 30 days to respond with evidence contesting the agency’s allegation of safety violations.

Cybersecurity

White House sounds alarm on threat from quantum computers

New directive orders the government to work with industry on security that can stand up to tomorrow’s quantum-powered decryption tools.

Cybersecurity

Defense Officials Push For Cyber Standards Compliance, Citing Warfighter Needs

Officials from Defense’s CIO Office reiterated the need for strong digital defenses as conflicts take aim at critical infrastructure.

Cybersecurity

Federal Agencies Likely to Get New Cybersecurity Guidance ‘In Coming Weeks’

New top-level guidance—and requirements—are coming for managing software security risk at federal agencies

Cybersecurity

NIST’s Supply-Chain Security Guidance Tells Agencies: Look to FedRAMP First

The agency has spent years revising guidance for organizations to address vulnerabilities presented by vendors of software and other enterprise suppliers.