Cybersecurity

A law directing cyber reg harmonization would ‘help enormously,’ White House official says

The remarks come a day after ONCD issued a blog calling for cybersecurity regulations to be harmonized.

Cybersecurity

White House urges streamlined cyber rules following industry feedback

Private sector input from an August 2023 information request signals a need to harmonize cybersecurity regulations, said ONCD chief Harry Coker.

Cybersecurity

FTC-industry talks over possible Microsoft probe raised recent hacking incidents

Chinese and Russian cyber infiltrations into agencies’ Microsoft email systems came up in discussions over a possible antitrust investigation into the company, people familiar say.

Cybersecurity

Former NSA head feels ‘really good’ about election security come November

Paul Nakasone, the recently retired head of NSA and CYBERCOM, said the intelligence community has everything it needs to combat election interference attempts later this year.

Cybersecurity

NIST taps Analygence to help fix vulnerability database backlog

The standards agency has been unable to keep up with the inflow of system vulnerabilities being reported to its database.

Cybersecurity

Senator calls for federal probes of UnitedHealth for negligent cyber practices

Hackers broke into Change Healthcare systems due to a lack of multifactor authentication.

Cybersecurity

US disables global cybercrime network that enabled theft of billions in fraud schemes

The botnet infected some 19 million IP addresses, with over 600,000 of them based in U.S. locations. Government fraud losses reached some $6 billion from the operations.

Cybersecurity

Online health services, apps to face new data security rule enforcement in July

The FTC rules are meant to incentivize digital health providers to shore up their security postures and increase transparency in the event of a data breach.

Cybersecurity

Watchdog calls out EPA for continued cybersecurity concerns

The EPA has still not implemented GAO’s 2019 recommendation to develop a process for conducting an organization-wide cybersecurity risk assessment. 

Cybersecurity

White House announces plans to revamp data routing security by year-end

Border Gateway Protocol hijacking attacks are becoming more sophisticated, according to National Cyber Director Harry Coker.

Cybersecurity

Cyber Force study gets added to House panel’s 2025 defense policy bill

The study on whether to create a Cyber Force branch in the Pentagon now goes to the House floor as part of the 2025 NDAA.

Cybersecurity

Former White House cyber official Jeff Greene to join CISA

He is expected to replace outgoing assistant cybersecurity director Eric Goldstein, according to multiple media reports.

Exclusive Cybersecurity

CISA would get millions for cyber workforce outreach to underserved communities under new bill

The measure comes amid concerns from cybersecurity officials and professionals over how workforce diversity gaps may threaten U.S. cyber defenses.

Cybersecurity

CYBERCOM, DARPA pen agreement to speed up advanced cyberwarfare research

The accord follows a 2022 announcement of the joint-agency Constellation cyber prototyping program.

Cybersecurity

More than 70% of surveyed water systems failed to meet EPA cyber standards

The agency says it will take certain enforcement actions in cases where there is imminent danger from a cyberthreat against water infrastructure.

Cybersecurity

House panel advances measure to dissolve SEC cyber disclosure rule

The White House has said the president would veto any legislative effort to revoke the rule.

Cybersecurity

New mailing list aims to share hacking attempts on open-source projects

The Siren email list allows members to share active exploitations of open-source projects, fueled by recent attempts to sabotage free-to-use software tooling

Cybersecurity

CISA issues guidance to help federal agencies better encrypt DNS traffic

The guidance is part of a broader effort to help the federal ecosystem meet a zero trust deadline this fall.

Cybersecurity

North Korean IT workers tried getting jobs in government agencies — the US is offering $5M for details

DPRK operatives have long worked to position themselves in remote IT jobs and pilfer money for Pyongyang's weapons programs.