Cybersecurity

Lawmakers seek details on damage done by the SolarWinds hack

As information trickles out about which federal agencies have been compromised by a sophisticated hacking operation, lawmakers have begun seeking an extensive accounting of what damage has been done.

Cybersecurity

NSC invokes 2016 directive to respond to SolarWinds hack

The National Security Council's announcement to create a special group for coordinating the federal government's response to the SolarWinds hack comes as the list of affected agencies grows.

Cybersecurity

Hack at Treasury and Commerce spurs emergency order from CISA

The Cybersecurity and Infrastructure Security Agency issued an emergency directive late Sunday night after reported breaches at two cabinet agencies. The Department of Homeland Security, CISA's parent agency, also has reportedly been breached.

Cybersecurity

Cyber czar, CISA subpoenas included in must-pass defense bill

Lawmakers are poised to vote on a defense policy bill that would advance dozens of recommendations made by a cyberspace commission.

Cybersecurity

CISA doesn't plan to tackle COVID vaccine disinformation

CISA’s acting director Brandon Wales said his agency is not the right source to counter anticipated disinformation about coronavirus vaccines.

Cybersecurity

Senate proposes $58M boost to CISA's budget to clear out risk assessment backlog

The Senate Appropriations Committee's bill would aim to help CISA reduce an ongoing backlog of vulnerability assessments requested by state and local agencies.

Cybersecurity

Upgraded CDM dashboard to roll out through FY2021

DHS officials say four federal agencies are now using an upgraded Continuous Diagnostics and Mitigation dashboard and they plan to continue implementing the platform elsewhere throughout the fiscal year.

Cybersecurity

Trump fires top DHS cyber official who debunked election misinformation

Chris Krebs is out as the government's top cybersecurity official following a tumultuous election and his agency's campaign to debunk election misinformation.

Cybersecurity

House lawmaker stumps for 5-year term for CISA's director

Rep. Lauren Underwood (D-Ill.) says House lawmakers will continue to push to enshrine in law 5-year terms for CISA directors, despite resistance in the Senate.

Cybersecurity

DHS panel says 2020 vote was 'most secure in American history'

The statement directly contradicts the most recent in a raft of conspiracy theories put forth by President Donald Trump stating that a voting machine vendor secretly changed votes.

Cybersecurity

Election Day is over, but threats to voting systems remain

Cyber threats to election systems remain a concern for the Department of Homeland Security well into December throughout the vote counting process.

Cybersecurity

National Guard taking expanded election support role in 2020

The National Guard has increased its election support duties, especially when it comes to cyber, since 2018. This year guardsmen will be on the keyboards and, in some areas, at the polls.

Cybersecurity

Solarium Commission looks to boot China from the tech supply chain

The Cyberspace Solarium Commission is looking to shore up security in the information and communications technology (ICT) sector by reducing dependency on suppliers from rival powers, especially China.

Cybersecurity

Group warns of gaps in election infrastructure

The security of voting infrastructure has come a long way since 2016, but it still depends on the state and local governments maintaining it, said a digital rights and election technology expert.

Cybersecurity

CISA confident on election cybersecurity

The Cybersecurity and Infrastructure Security Agency's efforts to help state and local governments secure their election critical infrastructure are in an intense home stretch for 2020, according to the agency's top risk manager.

Cybersecurity

PIV security frays under the crush of telework

Adversaries are adapting to the shifting identity authentication gaps on federal and commercial networks created by the remote work environment, according to federal security experts.

Cybersecurity

CISA orders agencies to patch dire Window flaw

The Cybersecurity and Infrastructure Security Agency alerted federal agencies of an authentication flaw in Microsoft server software in need of an immediate fix.

Cybersecurity

Shared services poised for adoption

Quality Service Management Offices shared service offerings move closer to reality for federal agencies.

Cybersecurity

CISA, White House release vulnerability disclosure policies

The Office of Management and Budget and the Cybersecurity and Infrastructure Security Agency have released a memorandum and Binding Operational Directive guiding federal agencies on how to set up their vulnerability research and disclosure programs.

Cybersecurity

CISA bug bounty directive awaits White House blessing

A draft policy from the Cybersecurity and Information Security Agency instructing agencies to create vulnerability disclosure programs to allow third-party bug hunters to flag security vulnerabilities in federal systems is all-but-completed, sources say.