Cybersecurity

CISA tapped as shared services provider for cyber

The Office of Management and Budget formally designated Cybersecurity and Infrastructure Security Agency as the first Quality Service Management Office for shared services.

Cybersecurity

House Dems seek $400 million to help states deal with cyber threats during COVID-19

The request for new funding comes as state and local governments face an spike in ransomware attacks.

Cybersecurity

CISA looks to help secure federal telework

New guidance allows teleworking feds to connect and access agency and cloud resources from their homes while staying in compliance with the Trusted Internet Connection program.

Cybersecurity

CISA to release emergency TIC guidance for telework surge

The guidance will expire at the end of the year and will address capabilities such as email, networking, DNS, intrusion detection and data protection.

Cybersecurity

CISA looks to industry for anti-troll tools

The agency is looking to bolster its technical capabilities to identify foreign propaganda online that targets specific audiences in the U.S.

Cybersecurity

CISA stress tests DHS telework capacity

Not every agency will be ready to flip the switch from F2F to WFH, according to experts and former officials.

Cybersecurity

Ransomware top of mind for DHS cyber chief

The director of the Cybersecurity and Infrastructure Security Agency said the organization has been “a little bit late to the game” recognizing the potential of ransomware to directly touch the lives of citizens, but that’s changing.

Cybersecurity

TIC 3.0 and zero-trust networking

Commentators on the new Trusted Internet Connection policy have noted that "zero-trust" strategies might not be a perfect fit.

Cybersecurity

CISA leans into facilitator role in election security plan

A strategic plan for protecting the 2020 elections from foreign interference lays out a number of plans to support and empower other stakeholders from hacks, influence operations and other threats.

Cybersecurity

Budget request emphasizes cyber, network security efforts

The document provides a peek at how the administration would prioritize cybersecurity spending across DHS, Energy, Treasury and other departments.

Cybersecurity

CISA "not well-positioned" to execute nationwide election security strategy in 2020

Resource constraints and a reorganization have prevented CISA from rolling out its election security plans for 2020, but states still give the agency high marks.

Cybersecurity

Three agencies team on cyber defense of energy infrastructure

Three agencies with stakes in protecting critical energy infrastructure renew their efforts to develop cyber threat protections.

Cybersecurity

CISA touts CDM, CyberStat as key cyber compliance tools

A watchdog report found DHS doesn't always validate whether agencies are complying with mandatory directives. The department floated plans to leverage two existing program to do just that.

Cybersecurity

Senators introduce bill to create state cyber coordinators at DHS

Lawmakers said the legislation was crafted following conversations with local officials who have expressed a desire for more federal support.

Cybersecurity

Cybersecurity front and center in Iran threat hearing

Members of the House Homeland Security Committee quizzed experts about the capabilities of Iran's cyber forces.

Cybersecurity

CISA looks for input on new, 'less prescriptive' TIC

Agencies can use new guidance documents on Trusted Internet Connections 3.0 to jumpstart their own pilot programs and suggest improvements to the policy.

Cybersecurity

CISA alerts on NSA-discovered Windows 10 flaw

Attackers could use the vulnerability to trick users into installing "updates" from trusted parties that are actually malware.

Cybersecurity

Cyber Solarium to back CISA as the lead response agency

Leveling up CISA and CyberCom and streamlining Congressional jurisdiction will be among the recommendations issued in an upcoming report from the Cyberspace Solarium Commission.

Cybersecurity

CISA cautions on Iran threats

U.S. officials and cybersecurity experts are concerned that Iranian reprisals for the killing of Soleimani could take the form of attacks on U.S. networks or critical infrastructure.

Cybersecurity

Killing of Iranian general spurs concern about cyber retaliation

Iran has threatened to respond to the targeted killing of senior general Qassem Soleimani, and analysts say the goal will be to punish the U.S. by targeting its IT and critical infrastructure while avoiding traditional military conflict.