Cybersecurity

Outgoing Official Pushes for CISA Shift from Risk Advisor to Risk Reducer

After almost a decade and a series of massive intrusion campaigns, government and industry may finally be ready to have the crucial talk about cybersecurity metrics they’ve been avoiding.

Cybersecurity

NIST Refreshing Voluntary Cybersecurity Framework Amid Push for Mandates

The agency is soliciting comments to update a core document that lets entities pick and choose which technical standards they want to apply to their systems based on their own risk assessment.

Emerging Tech

Nuclear Regulators Want Machines to Monitor Cyberattacks on Power Plants

This isn’t the NRC’s first ask about machine learning and artificial intelligence.

Cybersecurity

Nearly 100 Utility Companies Now Participate in Cyber Sensor Initiative

The White House effort to secure industrial control systems from cyberattack requires nothing of the private sector. 

Cybersecurity

FBI: Ransomware Attackers Have Code to Halt Critical Infrastructure

Monitoring remote access technology will be especially important for limiting the reach of malicious actors, allied cybersecurity agencies said in a report on trends they’ve observed over the last year in a booming ransomware industry.

Cybersecurity

EPA Leading White House Effort to Secure the Water Sector Against Cyberattacks

This is the third in a series of 100-day sprints to shore up industrial control systems used in critical infrastructure.

Cybersecurity

Biden Official Endorses Effort to Move Pipeline Cybersecurity Regulation to DOE

An emergency directive from the Transportation Security Administration following the Colonial Pipeline attack faced opposition from Senate Republicans after the industry complained they weren’t sufficiently consulted beforehand.

Emerging Tech

Energy Launches New Program To Overhaul the U.S. Electrical Grid

Pursuant to President Biden’s sustainable energy plans, the Department of Energy launched a new initiative to restore the country’s electrical grid through expanded access and more resilient systems.

Ideas

The Implications of Publicly Disclosing Cyberattacks

Officials must weigh the benefits and risks on a case-by-case basis.

Emerging Tech

Labor Seeks Members For Telecom Working Group Focused on 5G

The agency is seeking qualified members for its Telecommunications Interagency Working Group, part of the Infrastructure Act passed in November.

Cybersecurity

DHS Redefines ‘Cybersecurity Incident’ in Directives for Surface Transportation

The new definition allows industry more flexibility to decide what should trigger reporting mandates for the sector.

Cybersecurity

Commerce Proposes Third Party Audits as Criteria in Supply Chain Rule for Software

The Government Accountability Office says CISA should also update its approach to communications sector reliability by securing the supply chain for information and communications technology.

Cybersecurity

Report Shows Global Financial Giants Are at Risk of Cyberattacks

A new report by Constella Intelligence raises questions as to whether the sector is doing enough to protect itself.

Cybersecurity

Info Sharing and Securing Critical Infrastructure Top Key Congressman's Cybersecurity Priorities

“My colleagues see an urgency for new legislation now, in a way that wouldn’t be possible a few years ago," said Rep. James Langevin.

Cybersecurity

Utilities Face Growing Global Cyber Threat Landscape

A cybersecurity firm focused on industrial cybersecurity is tracking 15 groups, 11 of which are targeting utilities. 

Cybersecurity

National Cyber Director: Liability Should Be Part of the Equation for Public-Private Collaboration

Cyber leaders’ plan to emphasize collective defense over offense hinges on industry’s willingness to share information with government in real time.

Ideas

Operational Technology in the Crosshairs

Yes, utilities use both IT and OT, but so do data centers.

Cybersecurity

Agencies Warn of Ongoing Cyber Threats to Water Treatment Facilities

The Cybersecurity and Infrastructure Security Agency and other agencies issued a joint advisory about mitigating ransomware threats.

Digital Government

Labor Department Awards Verizon $887M to Radically Revamp IT Backbone

No other Enterprise Infrastructure Solutions selections are planned by the department.

Cybersecurity

Watchdog: CISA Needs to Update Plans to Protect Critical Infrastructure

The Department of Homeland Security Inspector General report on dam security found a lack of coordination among agency teams.