Cybersecurity

Congress approves 2025 NDAA with important cyber provisions

Left out was language that would have helped clarify the scope and reach of a controversial surveillance power that was renewed in April.

Cybersecurity

CISA orders federal agencies to secure their cloud environments

Federal civilian agencies are compelled by the Binding Operational Directive to adopt specific cloud standards under SCuBA, a government blueprint that helps agencies assess cloud security security guidelines.

Cybersecurity

FY2025 NDAA targets spyware threats to U.S. diplomats, military devices

The language comes as the State department has pressed foreign governments to collectively set standards to prevent spyware abuses.

Cybersecurity

FCC to soon announce lead administrator for cyber assurance program

More information will also be unveiled during the 2025 CES, Deputy National Security Advisor Anne Neuberger said.

Cybersecurity

Will cyber suffer under Trump’s goal to slash federal budgets?

Donald Trump’s intent to cut agency budgets has sparked concerns over adequate cybersecurity funding for government networks. Some believe these fears may be overstated.

Cybersecurity

White House cyber czar launches new hiring sprint 

The federal government’s main occupational series for IT jobs saw 3,000 open positions in fiscal 2024.

Emerging Tech

Officials urge a quick start migrating to post-quantum encryption

Biden administration officials on Tuesday emphasized the need for entities to start network migration efforts as encryption algorithms are now ready for implementation.

Cybersecurity

Researchers race to document voting machine vulnerabilities ahead of November

Voting machines are key physical targets in election fraud schemes. At the DEF CON hacking conference, cybersecurity experts have been working to safeguard them.

Cybersecurity

Nearly 200 firms have signed pledge to build more secure software, top cyber official says

The initial tally began at around 70 companies when CISA first headlined the initiative at RSA Conference in San Francisco.

Cybersecurity

NIST will fire the ‘starting gun’ in the race to quantum encryption

Experts in the public and private sectors highlighted how to proactively transition networks to quantum-resilient standards.

Cybersecurity

Watchdog calls out EPA for continued cybersecurity concerns

The EPA has still not implemented GAO’s 2019 recommendation to develop a process for conducting an organization-wide cybersecurity risk assessment. 

Cybersecurity

White House announces plans to revamp data routing security by year-end

Border Gateway Protocol hijacking attacks are becoming more sophisticated, according to National Cyber Director Harry Coker.

Artificial Intelligence

Five Eyes agencies issue guidance on securing AI

The new best practices aim to help organizations deploying AI to secure their digital environments, with a particular focus on protecting AI model weights and extensive system vigilance.

Cybersecurity

New bill would create a governing body for water system cyber standards

The legislation comes after the Biden administration rescinded a memorandum that would have tied water sector cyber reviews to existing sanitation surveys.

Defense

The US must create an independent cyber armed service, report argues

The study involved interviews with over 75 active-duty and retired U.S. military officers and argues an independent Cyber Force is an ideal operating model.

Cybersecurity

Biden seeks 10% bump to civilian cybersecurity spending for FY25

The funding boost is influenced by the White House’s National Cyber Strategy released last year.

Cybersecurity

Energy to fund 16 infrastructure cybersecurity projects 

The White House’s cybersecurity strategy implementation plan asks the agency to identify pilot projects for energy infrastructure security.

Cybersecurity

NIST debuts the finalized update to its Cybersecurity Framework

The streamlined blueprint has already gotten positive feedback from private sector organizations.