Cybersecurity

Log4j Vulnerability Prompts Lawmakers to Examine Agency Cyber Measures

House Energy and Commerce Committee leaders asked several federal agencies about mitigation efforts, following a previous CISA emergency directive about the vulnerability.

Cybersecurity

CISA Releases Cybersecurity Toolkit to Help Protect Upcoming Midterm Elections

The guide for state and local election officials offers free tools to help mitigate digital threats and safeguard voting systems from outside intrusion.

Cybersecurity

'Hack DHS' Bug Bounty Program to Begin Second Phase with New Contract Request

The contract is geared toward companies that can conduct crowdsourced events and competitions for vetted security researchers, to help bolster DHS’ cyber resilience.

Cybersecurity

New Bill Would Unlock Cybersecurity Funding for Small Businesses

Sen. Maggie Hassan’s proposed law would help set up funds to protect smaller organizations from malware.

Cybersecurity

NIST, CISA Finalizing Guidance for Identity and Access Management Post-SolarWinds

The epic intrusion campaign has turned up the brights on vendors providing authentication services, but agencies will still need to be actively engaged for effective implementation.

Emerging Tech

NSF Invests $25.4M into Cybersecurity and Privacy Research Projects

The National Science Foundation’s Secure and Trustworthy Cyberspace program is one of the agency’s largest research initiatives.

Cybersecurity

White House Official: EPA to Issue Cybersecurity Rule for Water Facilities

As the U.S. pursues collaboration with international allies, the official noted lagging cybersecurity policies for domestic critical infrastructure. 

Emerging Tech

New Quantum Hardware Could Allow Computers to Process Information More Naturally

Current quantum computers are stuck using binary processes designed for traditional computers.

Cybersecurity

Camille Stewart Gloster Latest Appointment to Office of the National Cyber Director

The former Google alum joins the White House as multiple federal agencies look to recruit top-tier talent for enterprise technology positions.

Ideas

Understanding NIST’s Post-Quantum Encryption Standardization and Next Steps for Federal CISOs

The National Institute of Standards and Technology recently chose new cryptographic algorithms to defend against quantum computers.

Cybersecurity

NIST Revises Cybersecurity Guidelines Specifically for HIPAA

NIST will accept comments on the updated draft publication regarding HIPAA’s Security Rule until September 21. 

Cybersecurity

Official: White House to Meet with Rail Industry Before Issuing Cybersecurity Rules

The meeting comes as the Office of the National Cyber Director prepares a more comprehensive approach to securing privately owned and operated critical infrastructure.

Cybersecurity

CISA Builds Out Effort to Influence Global Policy With London Attaché

The office will inform other efforts to come as the agency grows its international presence.

Cybersecurity

NIST Selects 12 Companies for Implementing Post-Quantum Cryptography 

Officials leading a standardization effort—based on four winning algorithms—are relying heavily on industry for success.

Cybersecurity

TSA Implements 'Surge Team' to Allow Pipeline Industry Flexibility on Security Directives

The new recruits are processing companies’ requests seeking the approval of “alternative measures” to comply with a directive the agency issued in response to the May 2021 ransomware attack on Colonial Pipeline.

Cybersecurity

NIST Identifies 4 Quantum-Resistant Encryption Algorithms

Federal researchers are one step closer to protecting U.S. data from quantum computing decryption capabilities.

Cybersecurity

Homeland Security, Israeli Partners Team to Improve Cyber Resilience

The joint initiative will be managed by the Israel-U.S. Binational Industrial Research and Development Foundation.

Cybersecurity

CISA Recommends Immediate Action for Microsoft Exchange Online Users

The recommendation is in line with Executive Order 14028, which requires federal agencies to implement multi factor authentication.

Cybersecurity

Historic NATO Meeting Extends Cybersecurity Collaboration to Asia-Pacific Allies

The security alliance is squaring off against Russia and China by building a coordination capability for rapidly responding to cyber attacks.