Cybersecurity

More Cyber Attacks Disable Ukrainian Websites

Wednesday’s denial-of-service attacks on government, financial sites resemble earlier ones attributed to Russia.

Cybersecurity

Ransomware Attacks Exploded in Number and Scale in 2021, Per Cyber Firm

A new Crowdstrike report describes a dramatic increase in activity from both criminal and smaller nation-state groups.

Cybersecurity

Senators Want More out of SEC Plans to Address Cyberattacks

A rule the commission proposed for investment funds and advisors is not precisely what key cybersecurity leaders had in mind.

Cybersecurity

Senators Relaunch Cybersecurity Bills Following log4j Concerns

The new package bill was introduced amid calls for increased government support of open-source software development.

Cybersecurity

NIST Suggests Agencies Accept the Word of Software Producers Per Executive Order

The standards agency said an attestation from vendors themselves would be sufficient when screening for cybersecurity, unless an agency's risk calculus suggests otherwise.

Cybersecurity

New Cyber Safety Board Pivots to Tackle log4j Vulnerabilities

The DHS body’s primary focus will be on addressing vulnerabilities in the commonly used log4j software library, but will also incorporate findings on the ‘SolarWinds’ hack.

Ideas

What It Will Take for NIST, CISA and OMB to Align on Zero Trust

Establishing a successful zero-trust architecture without implementing integrity monitoring is not possible.

Cybersecurity

DHS Official to Chair Biden-ordered Cyber Safety Review Board

Cybersecurity professionals say the board needs subpoena authority in order to be effective.

Cybersecurity

FTC Warns of 18-Fold Surge in Investment, ‘Romance’ Scams on Social Media

More than 95,000 Americans were bilked over social media in 2021 resulting in losses approaching $1 billion.

Cybersecurity

FISMA Bill Drops in House Amid Confusion Over Federal CISO Role

Rep. John Katko is continuing a campaign to make the Cybersecurity and Infrastructure Security Agency a central Chief Information Security Office—or CISO— for federal civilian agencies.

Ideas

Taking Control of Ransomware and Other Malware with a Zero-Trust Strategy

Antivirus, sandboxing and similar detection techniques can’t keep up. It’s time for agencies to transform their approach to thwarting malware.

Digital Government

Man Arrested For Alleged Exportation of Technology To Iran From U.S.

A dual American-Iranian citizen was arrested and charged with one count of conspiracy to illegally export technology and electronic equipment to Iran despite sanctions.

Digital Government

Congress Losing a Heavy Hitter on Cybersecurity

Rep. Jim Langevin, co-chair and founder of the House Cybersecurity Caucus, will not seek re-election.

Cybersecurity

Biden Official Credits Diplomacy With Russia for Arrest of Colonial Pipeline Hacker

A senior administration official disassociated the move from tensions between the U.S. and Russia amid a build-up of Russian troops near Ukraine and an unattributed cyberattack on the country’s government websites.

Ideas

3 Strategies for Securing the Supply Chain, Security’s Weakest Link 

Today, no vendor or agency is safe—and just as importantly, no single organization can address all these threats independently.

Cybersecurity

FBI Officials Clarify What the Bureau Wants in Cyber Incident Reporting Bill

However the legislation is eventually passed, CISA plans to share reports with the FBI and other agencies, a Homeland Security official said.

Cybersecurity

NIST Updates Cybersecurity Engineering Guidelines

Amid constant cybersecurity threats, NIST added more insight for engineers and programmers on how to mitigate system vulnerabilities.