Emerging Tech

DISA Details Plans to Improve Network for Shift to Zero Trust

The agency's recent request for information also seeks feedback on its acquisition strategy.

Ideas

Executive Order Hints at FedRAMP Alternatives

The order calls for modernizing the cloud-security program and opens the door for other frameworks to be used for authorization.

Cybersecurity

IG: CISA-Run Monitoring Program Has Not Improved DHS’ Cybersecurity Posture

The department’s inspector general also found vulnerabilities in the department’s technology due to poorly defined patch management roles and configuration settings.

Cybersecurity

Why Government Needs More than Money to Fix Cybersecurity Issues

A bigger budget has its numerous benefits but it doesn’t magically scale teams or thwart threats.

Cybersecurity

NIST Will Build on Existing Software Development Framework to Meet Executive Order

The agency also shared how it’s thinking about defining “critical software,” which is to be prioritized under the order.

Cybersecurity

Justice Took Down Two Domains Used in USAID Hack 

The action demonstrates the department’s authorities beyond attributing malicious cyber activity.  

Cybersecurity

Russia’s Latest Hack Shows How Useful ‘Criminal Groups’ Are to the Kremlin

Russian coders have little choice but to work with their government, which in turn denies any knowledge of their activities. That’s why hacking activity shows no sign of slowing.

Ideas

Demystifying Access Control and Zero Trust

As agencies rethink making temporary remote arrangements permanent, officials should start with proven ubiquitous encryption technology.

Digital Government

Biden Budget Ups Request for Civilian Agencies’ Cybersecurity

The president’s funding proposal also puts numbers on the National Cyber Director’s Office and other priority cybersecurity areas.

Ideas

3 Recommendations to Scale Federal Cybersecurity

The most significant single obstacle to progress in cybersecurity is not the technical challenge or even the workforce/skills gap.

Cybersecurity

GAO to Explore the Government’s Role in Cybersecurity Insurance

The Treasury Department runs a program to insure the insurers, but there’s a limit to the backstop.

Cybersecurity

The Colonial Pipeline Ransomware Hackers Had a Secret Weapon: Self-Promoting Cybersecurity Firms

Five months before DarkSide attacked the Colonial pipeline, two researchers discovered a way to rescue its ransomware victims. Then an antivirus company’s announcement alerted the hackers.

Artificial Intelligence

Report Highlights How AI Could Amplify Future Disinformation Campaigns

The 70-page report assesses how neural networks and artificial intelligence could supercharge dis- and misinformation campaigns and sway the opinions of millions.

Cybersecurity

House Panel Passes Bill to Explore Bringing State and Local Cybersecurity Workers into CISA

The Homeland Security Committee cleared several bills to address cybersecurity following the attack on Colonial Pipeline.

Emerging Tech

FTC Data Captures Record Surge in Cryptocurrency Scams

An official explained how “there are at least a couple of things in play” that are contributing to the highs.

Ideas

The Cybersecurity Executive Order Is a Missed Opportunity

This executive order is designed to strengthen federal cybersecurity, not that of the private sector, including critical infrastructure providers.

Podcasts

Critical Update: Do You Know What’s In Your Software?

In the wake of several major cybersecurity incidents, the government wants to shore up its software supply chain. Two experts explain the merits of some approaches and why there’s no silver bullet. 

Digital Government

FAA Knows It Needs More Tech Experts, Just Not How Many

The Federal Aviation Administration needs IT experts, as well as specialists in emerging technologies like drones and 3-D printing, but doesn’t have hard, quantitative data on those workforce gaps.