Cybersecurity

America’s Drinking Water Is Surprisingly Easy to Poison

The experts say the sorts of rudimentary vulnerabilities revealed in the breach are common among America’s 151,000 public water systems.

Cybersecurity

FCC Moves to Rescind Permits of More Chinese Telecom Operators

The commission is also seeking public comment on the development of Open Radio Access Networks to improve national security and prosperity.

Cybersecurity

NSA, CISA Promote Domain Name System Incorporating Threat Information

The agencies’ guide on selecting a provider of protective DNS services is based on a pilot with the Department of Defense Cyber Crime Center.

Ideas

Practical Steps to Managing Supply Chain Risk

Like with any new agency initiative, nothing moves forward without executive sponsorship.

Cybersecurity

CISA, FBI Link Exploitation of Microsoft Exchange to Nation-State Actors

The agencies also warned of impending commoditization by criminal groups of access gained through vulnerabilities in the email and calendar service.

Cybersecurity

CISA: No Federal Agencies Compromised Through Microsoft Exchange Servers

Investigations remain ongoing, Cybersecurity and Infrastructure Security Agency leaders said at a hearing on modernizing the federal government’s approach to cybersecurity.

Cybersecurity

Bill Would Eliminate Immunity for Foreign Hackers

The Homeland and Cyber Threat Act would amend the Foreign Sovereign Immunities Act to give Americans legal recourse for damages caused by foreign hackers.

Cybersecurity

Splitting NSA, CyberCom Now Could Reduce Military Access to Intelligence, Milley Says

The Joint Chiefs chairman says the organizations have not yet worked out how to keep the data flowing after the long-awaited split.

Cybersecurity

Cybersecurity Agency Takes Over Management of .Gov Domain

The official domain for .gov websites shifted from the government’s landlord to the government’s central cybersecurity shop.

Cybersecurity

Air Force Only Service to Develop Cybersecurity Requirements for Weapon Systems Contracts, GAO Says

The audit found the Defense Department has improved weapon systems cybersecurity in recent years, but detailed requirements must make it into contracts.

Modernization

Justice Department Warns of Fake Unemployment Benefit Websites

It’s one more issue for jobless Americans and state workforce agencies to be concerned about.

Cybersecurity

House Armed Services Chair Calls for Focus on Information Systems Over Arbitrary Metrics

Rep. Adam Smith, D-Wash., suggested a 500-ship Navy is inadequate if adversaries are able to disrupt command and control systems.

Ideas

Debunking Three Myths about Hardware Security

The federal government should consider hardware-enabled security approaches.

Cybersecurity

White House Is Developing a Plan to Secure Industrial Control Systems

An upcoming executive order in response to the hacking campaign that involved SolarWinds will include standards to improve software transparency.

Digital Government

Bill Aims to Counter China with International Technology Partnership

The bill aims to imbue democratic values in technologies like artificial intelligence and 5G.

Ideas

It’s Time for a Cybersecurity Quid Pro Quo

Require companies to disclose breaches to the government in exchange for legal liability limitations. 

Cybersecurity

NIST Planning Workshop to Comply with Law on Federal IoT Procurement

Comments on draft documents required under the IoT Cybersecurity Improvement Act raise concerns of both fragmentation and a lack of flexibility.