Digital Government

CISA's 'next frontier' around cyber data analytics

An official said the agency wants to spend the next five years quantifying the unquantifiable around collective cyber risk.

Cybersecurity

Scammers spoof SBA to get disaster loan dollars

The campaign was still active in early August, the latest evidence that the economic assistance tied to COVID-19 remains an attractive target for cyber criminals.

Modernization

Court nixes challenge to proxy voting in Congress

The ruling could be appealed, but it could also lay the groundwork for more substantive reforms, including remote voting.

Digital Government

'Unprecedented' challenges to safe, secure 2020 vote

Our election infrastructure is bending under the stress of multiple crises. Administrators say they are doing all they can to ensure it doesn't break.

Cybersecurity

CISA chief wants younger, more experienced hackers in federal government

Professional experience and credentials don't have the same importance in cybersecurity, where teenagers can hack governments and multi-billion-dollar corporations.

Cybersecurity

CISA updates internet connection policies

Many of the changes to the core Trusted Internet Connection policies were in response to public feedback seeking new tech and additional architectural and security concepts.

Cybersecurity

Solarium commissioners focus on cyber director, better attribution

Negotiations between the House and Senate on a $740 billion defense authorization bill will determine which recommendations from the Cyberspace Solarium Commission make it into law.

Cybersecurity

NSA and CISA push guidance for BootHole fix

Federal agencies are moving to put out custom guidance for dealing with a widespread bootloader bug that can be complicated to patch due to software and firmware interdependencies.

Cybersecurity

Researchers disclose widespread bootloader vulnerability

New research from Eclypsium details a simple buffer overflow bug that could impact billions of devices using Linux and Windows operating systems.

Cybersecurity

Navy shifts to zero trust mindset to deal with COVID-related telework

Yesterday's buzzword has become today's security imperative, according to the department's CISO.

Cybersecurity

Spy chief sees 2020 election security as 'number one goal'

Gen. Nakasone's remarks come as a group of former senior officials seek funds to counter the "extraordinary challenges" posed by coronavirus pandemic and foreign interference to state and local election administrators.

Cybersecurity

IRS gets high marks for fraud and identity theft initiatives

A layered approach combining software, public-private partnerships and innovative pilot programs have saved billions of dollars from ending up in the hands of criminals and fraudsters, according to a new audit.

Cybersecurity

CISA releases emergency directive on wormable DNS flaw

The directive orders civilian federal agencies to immediately begin patching a critical Remote Code Execution flaw in Windows DNS servers.

Cybersecurity

U.S., U.K., Canada warn that Russian intelligence targeting COVID vaccine data

Cozy Bear is back, this time using spearphishing, public exploits and custom malware to break into organizations involved in developing a vaccine for the raging pandemic.

Cybersecurity

NDAA process is now loaded with Solarium cyber amendments

Much of the Cyberspace Solarium Commission's agenda is being pushed into this year's defense authorization process, including its crown jewel idea of a national cyber director.

Cybersecurity

Biden campaign hires new CISO, CTO

Days after putting out a notice for cyber openings, the campaign confirmed it had brought on Chris DeRusha as its Chief Information Security Officer and Jackie Chang as Chief Technology Officer.

Cybersecurity

Help Wanted: Biden campaign hiring cyber professionals

The campaign has put out job notices for a cyber threat analyst and cloud security architect as it looks to beef up protections ahead of the 2020 elections.

Cybersecurity

House's DHS funding bill would create public-private cyber center

The legislation would give $2.25 billion to DHS' cyber wing and set up an integrated cybersecurity center with other agencies, state and local governments and private industry.

Cybersecurity

CISA, USCYBERCOM warn of massive vulnerability for popular networking device

A particularly dangerous vulnerability affecting BIG-IP networking devices likely impacts every major sector in the world, including federal agencies.

Cybersecurity

EARN IT Act sails through Senate Judiciary Committee

The controversial bill now heads to the Senate floor, setting up a high-stakes vote that could impact liability protections for encryption and third-party content posted online.