The number two official at the Justice Department (DoJ) warned today that the pending government shutdown is “quite dangerous and quite irresponsible” in terms of the effect it would have on the nation’s ability to defend against cyber threats. […]

Today, the Cybersecurity and Infrastructure Security Agency (CISA) released the new Hardware Bill of Materials (HBOM) Framework for Supply Chain Risk Management product from the Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM) Task Force.   […]

The U.S. Air Force has abruptly canceled a highly competitive cybersecurity tech solicitation worth at least $5 billion just before crossing the finish line due to an overwhelming number of proposals from the private sector. […]

The Council of the Inspectors General on Integrity and Efficiency (CIGIE) issued a summary today of the top challenges facing Federal agencies, as identified by those agencies’ respective Offices of the Inspector General (OIG) – and once again IT issues headed up the list. […]

Reps. Mike Gallagher, R-Wis., and Abigail Spanberger, D-Va., introduced new legislation this week that looks to strengthen U.S. defenses against potential cyberattacks by calling on the secretary of Homeland Security to establish a National Risk Management Cycle. […]

A report released by the Foundation for Defense of Democracies (FDD) on Sept. 19 argues that Congress should take another look at legislative recommendations published by the Cyberspace Solarium Commission to shore up U.S. cyber defenses and decide whether to enact them. […]

As AI technologies are increasingly used to create deceptive content, Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly said on Tuesday that Americans can remain confident in U.S. election infrastructure, but also warned that the information environment is at risk. […]

Cybersecurity experts across the private sector expressed concerns today that a Federal government shutdown would have major negative impacts on the Cybersecurity and Infrastructure Security Agency’s (CISA) ability to defend Federal networks and keep its critical cyber programs running. […]

The Office of the National Cyber Director (ONCD) is creating a playbook that aims to clarify, facilitate, and encourage incorporation of cybersecurity into the Federal grant process. […]

The Cybersecurity and Infrastructure Security Agency’s (CISA) new Cyber Supply Chain Risk Management (C-SCRM) Office is in the process of developing training and maturity models for Federal agencies, with an eye of releasing these resources in the new fiscal year (FY) to begin on Oct. 1.   […]

The Cybersecurity and Infrastructure Security Agency (CISA) held its third quarter Cybersecurity Advisory Committee (CSAC) meeting on Sept. 13, where members voted to approve a number of recommendations offered by each subcommittee to the agency, including one that could result in the creation of a national cyber alert system. […]

The Department of Defense (DoD) is pledging to use offensive cyber capabilities to defend the U.S. and its allies against adversaries – particularly the Peoples Republic of China (PRC) – as part of its latest cybersecurity strategy. […]

The Cybersecurity and Infrastructure Security Agency (CISA) released its new Open Source Software Security Roadmap today that lays out the agency’s path forward to help ensure a secure open source software ecosystem within the Federal government. […]

Federal Chief Information Security Officer (CISO) Chris DeRusha said late Thursday that new cybersecurity metrics are helping the Federal government to better measure its success in moving towards an improved risk posture. […]

The Justice Department (DoJ) said this week that Verizon Business Network Services agreed to pay a fine of $4.09 million to the government after failing to “completely satisfy certain cybersecurity controls in connection with an information technology service provided to federal agencies.” […]

The State Department is currently working on a new comprehensive version of an international cyber strategy that it will be circulating around the agency and government this fall. […]

A recently disclosed Chinese hack of Commerce and State Department officials’ emails was found to be linked to a Microsoft engineer’s compromised corporate account, the tech giant announced in a blog post this week. […]

In order to create a more robust cybersecurity workforce, security experts explained on Wednesday that cybersecurity education needs to start at the K-12 level. […]

As the Cybersecurity and Infrastructure Security Agency (CISA) finishes up the rulemaking process for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA), CISA Director Jen Easterly said today that trusted partnerships are vital to sharing threat information in the meantime. […]

Just six months after the White House released its National Cybersecurity Strategy (NCS), Acting National Cyber Director (NCD) Kemba Walden said that her office is looking forward to publishing a posture report. […]

Rep. Ted Lieu, D-Calif., on Aug. 29 reintroduced his Improving Contractor Cybersecurity Act, which aims to require vendors that wish to do business with the United States government to maintain vulnerability disclosure policies (VDP) and programs. […]

The Department of Defense’s (DoD) organization responsible for protecting and defending its network globally is adopting a three-part approach to improve cyber readiness and cybersecurity tactics across the department, a senior DoD official said this week. […]

The Department of the Air Force is seeking to bring more workers into the Cyber Excepted Service (CES) to increasingly recruit and retain civilian cyber professionals, the department’s chief information officer (CIO) said this week. […]

The Transportation Security Administration (TSA) is adopting an automated capability that will ensure inactive accounts on one of its critical IT systems are shut down within 45 days. […]

Although the Federal government has made progress in protecting U.S. critical infrastructure through a largely voluntary approach, Federal Chief Information Security Officer (CISO) Chris DeRusha today called for minimum cybersecurity requirements for critical infrastructure. […]

The recently established Advanced Research Projects Agency for Health (ARPA-H), which is housed within the Department of Health and Human Services (HHS), has launched a new project to better protect the U.S. healthcare system’s IT infrastructure. […]

The President’s National Infrastructure Advisory Council (NIAC) made a broad call Monday for the creation of a National Water Strategy to ensure the nation can deliver sustainable critical infrastructure systems that are responsive to cyber threats. […]

In light of rising software supply chain security attacks, Rep. Nancy Mace, R-S.C., introduced new legislation today that aims to help Federal contractors identify and fix software vulnerabilities before adversaries can exploit them. […]

The Department of Defense (DoD) is calling on private companies, academic organizations, and non-profits that can provide certification, training, courses, or formal education to apply to the Pentagon’s Cyber Workforce Qualification Program. […]

The Cybersecurity and Infrastructure Security Agency (CISA) – alongside the National Security Agency (NSA) and National Institute of Standards and Technology (NIST) – released a joint factsheet today encouraging early planning for migration to post-quantum cryptographic standards by developing a Quantum-Readiness Roadmap. “Quantum-Readiness: Migration to Post-Quantum Cryptography” is urging organizations – especially those that support critical infrastructure […]