Rep. Mike Rogers, R-Ala., ranking member of the House Homeland Security Committee, announced updated Republican subcommittee assignments on Oct. 25. Among the changes, Rep. John Joyce, R-Pa., will join the Cybersecurity, Infrastructure Protection, and Innovation Subcommittee. […]
The National Institute of Standards and Technology (NIST) is tackling managed service provider (MSPs) cybersecurity by developing a customizable reference model that MSPs can adapt to fit their program needs. […]
The FBI released new election security resources as part of its Protected Voices initiative on Oct. 23. […]
A spotty risk management strategy, along with poor security control assessment procedures, are undermining the Federal Deposit Insurance Corporation (FDIC)’s ability to identify and detect network security threats, according to an FDIC Office of the Inspector General (OIG) report released on Oct. 23. […]
Federal agency CISOs obviously have a lot to do – like securing networks, for one – but they’re also busy “selling” cybersecurity within their agencies to leadership across the organization, a panel of Federal security chiefs explained Oct. 22 at the ACT-IAC Imagine Nation 2019 conference. […]
Sen. Edward Markey, D-Mass., and Rep. Ted Lieu, D-Calif., on Oct. 22 reintroduced legislation in the Senate and House aimed at creating a voluntary system to certify cybersecurity protections for internet of things (IoT) devices. […]
Reps. Robin Kelly, D-Ill., and Cathy McMorris, R-Wash., introduced the US SAFE WEB Extension Act on Oct. 22, which would enable the Federal Trade Commission (FTC) to protect Americans from fraud, spam, and deception online. […]
During a House Judiciary Committee hearing on securing elections, witnesses from law enforcement agencies were asked a litany of questions related to the security of U.S. elections for 2020, including what kind of new measures were being taken during this cycle. […]
Officials from the Departments of Defense (DoD), Veterans Affairs (VA), and the Cybersecurity and Infrastructure Security Agency (CISA) are bootstrapping an effort to further clarify and detail roles and career paths of the Federal cybersecurity workforce, the officials said Oct. 21 at the ACT-IAC Imagine Nation 2019 conference. […]
Microsoft announced Oct. 18 that it launched a bug bounty program for ElectionGuard, its free open-source software development kit (SDK) which aims to make voting more secure, transparent, and accessible. […]
There’s a government and national responsibility in communicating the minimum standards for cyber security engineering, according to Chief of Missions for the Department of Defense’s (DoD) Joint Artificial Intelligence Center (JAIC) Col. Stoney Trent. […]
A new report from think tank New America warns of the risks to patient safety posed by increasing adoption of technology in healthcare and the associated cyber risks. […]
The Congressional Budget Office (CBO) said in an Oct. 11 report that H.R. 1975, the Cybersecurity Advisory Committee Authorization Act of 2019, would cost $2 million dollars over the next five years to implement. […]
The Defense Advanced Projects Agency (DARPA) is seeking ways to better patch legacy software in mission-critical systems through its new Assured Micropatching program. […]
Technology and transportation industry groups penned a letter to Congressional leadership today urging Congress to ensure innovation can flourish in the facial recognition space, while still creating needed regulation. […]
According to an Office of Inspector General (OIG) Pension Benefit Guaranty Corporation (PBGC) report, the PBGC’s overall cybersecurity performance independent assessment rating is “not effective.” […]
A group of House Democrats introduced a bill aimed at combating disinformation online and prevent foreign election interference. […]
White-hat hackers have scooped up $33,750 through Hack the Proxy, the eighth hacker-focused cyber challenge created through a partnership between the Defense Department (DoD) and HackerOne. […]
In an Oct. 10 letter to Office of Management and Budget (OMB) Director Mick Mulvaney, Sens. Gary Peters, D-Mich., Ron Johnson, R-Wis., Ron Wyden, D-Ore., and Tom Cotton, R-Ark., called for “stronger coordination of supply chain risk management for information and communications equipment across the Federal government.” […]
The Department of Homeland Security’s (DHS) .gov Cybersecurity Architecture Review program (.govCAR) has been looking at its mobile environment for capabilities and cybersecurity posture. […]
The Department of Defense (DoD) is partnering with Defense Digital Service (DDS) and HackerOne to launch the second Hack the Army bug bounty challenge. The challenge, which will run from Oct. 9 to Nov. 8, encourages hackers to attack more than 60 publicly accessible web assets to improve the DoD’s cyber defenses. […]
Army Gen. Paul Nakasone – who heads both the National Security Agency and U.S. Cyber Command – said today that the first focus of NSA’s recently launched Cybersecurity Directorate will be to shore up protection of companies that make up the nation’s Defense Industrial Base (DIB), and specifically to prevent the theft of intellectual property from DIB companies. […]
According to a new Pew Research Center survey, a majority of Americans cannot identify an example of two-factor authentication and fewer than half of Americans can correctly answer the questions posed on Pew’s digital knowledge quiz. […]
The Internet Society’s Online Trust Alliance (OTA) said in an Oct 8 release that 70 percent of the presidential campaign websites it reviewed did not meet the group’s standards for privacy and security standards, “potentially exposing visitors to unnecessary risks.” […]
NetChoice, a business trade group focused on promoting free speech and free enterprise on the internet, launched a public campaign on Oct. 7 to defend law enforcement’s use of facial recognition technology, and is taking aim at anti-facial recognition effort in Massachusetts. […]
When cybersecurity works at its best, you barely know anything about it. Because highly secure and efficient networks rarely create their own reasons to make the news. […]
The FBI issued a warning regarding “high-impact” ransomware attacks on Oct. 2, stressing the risk they pose to U.S. businesses and organizations. […]
Tenable’s Federal Business Development Manager Chris Jensen Shares his Thoughts on CDM Progress, Priorities, and Challenges […]
The Cybersecurity and Infrastructure Security Agency (CISA) remains highly confident in the agency’s efforts to defend against nation-state cyber threats including those targeting U.S. elections and supply chains, a senior CISA official said today. […]
Cybersecurity services provider CrowdStrike said in its latest half-year report that it tracked a big spike in electronic crime (eCrime) exploits in the first half of 2019, and concluded that perpetrators have continued to mature their ability to offer criminal services for hire. […]