The Department of Homeland Security (DHS) issued an alert last week after it was discovered that as many as 750,000 medical heart devices contain critical cybersecurity vulnerabilities. […]

DOJ Department of Justice
NIST

At the quarterly meeting of the National Institute of Standards and Technology’s (NIST) Information Security and Privacy Advisory Board, researchers said that NIST was working on a new effort to emphasize secure software development on its Cybersecurity Framework. […]

FBI
Cybersecurity flag
data sharing

The Office of Inspector General (OIG) Export-Import Bank ((EXIM Bank) of the United States released KPMG’s independent audit report on EXIM Bank’s information security program for FY2018 on March 13. In the report, KPMG, a public accounting firm, provided 14 recommendations that “should strengthen…EXIM’s information security program.” […]

D.C. Metro is planning to hack cybersecurity systems over the next few months, but not to worry–they’re hacking their own 7000 Series railcars to determine whether missing cybersecurity measures in the railcar contract left Metro data exposed. […]

Blockchain link
State Department
Congress Capitol Senate House

Sens. Ron Wyden, D-Ore., and Tom Cotton, R-Ark., asked the Senate Sergeant at Arms in a March 13 letter to disclose to each member of the Senate “the extent of the cyber threats faced by the U.S. Senate–and by extension, our democracy,” and said disclosure of that information was “imperative in order to help the U.S. Senate address important cyber-security needs.” […]

employee hired workforce worker-min

The Director of National Intelligence has announced the appointment of Erin Joe as director of the Cyber Threat Intelligence Integration Center (CTIIC), which as its name suggests integrates cyber threat data from government and other sources, facilitates threat-data sharing and supports government interagency planning of responses to adversaries. […]

The Cybersecurity Skills Integration Act introduced in the House last week to jumpstart development of career and technical education training initiatives that incorporate cybersecurity into the curriculum–appears to have one major unresolved issue: competing for qualified instructors in the white-hot market for cybersecurity professionals. […]

Christopher Krebs under secretary undersecretary DHS Department of Homeland Security National Protection and Programs Directorate NPPD leader CISA cybersecurity and infrastructure security agency

Christopher Krebs, director of the Cybersecurity and Infrastructure Security Agency (CISA) at the Department of Homeland Security, provided an update to Congress today about how CISA is working to secure election infrastructure ahead of the 2020 Presidential election. […]

T Mobile T-Mobile-min

John Legere, CEO at T-Mobile U.S., told members of the House Energy and Commerce Committee’s Communications and Technology Subcommittee at a hearing on Tuesday that the carrier does not use equipment provided by China-based Huawei or ZTE in its network, and pledged to “never” use gear from the two Chinese firm in T-Mobile’s 5G network. […]

Successfully implementing DevOps methodology requires a maturation process and cultural shift for organizations, experts from the Office of Management and Budget (OMB), Internal Revenue Service (IRS), and Department of Homeland Security (DHS) advised today. […]

The National Security Agency (NSA) and the Trusted Computing Group (TCG) industry consortium have come up with validation software that can be used with any device and could go a long way to securing the supply chain for computing devices. […]

Washington DC capitol federal government-min

Rep. Brian Fitzpatrick , R-Pa., on March 7 introduced H.R. 1612, dubbed the “Nonpartisan Bill For The People.” The legislation is the GOP’s answer to the Democrat-backed H.R. 1, which cleared the House last week. Both bills include measures to increase voter participation and election security, among other election-related measures. The House bill does not currently have a companion bill in the Senate. The GOP-backed House bill includes measures to: […]

ransomware

Jackson County, Ga., paid cybercriminals $400,000 to remove ransomware that infected its IT systems. The ransomware, known as Ryuk Ransomware, hit the county on March 1 and impacted multiple county agencies, including the Sheriff’s Office. […]

Government-wide security clearance processes, and the half million-plus backlog in the clearance applications pipeline, made the Government Accountability Office’s (GAO) High-Risk report last week as a contributing factor to the larger problem of ensuring IT security, generally. […]

Even though the broad category of U.S. cybersecurity has spent more than ten years on the Government Accountability Office’s (GAO) High-Risk List, it appears there’s still plenty of work to be done in improving cyber defense, according to GAO’s update to the list issued earlier this week. […]

BSA The Software Alliance

Software-maker trade group BSA sent a letter to leaders of the House and Senate Armed Services Committees on Thursday urging modernization of the Department of Defense’s (DoD) supply chain security and software acquisition approach in the FY 2020 National Defense Authorization Act. […]

World globe trade

The Cybersecurity Tech Accord announced yesterday that it has added 11 new companies to its pledge, bringing its total to 90 signatories. AnchorFree, Domain Tools, Flowmon Networks, MarkMonitor, NTT, Paladion, Percipiet.ai, Silent Breach, Tanium, Telecom Italia, and Unisys all signed on and pledged to “defend customers everywhere from malicious attacks by cybercriminal enterprises and nation-states.” […]

Categories