The National Institute of Standards and Technology has updated its Cybersecurity Framework in response to user comments that the original framework was too vague in its Implementation Tiers, the measure by which organizations gauge their approach to managing cybersecurity risk.
Privacy advocates launched a new website Monday called end702.com that urges Congress to allow a controversial section of the Foreign Intelligence Surveillance Act (FISA) to expire at the end of next year. Fight for the Future and a coalition of public interest groups are encouraging Congress to let Section 702 of the FISA Amendments Act of […]
Technology should be an important issue in both Republican and Democratic platforms for the upcoming election, according to a letter that advocacy groups sent to the party chairs on Monday. “As the process of developing your platforms continues, we believe it is vital that platform committees both understand the perspectives of the communities we advocate […]
Forty-three percent of Americans would sacrifice their personal online security for faster Internet speed, according to a recent report. If you need to hop onto public Wi-Fi, cybersecurity experts recommend these tips to reduce the risk and stay secure.
The National Science and Technology Council calls for more modern science and technology capabilities in national security in its report, titled “A 21st Century Science, Technology and Innovation Strategy for America’s National Security.”
The Social Security Administration—the agency that holds personal data on every American citizen, living or dead—is starting to look a lot like the Office of Personnel Management right before foreign hackers pulled off the largest data breach in government history. And that has lawmakers on Capitol Hill worried.
Politics and blame stand in the way of Federal IT modernization, according to comments made at the House Oversight Committee’s hearing on legacy IT systems. Congressmen said they were disappointed and baffled over the degree of outdated technology in Federal agencies, some in mission critical systems.
Data breaches are costing the health care industry an estimated $6.2 billion, with 89% of organizations represented in a new study by the Ponemon Institute having experienced a data breach in the past two years and 45% reporting more than five breaches in the same time period.
State-Federal collaboration is going to be essential in combating state and local cyber threats, according to witnesses at a cybersecurity congressional hearing. “States have constantly ranked their cyber capabilities among the lowest capabilities,” said Rep. Dan Donovan, R-N.Y. “What is preventing us from reaching an appropriate level of cybersecurity?”
The increasing sophistication of cyberattacks and the emerging threat of ransomware are placing a new premium not only on high-level technical skills but on bold, effective leadership. “Each day, the cyber threat landscape changes, and our attackers are unrelenting,” said Rob Potter, vice president of the Americas for Symantec.
Ransomware attacks, which the FBI estimated could cost the United States $1 billion this year, have “become a real plague on the Internet,” according to Sen. Sheldon Whitehouse, D-R.I. As these attacks are becoming more sophisticated and destructive, the Senate Committee on the Judiciary addressed whether law enforcement has the right tools to foil them.
The sun could pose the largest digital security risk to U.S. critical infrastructure, according to witnesses at a House Oversight and Management Efficiency Subcommittee. “All critical infrastructure sectors are at risk from EMP [electromagnetic pulse],” said Brandon Wales at DHS. […]
Industry executives urged the Federal government to do more to advance the use of blockchain technology to secure online financial transactions, and to get behind nationwide adoption of cybersecurity insurance.
Cyber espionage group Pawn Storm has launched further attacks on U.S. allies, Trend Micro reported. Pawn Storm last month targeted Germany for a second time, through an attack on the German Christian Democratic Union, Chancellor Angela Merkel’s political party.
The 2016 Symantec Government Symposium is coming up on Aug. 30, and its Cyber Awards deadline is June 1. The Cyber Awards recognize individuals who show excellence and leadership in government cybersecurity through individual contributions to programs that protect critical data and systems. […]
Content management company Box unveiled its Box for Government initiative, which brings together different product suites designed for government and enables agencies to work remotely, collaboratively, and with an assurance of security. Box for Government has already received a FedRAMP Provisional Authority to Operate (P-ATO) from the Defense Information Systems Agency. […]
There seems to be no middle ground in the Internet surveillance versus privacy dispute. The two sides found little to agree on at a debate hosted by the Hudson Institute. David Rivkin, a constitutional law attorney, said government surveillance “has to be indiscriminate. … We have to surveil more.”
Adding PIN requirements to chip-based credit cards is essential for consumer security, according to panelists at the Protect My Data discussion on credit card security.
Law enforcement reported an increase in ransomware attacks during 2015, and it looks like these attacks will continue throughout 2016. To deal with the rising threats, the FBI posted recommendations. “These criminals have evolved over time and now bypass the need for an individual to click on a link. They do this by seeding legitimate websites with malicious code, taking advantage of unpatched software on end-user computers,” said James Trainor, the FBI Cyber Division Assistant Director. […]
Cyber hygiene is essential for combating the modern, professional hacker, according to Symantec Security Response director of project management Kevin Haley. “When cyber criminals work in call centers, write documentation, and take the weekend off, you know it’s a profession,” he said. […]
Connecticut, Illinois, Louisiana, Nevada, and Oregon will participate in a policy academy on developing and implementing comprehensive cybersecurity strategies, the National Governors Association announced. “Threats to our cybersecurity remain one of the most significant homeland security challenges facing the nation,” said Virginia Gov. Terry McAuliffe. […]
Cybersecurity responders are falling far behind the speed of the hackers they defend against, according to Verizon’s 2016 Data Breach Investigations Report.
Many cars on the road contain dangerous cybersecurity flaws, according to a Government Accountability Office (GAO) report that identified three major types of security flaws: direct access, short-range wireless, and long-range wireless.
As Federal agencies move forward with big data and infrastructure initiatives, “we really have to assume that all of our networks are compromised,” said Ann Dunkin, CIO at the Environmental Protection Agency (EPA). […]
MeriTalk Executive Editor Dan Verton discusses the theme of this year’s Akamai Government Forum—Safeguarding a Dynamic Government—with Akamai CEO Dr. Tom Leighton. During his keynote address, Leighton offered a unique look at the future of the Internet and security.
Third party cloud security auditing firms are worried that new documentation requirements put in place by FedRAMP could open them to significant liability risks.
Speed and communication are key elements to effective threat intelligence in the government, according to panelists at the Akamai Government Forum. “It’s a team sport. We really need to work together,” said Renee Tarun of the NSA. […]