The agency’s 2030 roadmap calls for stronger operational technology security, intelligence-driven risk decisions, and expanded emergency communications capabilities. […]

Attackers could exploit flaws in the widely used web-development language to execute code remotely without authentication. Organizations including OpenAI coordinated a response to the flaws over two months. […]

Sen. Ron Wyden urges CISA and OMB to require stronger website privacy protections, warning that visits to sensitive federal services could be exposed to foreign adversaries and hackers. […]

Acting CISA Director Nick Andersen says upcoming tabletop exercises will help critical infrastructure operators test their ability to recover from cyberattacks and maintain essential services. […]

The forthcoming guidance will draw on CISA assessments of how well critical infrastructure organizations can isolate and recover systems. […]

The bill would direct CISA to assess workforce and resource gaps as lawmakers scrutinize the agency’s capacity to defend federal networks and critical infrastructure. […]

Federal agencies face a Sept. 19 remediation deadline for a maximum-severity authentication bypass that can give remote attackers root-level access. […]

The guidance shows how organizations can use tripwires, breadcrumbs, honeytokens, and other decoys to detect malicious activity after attackers gain network access. […]

The new guidance offers federal agencies and cloud providers recommendations to protect identity and access tokens from theft, forgery, and misuse. […]

CISA is ramping up staffing and 24/7 support for the new service as officials look to expand governmentwide cyber visibility and give agencies a lower-cost path to modern SIEM capabilities. […]

Andersen said CISA must focus limited resources on the nation’s most consequential cyber risks as the agency moves to rebuild its depleted workforce. […]

Federal cyber agencies say China-based AI companies are using large-scale knowledge distillation campaigns to extract capabilities from U.S. frontier models. […]

Lawmakers say reductions at the cybersecurity agency raise concerns about its ability to protect federal networks and critical infrastructure and respond to evolving threats. […]

Federal agencies warn AI-assisted hacking tools are lowering barriers to attacks on industrial control systems used across critical infrastructure. […]

CISA’s new resources outline eight cybersecurity objectives to help K-12 schools and districts strengthen their defenses against growing cyber threats. […]

Cyber agencies warn that Gunra ransomware affiliates are exploiting internet-facing vulnerabilities to steal and encrypt data across critical infrastructure sectors. […]

CISA is warning water utilities to secure internet-exposed systems after recent cyberattacks disrupted operations in multiple states. […]

The bipartisan, bicameral bill would give CISA new tools and funding to help K-12 schools prevent, track, and respond to cyberattacks. […]

After a contractor exposed sensitive credentials in a public GitHub repository earlier this year, CISA is outlining how it responded and the security changes it says are needed to prevent similar incidents. […]

The regulation would require critical infrastructure entities to report major cyber incidents and ransomware payments to the federal cyber defense agency under a 2022 law. […]

The Homeland Security secretary told lawmakers CISA plans to hire about 600 employees after the Senate confirms a new director. […]

The new guidance aims to help federal civilian agencies move beyond perimeter-based security models and use TIC 3.0 flexibilities to advance zero trust adoption. […]

Warner wants CISA to detail staffing losses, regional vacancies, and cybersecurity service impacts amid workforce reductions and proposed budget cuts. […]

CISA’s new directive sets tiered remediation timelines for federal agencies, including a three-day deadline for the highest-risk vulnerabilities. […]

Program manager Matt House says the agency has completed efforts to help federal agencies deploy endpoint detection and response tools, marking a key milestone for the CDM Program. […]

Acting Director Nick Andersen said CISA is accelerating hiring, with 180 tentative offers expected by month’s end and hundreds of new employees slated to join the agency. […]

The agency plans to unveil federal AI platform access, binding operational directives, and broader cybersecurity reforms following this week’s AI executive order. […]

CISA will hold virtual town hall meetings June 15-18 to gather stakeholder feedback on proposed CIRCIA rules requiring critical infrastructure operators to report cyber incidents within 72 hours and ransomware payments within 24 hours. […]

The updated policy shifts federal agencies toward a risk-based cybersecurity logging strategy focused on real-time threat detection, digital forensics, and more targeted data retention requirements. […]

Sen. Rick Scott has introduced legislation to create a CISA-led federal cyber task force aimed at improving coordination against Chinese hacking threats targeting critical infrastructure. […]