A bill to authorize the Department of Homeland Security (DHS) to provide cybersecurity training help at the national, state and local levels was approved by the House on March 7. The Senate has approved similar – but not identical – legislation, so the House version will still need further Senate action before it can be submitted to President Biden for his signature. […]

The U.S. Navy is aiming to build a more agile and innovative force that can leverage information anytime and anywhere by modernizing and better defending their IT systems, several senior Navy IT officials and officers said at a March 8 virtual event organized by GovExec. […]

The United States and its allies in the North Atlantic Treaty Organization (NATO) need to be prepared to face a high-level cyber assault from the Russian government, warned Sen. Mark Warner, D-Va., on Feb. 28 during a Washington Post virtual event. […]

Iranian government-sponsored hackers are conducting active cyber operations against global commercial and government networks, according to a warning issued earlier this week by United States and United Kingdom intelligence agencies. […]

In response to President Biden’s Executive Order 14017, America’s Supply Chains, the Department of Energy (DOE) today released a comprehensive plan to ensure security and increase energy independence in the United States.  […]

The U.S. Space Force’s Space Systems Command, along with the U.S. Air Force, is looking for feedback on its plans to conduct live, virtual, and on-orbit space cyber test and training events to boost training efforts for cyber professionals. […]

The Department of Defense’s (DoD) F-35 Lightning II Joint Program Office (JPO) Cyber Team seeks to advance its cyber capabilities to better protect against cyber threats and increase mission assurance. […]

Reps. Anna G. Eshoo, D-Calif., and William Timmons, R-S.C., have reintroduced bipartisan and bicameral legislation that aims to help improve the cybersecurity of local governments and small organizations. […]

Data compromises in 2021 hit an all-time high with a total of 1,826 incidents reported, according to a recent report released by Identity Theft Resource Center (ITRC).  […]

Amid the blizzard of mounting security threats posed by sophisticated adversaries and increased attack surfaces spawned by large-scale telework, most Federal agencies are getting the message and moving strongly toward developing zero trust security architectures. […]

Government agencies have had to adapt to the “new normal” brought on by COVID-19 – new ways of working, new consumer behaviors, and new business reorganization. But the key to success is updated modernization, according to several chief information officers (CIO). […]

The latest cyber order released by the Cybersecurity and Infrastructure Security Agency (CISA) gives Federal agencies and industry the resources to stop or limit cybercriminals from infiltrating their systems; Michael Duffy, an associate director at CISA, said. […]

The increased velocity of major cyber attacks on U.S. government and private sector targets is giving increased urgency to the adoption of cyber incident reporting rules that will improve the government’s ability to identify and defeat them, said Tonya Ugoretz, Deputy Assistant Director for the Cyber Readiness, Outreach, and Intelligence Branch at the Federal Bureau of Investigation. […]

The National Institute of Standards and Technology (NIST) has updated its cybersecurity guidance for system engineers, adding more insight for engineers and programmers on mitigating system vulnerabilities. […]

Digital security breaches have shown us that Federal agencies are more vulnerable than anyone thought, and their security tools are no longer effectively defending against them. This begs the question, what can IT leaders and staff at all levels do to better protect Federal networks? The short answer: it’s time to rethink our approach to basic security and how we defend every endpoint across the enterprise. […]

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) published the fourth installment on securing the integrity of 5G cloud infrastructures. […]

With legacy government IT systems increasingly threatened by cyberattacks and Federal agencies on the move to improve security, the Technology Modernization Fund (TMF) is proving instrumental in helping the Education Department accelerate its transition to zero trust security architectures. […]

The National Institutes of Health (NIH) is in the process of working through a long list of network security fixes recommended by the Government Accountability Office (GAO) earlier this year, but doesn’t expect to get done with addressing all of those until the end of 2022. […]

The Government Accountability Office (GAO) is acknowledging strides that the Biden administration has taken this year to broadly improve cybersecurity, but is still encouraging the Federal government to take more steps to strengthen the cybersecurity of the nation’s critical infrastructure in light of several high-profile cyber incidents over the course of the past year. […]

The U.S. Army has awarded Cole Engineering Services a $957.7 million contract to develop, integrate and maintain the service’s enterprise Persistent Cyber Training Environment (PCTE). […]

Former U.S. Secretary of Defense Ash Carter said cybersecurity risks are a “very serious matter” and called for stronger retaliation from the U.S. government and Department of Defense (DoD) against malicious cyber actors. […]

With K-12 educational institutions increasingly targeted by ransomware and other cyber attacks during the coronavirus pandemic, the Government Accountability Office (GAO) is pushing the Department of Education to update its plans – which currently date from 2010 – for addressing cyber risks faced by schools. […]

John Sherman, who has served as Acting CIO for the Department of Defense (DoD) and is the nominee to move into the position permanently, told members of the Senate Armed Services Committee at a confirmation hearing on October 28 that he wants to put in place a new strategy to develop DoD cyber talent, among other steps if his nomination is confirmed. […]

The transition to zero trust security architectures is integral to the U.S. Department of the Army’s modernization efforts, said Army CIO Raj Iyer during an FCW virtual roundtable on October 27 where he explained security challenges that the service branch is facing and how the move to zero trust security concepts will help. […]

Routinely, data breaches demonstrate the pitfalls of relying on detection to identify malicious activities taking place on a network. Federal cyber experts discussed the importance of prevention over detection to combat cyber threats and how zero trust can enhance cyber solutions on Oct 28 at an event hosted by FCW. […]

Nickolas Guertin, who President Biden nominated to be the Department of Defense’s (DoD) next director of Operational Test and Evaluation (DOT&E), sees testing for cyber threats and building cyber testing into the test and evaluation process a priority for the next DOT&E. […]

The Senate Appropriations Committee released nine appropriations bills for fiscal year (FY) 2022 on October 18 including a Homeland Security funding bill that would give the Cybersecurity and Infrastructure Security Agency (CISA) a 30 percent budget increase over FY2021 levels, to $2.638 billion. […]

On Oct. 8, President Joe Biden signed the bipartisan K-12 Cybersecurity Act of 2021 into law to provide school districts with resources to combat and protect themselves against cyberattacks. […]

In a recent letter to the Department of Justice (DoJ), the Department of the Treasury (Treasury), the Department of State (State Department), and the Department of Homeland Security (DHS) lawmakers urge the agencies to pursue all options available to protect American communities and infrastructure from the growing threat of ransomware. They emphasized the need for stronger coordination between departments, primarily to address the role of cryptocurrency in ransomware attacks. […]