Senators Press DHS for Details on GPS Jamming Protections Dec 23, 2024 | 1:09 pm A bipartisan pair of senators is asking the Department of Homeland Security (DHS) for more information on the agency’s efforts to protect Global Positioning System (GPS) technologies from foreign threats to their operation. […]
DHS Wants Improved Collaboration for Undersea Cable Security Dec 19, 2024 | 12:58 pm The Department of Homeland Security (DHS) is gearing up to release a new white paper on how the Federal government can improve collaboration with industry to bolster the security of the subsea cable network, according to DHS Assistant Secretary for Trade and Economic Security Christa Brzozowski. […]
CISA Unveils Guidance to Protect Senior Feds Against Salt Typhoon Dec 18, 2024 | 3:34 pm The Cybersecurity and Infrastructure Security Agency (CISA) released guidance today to protect “highly targeted” individuals – senior government and political officials – against the cyber espionage activity of Salt Typhoon. […]
Pentagon Officials Grappling With Reaching Cyber Standards Dec 16, 2024 | 2:44 pm While the Pentagon continues to build its cybersecurity capabilities, not everyone within the agency’s departments is prioritizing meeting cybersecurity standards, said David McKeown, the Department of Defense’s (DoD) senior information security officer and deputy chief information officer, on Friday. […]
CISA Updating National Cyber Incident Response Plan Dec 16, 2024 | 1:28 pm The Cybersecurity and Infrastructure Security Agency (CISA) today unveiled a draft update of its National Cyber Incident Response Plan (NCIRP), which was first published in 2016, and is seeking public comment on the draft through mid-January. […]
Zscaler: Encrypted Threats Surge to 87 Percent of All Cyber Threats Dec 13, 2024 | 9:25 am More than 87 percent of all cyber threats took place over encrypted networks this year, a new Zscaler ThreatLabz report finds. The solution, the cybersecurity company says, lies in adopting zero trust security architectures. […]
Agencies Fall Short on IoT Cyber Deadlines, GAO Warns Dec 10, 2024 | 3:18 pm Several agencies aren’t as secure as they need to be after missing deadlines to meet Internet of Things (IoT) cybersecurity requirements, the Government Accountability Office (GAO) revealed. […]
DoE Needs to Invest in Enterprise-Wide Data Analytics, OIG Says Dec 9, 2024 | 2:54 pm The Department of Energy (DoE) needs to invest in and implement enterprise-wide data analytics capabilities in order to better identify and mitigate risk, according to a new report from the DoE Office of Inspector General (OIG). […]
Senators Urge Probe of Pentagon’s Comms Following Salt Typhoon Hack Dec 5, 2024 | 3:32 pm A pair of bipartisan senators is pushing for the investigation of the Defense Department’s (DoD) “failure to secure its unclassified telephone communications from foreign espionage,” according to a letter sent Wednesday to DoD Inspector General Robert Storch. […]
GSA Panel Turning to AI, Cloud, Cyber in Fed Procurement Dec 5, 2024 | 2:53 pm The General Services Administration’s (GSA) Acquisition Policy Federal Advisory Committee (GAP FAC) held its first meeting today after tapping 14 new members and turning to new areas of focus including artificial intelligence, cloud computing, and cybersecurity. […]
Report Ties Most CI Vulnerabilities to Same 20 Software Components Dec 4, 2024 | 9:35 am More than 80 percent of the most severe tech-related vulnerabilities to critical infrastructure originate from the same 20 software components, a new report out this week from Fortress Information Security finds. […]
CISA Official Urges Greater Focus on OT Systems Security Dec 3, 2024 | 3:23 pm Cybersecurity and Infrastructure Security Agency (CISA) Deputy Director Nitin Natarajan is urging critical infrastructure sectors to “elevate the discussion” of the growing risks of legacy operational technology (OT) systems. […]
CISA Publishes Salt Typhoon Guidance, Still Unraveling Hacks Dec 3, 2024 | 2:54 pm The Cybersecurity and Infrastructure Security Agency (CISA) published guidance today that provides best practices to protect against cyberattacks by Salt Typhoon – a People’s Republic of China (PRC)-affiliated threat actor that has compromised networks of major global telecommunications providers. […]
GAO: HHS Falling Short on Sector Cybersecurity Nov 29, 2024 | 10:00 am As cyberattacks continue to target hospitals and other healthcare organizations, the Department of Health and Human Services (HHS) is failing to meet some of its bigger-picture cybersecurity goals for the sector, the Government Accountability Office (GAO) said in a Nov. 13 report. […]
Report: Salt Typhoon Using ‘Backdoor’ Malware Tactics Nov 27, 2024 | 1:29 pm Through its notable sophistication, Salt Typhoon has cemented its status as one of the most advanced cyber-espionage groups in history – a new report reveals the tactics behind its success. […]
HHS Needs to Better Protect Electronic Health Information, OIG Says Nov 27, 2024 | 11:54 am As the number of successful cyberattacks on healthcare organizations continues to rise, a new report from the Department of Health and Human Services (HHS) Office of Inspector General (OIG) is calling on HHS to better ensure the protection of electronic protected health information (ePHI). […]
EPA IG Finds 26M People Facing Drinking Water Cyber Vulnerabilities Nov 26, 2024 | 3:22 pm A report out this month by the Environmental Protection Agency’s (EPA) Inspector General (IG) finds that drinking water systems serving approximately 26.6 million people have critical or high-risk cybersecurity vulnerabilities. […]
MeriTalk Q&A: Illumio’s Barlet Looking for Cyber Policy ‘Acceleration’ Nov 26, 2024 | 9:58 am What’s in store for Federal cybersecurity policy when the Trump administration takes charge in January? Illumio’s Gary Barlet told us in an exclusive interview that he is looking for much of the current bedrock of cybersecurity policy to carry forward, but with an accelerated timeline for action and greater accountability for results. […]
Senate Bill Looks to Strengthen Cybersecurity in Healthcare Sector Nov 25, 2024 | 2:15 pm A new bipartisan bill from Sens. Bill Cassidy, R-La., Maggie Hassan, D-N.H., John Cornyn, R-Texas, and Mark Warner, D-Va., is aiming to bolster cybersecurity in the healthcare sector and safeguard Americans’ health data. […]
CISA Touts Red Team Probe That Infiltrated CI Target Nov 22, 2024 | 11:28 am The Cybersecurity and Infrastructure Security Agency (CISA) said on Thursday that it recently conducted a red team assessment (RTA) at the request of an unnamed critical infrastructure organization, with mixed results. […]
Feds Eye AI for Future of Cybersecurity Nov 21, 2024 | 2:34 pm As cyber threats continue to grow in complexity and scale, artificial intelligence (AI) is emerging as a critical tool for enhancing security, efficiency, and accuracy across Federal agencies, according to Federal cybersecurity experts. […]
VA CIO Says Budget, Workforce Shortages Stifling Cybersecurity Nov 21, 2024 | 2:20 pm Department of Veterans Affairs (VA) Chief Information Officer (CIO) Kurt DelBene told lawmakers on Wednesday that the agency’s cybersecurity capabilities are suffering from a shortage of skilled IT workers that stems from a slim budget to hire enough of them. […]
Senators Call Salt Typhoon Hack ‘Breathtaking,’ Want FCC Action Nov 20, 2024 | 3:16 pm Industry experts shed more light on the recent Salt Typhoon hacks during a congressional hearing Tuesday as leaders of the Senate Judiciary Subcommittee on Privacy, Technology, and the Law called on the Federal government to “galvanize action now” against the China-linked hacking group’s recent infiltration of commercial telecommunications infrastructure. […]
Bipartisan Cyber Harmonization Bill Receives House Companion Nov 19, 2024 | 3:37 pm Just one day after National Cyber Director (NCD) Harry Coker urged Congress to pass bipartisan legislation that would bolster efforts to harmonize cybersecurity regulations across the Federal government, a companion bill was introduced in the House by Rep. Clay Higgins, R-La. […]
MeriTalk Interview: IRS CI Cyber Chief Koopman Wields AI to Unmask Cybercriminals Nov 18, 2024 | 9:40 am As technology evolves, so too do the methods used by criminals. To keep pace with these increasingly sophisticated threats, law enforcement agencies are turning to artificial intelligence (AI) technologies to bolster their investigative capabilities. […]
Former NCD: Designating CI Sectors ‘Handicaps’ Resilience Nov 18, 2024 | 9:35 am Former Acting National Cyber Director (NCD) Kemba Walden said on Thursday that the current sector-by-sector assignment of critical infrastructure areas by U.S. regulators is handicapping the Federal government and hindering nationwide cyber resilience. […]
NCD ‘Eager’ for Congress to Pass Cyber Harmonization Bill Nov 14, 2024 | 9:12 am National Cyber Director (NCD) Harry Coker Wednesday urged Congress to pass bipartisan legislation that would bolster the Biden administration’s efforts to harmonize cybersecurity regulations across the Federal government. […]
Neuberger Casts Cyber Wish List for Trump Administration Nov 13, 2024 | 2:57 pm A top Biden administration cybersecurity official laid out her wish list today for how the incoming Trump-Vance administration should prioritize cybersecurity challenges and regulations. […]
Breaking Silos: Unified U.S. Defense Against China Cyber Tactics Nov 11, 2024 | 2:20 pm China’s structured and well-funded ecosystem for cyber dominance poses a growing threat to U.S. cybersecurity, a senior Cybersecurity and Infrastructure Security Agency (CISA) official warned, saying the U.S. must continue to foster public-private partnerships and global alliances to defend against those threats. […]
IRS Resolves Decade-Long Security Deficiency Ahead of FY25 Nov 8, 2024 | 2:20 pm The Internal Revenue Service (IRS) announced Thursday that it reached a major milestone in fiscal year (FY) 2024 by resolving a longstanding significant deficiency in its information system controls 11 years after it was identified. […]