Cybersecurity

DHS workforce engagement scores still lag, but numbers may not tell the whole story

At a House hearing on DHS employee morale, the agency's human resources chief testified that the rankings don’t take into account ongoing efforts to address internal issues.

Cybersecurity

Cybersecurity front and center in Iran threat hearing

Members of the House Homeland Security Committee quizzed experts about the capabilities of Iran's cyber forces.

Cybersecurity

CISA looks for input on new, 'less prescriptive' TIC

Agencies can use new guidance documents on Trusted Internet Connections 3.0 to jumpstart their own pilot programs and suggest improvements to the policy.

Ideas

Cyberspace Is the Next Front in Iran-U.S. Conflict—and Private Companies May Bear the Brunt

Businesses are at high risk, and strict American criminal laws prohibit many forms of cyber self-defense by private companies.

Cybersecurity

CISA Says Agencies Have 10 Days to Patch NSA-Spotted Microsoft Vulnerability

The National Security Agency discovered and disclosed a severe flaw in Windows 10 to build trust with industry partners, an official said.

Cybersecurity

CMMC training underway for auditors

Training of the third-party accreditors for the DOD's upcoming unified cybersecurity standard will take place from now until June.

Cybersecurity

CISA alerts on NSA-discovered Windows 10 flaw

Attackers could use the vulnerability to trick users into installing "updates" from trusted parties that are actually malware.

Cybersecurity

Telecom, Software Industry Groups Push Back on Commerce’s Proposed Supply Chain Rule 

One group suggested the proposed rule to ban U.S. entities from buying information technology from foreign adversaries could be illegal.

Cybersecurity

Iran Is Expanding Its Online Disinformation Operations

Tehran isn’t as practiced as Moscow at purveying propaganda online, but they’re no slouches.

Ideas

Can the Continuous Diagnostics and Mitigation Program Secure a Cloud Smart Government?

The good news is that CDM is proactively reaching out to leading cloud service providers for soltuions.

Cybersecurity

OPM CISO Seeking a Small Business to Help Monitor Agency Cybersecurity

The winning vendor will help the government’s HR department track incidents across 1,000 servers and more than 10,000 devices.  

Cybersecurity

DOD names chair for cyber certification program

Ty Schieber will head the accrediting body for DOD's upcoming cybersecurity certification program.

Cybersecurity

Cyber Solarium to back CISA as the lead response agency

Leveling up CISA and CyberCom and streamlining Congressional jurisdiction will be among the recommendations issued in an upcoming report from the Cyberspace Solarium Commission.

Cybersecurity

CISA cautions on Iran threats

U.S. officials and cybersecurity experts are concerned that Iranian reprisals for the killing of Soleimani could take the form of attacks on U.S. networks or critical infrastructure.

Cybersecurity

What’s Next for Iran’s Cyber Actors?

The country has grown as a talented, and destructive, network threat over the last several years.

Cybersecurity

Killing of Iranian general spurs concern about cyber retaliation

Iran has threatened to respond to the targeted killing of senior general Qassem Soleimani, and analysts say the goal will be to punish the U.S. by targeting its IT and critical infrastructure while avoiding traditional military conflict.