Cybersecurity

FDIC needs to sharpen its cyberthreat sharing with financial institutions, OIG says

Despite recent improvements, a watchdog report claims the agency still has more it can do to make threat-sharing policies more effective. 

Cybersecurity

Russian cyber group unleashes new malware campaign on Ukrainian military targets

A new report says a cyber threat actor within Russia’s military intelligence service leveraged a novel malware campaign targeting Android devices used by the Ukrainian military.

Cybersecurity

Chinese hackers targeted government entities and thwarted recovery efforts, report says

The cybercrime group evaded remediation efforts by installing persistent backdoors and deploying “new and novel malware.”

Cybersecurity

Meta report spotlights ‘largest known’ foreign influence effort across social media platforms

Actors linked to adversarial nations — namely China and Russia — worked across platforms to push inaccurate content, according to a report released Tuesday. 

Cybersecurity

US water infrastructure ‘unsustainable’ amid rapidly evolving crisis, report warns

The United States is facing an unsustainable demand for water and lacks the security posture to defend the nation’s water systems from emerging threats, according to a new report.

Cybersecurity

More than 1,000 federal system flaws fixed via CISA's bug reporting platform

The nation’s cyber defense agency is scaling up a key program that gives federal agencies a chance to remediate vulnerabilities before they can be exploited.

Cybersecurity

New bill would require all federal contractors to develop vulnerability disclosure policies

The Federal Cybersecurity Vulnerability Reduction Act aims to establish standardized vulnerability disclosure policies across all federal contractors. 

Cybersecurity

North Korean hackers poised to cash out $40 million in bitcoin after crypto heists, FBI warns

The law enforcement agency says it has been tracking large volumes of cryptocurrency stolen by North Korean hackers during a summer of high-profile cyber heists.

Cybersecurity

National intelligence office issues cyber warning for government and commercial satellites

The warning comes just about a month after three teams at the DEF CON 23 convention in Las Vegas managed to successfully hack a government satellite in orbit.

Cybersecurity

Threat actor targeted DOD contracting website

Malware leveraging flaws in edge routers has been spying on military contracting websites, according to research from Lumen's Black Lotus Labs.

Cybersecurity

CISA prioritizing on-site K-12 cybersecurity reviews this school year

The nation’s cyber defense agency is aiming to work with schools “where they’re at instead of where they should be.” 

Cybersecurity

CISA conducts largest annual election security drills amid threats targeting voting systems

The nation’s cyber defense agency hosted a three-day election security exercise with state, local and federal officials ahead of the 2024 race.

Cybersecurity

New CISA guidance looks to guard against supply chain hacks

The Cybersecurity and Infrastructure Security Agency advocates constant communication and education as cyber threat mitigative measures.

Cybersecurity

New bill aims to address private sector cyber risks to FEMA operations

A proposed amendment to the Homeland Security Act would task FEMA and the Cybersecurity and Infrastructure Security Agency to work with private entities to ensure digital risks to agency operations are mitigated. 

Cybersecurity

Voting machine hacking plot figures into Trump indictment

A plot allegedly hatched by lawyer Sidney Powell to use stolen data to rewrite the results of the Georgia vote in the 2020 election is a key piece of the fourth indictment of former President Donald Trump.

Cybersecurity

White House cyber office has its eye on workforce data

Data on the cybersecurity workforce is fragmented and inconsistent. A top White House official is looking to change that.

Cybersecurity

DHS cyber review board to examine China-linked cyberattacks of Microsoft 

The Cyber Safety Review Board will assess how a hacking group reportedly linked to China leveraged a vulnerability in Microsoft Exchange Online to access government emails. 

Cybersecurity

China not ahead of U.S. in cyber and surveillance, NSA head says

NSA Director Paul Nakasone said working with the private sector is “tremendously important” when it comes to maintaining the nation’s edge over adversaries like Russia and China.

Cybersecurity

House committee asks FCC for more action on IoT device security

A letter from the House Select Committee on the Chinese Communist Party asks the FCC for investigations into Chinese-linked connectivity modules as the agency launches its IoT cyber labeling program.

Cybersecurity

White House looks to shore up open source software security

The Office of the National Cyber Director wants software providers to "contribute back to the security of the open source software they depend upon."