Cybersecurity

Lawmakers want to expand USDA's Circuit Rider program to cover cyber

A new bill would allow small water utilities to obtain funds for cybersecurity consults. 

Cybersecurity

Experts call for overhaul of 'outdated' critical infrastructure cyber policy

A new report analyzes the federal government’s approach to infrastructure cybersecurity as a key strategy document is getting a rewrite.

Cybersecurity

U.S., South Korean agencies warn of state-sponsored spearphishing

The North Korea-affiliated group Kimsuky’s email attacks targeted research and media organizations.

Cybersecurity

Federal vision to streamline cyber incident reporting expected this summer

The Cyber Incident Reporting Council will issue a report to Congress "in the next month or two" with recommendations on ways to achieve harmony across a complex network of federal cyber mandates. 

Cybersecurity

Unmonitored networks put US nuclear arsenal at risk, GAO finds

A Government Accountability Office report found that the Energy Department cannot effectively monitor potential insider threats to U.S. nuclear security because department staff “have not identified the total number of DOE’s stand-alone classified networks.”

Cybersecurity

GAO identifies new infosec deficiencies in IRS system controls

The watchdog's annual audit of the agency turned up new recommendations on system access controls and security configurations, alongside a limited release report and previous recommendations.

Cybersecurity

DOD Submits Classified Cyber Strategy to Congress

An unclassified fact sheet released by the Pentagon said the new strategy will continue efforts to conduct “hunt forward operations”’ with U.S. allies and “defend forward” activities meant to disrupt threat actors on their own turf.

Cybersecurity

Agencies Warn of State-Sponsored Volt Typhoon’s Hacking Tactics

In collaboration with international and private sector partners, CISA released a new advisory warning network defenders of PRC-linked Volt Typhoon’s infiltration tactics. 

Cybersecurity

DHS' cyber agency seeks small biz support for strategic planning

The Cybersecurity and Infrastructure Security Agency has set a date to explain its changes to a management consulting services contract.

Cybersecurity

Securing U.S. Intellectual Property ‘Top Priority’ for Federal Law Enforcement

The FBI and Homeland Security are emphasizing the need to digitally safeguard tech R&D in the U.S. from state-sponsored adversaries.

Cybersecurity

Cyber Agencies Unveil Updated Ransomware Guide

The 2023 version offers more detailed, step-by-step guidance and associated recommendations to fortify public and private networks against sophisticated ransomware.

Cybersecurity

Report Estimates Trillions in Indirect Losses Would Follow Quantum Computer Hack

An analysis projects the hypothetical disruption a cyberattack from a quantum computer could have on global financial markets.

Cybersecurity

Lawmakers Want DHS to Assess National Security Risks of Doxing 

Proposed legislation would require the Department of Homeland Security to “evaluate risks posed to national security and civilian privacy” by the online release of individuals’ personal information.

Cybersecurity

Energy Department officials eye 2027 date to stand-up cyber intelligence center

Officials from the department's Office of Cybersecurity, Energy Security and Emergency Response told House members Tuesday that work within the threat-sharing pilot program has already shown progress and could use more resources from Congress.

Cybersecurity

‘Continuing Significant Deficiencies’ Hamper VA’s Information Security Controls, Audit Finds

An audit released by the VA Office of Inspector General found that the department “needs to implement improved controls” to address persistent gaps in its information security program.

Cybersecurity

Federal Cyber Leaders Emphasize Standards Development for Stronger Networks

The critical infrastructure experts upheld common cybersecurity standards as a key to resilient networks and private sector collaboration.

Cybersecurity

House Panel Advances Bills to Boost CISA’s Oversight of Open Source Software, Cyber Training

The two measures, which passed the committee with bipartisan support, would give CISA authority across DHS and the federal government.

Cybersecurity

Ransomware vulnerability warning pilot yielding valuable lessons, CISA official says

A new interagency effort to proactively mitigate ransomware vulnerabilities has helped expand information sharing between the public and private sectors, according to a risk operations official from the Cybersecurity and Infrastructure Security Agency. 

Cybersecurity

Transportation Needs to Improve Cyber Policy Implementation, Watchdog Finds

The Department of Transportation should better implement its policies for established cyber roles, including improving training and role expectations, according to a recent GAO report.