Cybersecurity

National cyber strategy faces major implementation challenges, experts say

A depleted workforce, lack of funding and challenges with information sharing across the public and private sectors may severely hamper the federal government’s implementation of a new sweeping cybersecurity strategy, experts told FCW. 

Cybersecurity

Report Spotlights Medical Infrastructure, Utilities as Primary Cyber Targets

A report from TransUnion documented the industries that most suffered from cyberattacks in the end of 2022, and recommended mitigation measures.

Cybersecurity

New White House cyber strategy looks to redistribute risks, responsibilities

The ranging strategy document includes plans for the collective defense of federal civilian executive branch agencies and a push for legislation to require software vendors to assume liability for the security of their products.

Cybersecurity

New National Cyber Strategy Asks 'More' from Industry and Government

The new National Cyber Security Strategy focuses on more international partnerships, enhanced baseline regulations and stronger cyberthreat policing.

Cybersecurity

CISA advisory details red team attack on critical infrastructure organization

The report comes as the director of the nation’s cyber defense agency calls on Congress to establish “higher standards of care for software in specific critical infrastructure entities.”

Cybersecurity

Cyber Criminals Are Increasingly Exploiting Cloud Environments, Report Finds

A new CrowdStrike report found that hackers and digital adversaries are relying less on malware, and more on unpatched vulnerabilities and data weaponization.

Cybersecurity

US Marshals Service Hacked in ‘Major Incident’

This is the second time the agency has been hacked in recent years, adding to a growing number of agencies that have experienced cybersecurity incidents.

Cybersecurity

White House to officially ban TikTok from government devices within 30 days

New guidance from the Office of Management and Budget finalizes a congressional push to ban the popular Chinese social networking app from all government devices amid privacy and security concerns.

Cybersecurity

CISA Director Calls Out Industry Using Consumers as Cyber 'Crash Test Dummies'

The head of the Cybersecurity and Infrastructure Security Agency said technology companies need to be more proactive when it comes to promoting safety and security.

Cybersecurity

CISA Seeks Private Sector Support for Cybersecurity Risk Management

The agency is looking to identify contractors capable of offering services for its Insights Branch, which provides technical cyber risk reduction.

Cybersecurity

CISA Tells Agencies What to Prioritize to Meet Cybersecurity Log Mandate

The guidance document also explains how CISA and the FBI will work with agencies to investigate cybersecurity incidents.

Cybersecurity

CISA Urges 'Increased Vigilance' for Cyber Threats on Anniversary of Russia’s Invasion of Ukraine

As Russia’s full-scale war in Ukraine reaches its one-year anniversary, CISA has warned that the U.S. and European nations “may experience disruptive and defacement attacks against websites in an attempt to sow chaos and societal discord.”

Cybersecurity

White House Committee Advocates Collaboration, Consensus in Cybersecurity Standards

The fourth installment of cybersecurity recommendations from the National Security Telecommunications Advisory Committee advocates more blanket requirements to strengthen the nation's cybersecurity posture.

Cybersecurity

House Dems Call for Info on Racially-Motivated Cyber Attacks

Several House lawmakers tasked DHS and CISA with providing information on “racially- or ethnically- motivated” violent attacks on the U.S. electrical sector.

Cybersecurity

Census Bureau data susceptible to ‘reconstruction attacks’ exposing individual data, report claims

A team of computer scientists demonstrated how cybercriminals can leverage commercial laptops to reverse engineer the Bureau’s statistics, leaving Americans exposed to risks like identity theft and discrimination. 

Cybersecurity

DOD IG: Officials Failed to Identify Security Risks When Authorizing Cloud Services

An audit conducted by the Defense Department’s inspector general found agency components “may be unaware of known vulnerabilities and cybersecurity risks associated with operating their systems or storing their data.”

Cybersecurity

Zero Trust Presents 'Doable' Cybersecurity Goals, State Department's CIO Says 

To shore up its cyber defenses, State is identifying potential vulnerabilities across its many disparate systems and working to boost its use of multifactor authentication.

Cybersecurity

DOD Unveils Updates to its Cyber Workforce Job Qualifications

Defense’s updated plan focuses on role-specific requirements and comes as the agency’s cyber workforce strategy is slated for imminent release.

Cybersecurity

Pending National Cyber Strategy to Feature ‘Strong Stand’ on Quantum Cryptography

An Office of the National Cyber Director official discussed the path of transitioning public and private networks to post-quantum cryptographic standards, and emphasizes data inventory in organizations’ efforts to transition cryptographic systems.

Cybersecurity

Almost 60% of GAO's Privacy Recommendations Since 2010 Are Unresolved

A watchdog report found that federal agencies have only implemented approximately 41% of recommendations related to the protection and security of sensitive data as of December 2022.