Cybersecurity

Federal, International Agencies Release Principles to Enhance Security of Tech Products

The new guidance pushes software and technology manufacturers to take more responsibility for the security of their devices by adhering to secure-by-design and -default principles.

Cybersecurity

IARPA's plan to hack the brains of hackers

The intelligence research agency released a broad agency announcement on Tuesday for a program that looks to leverage psychological biases among hackers for cyber defense.

Cybersecurity

CISA releases updated guidance for zero trust security architectures

The Cybersecurity and Infrastructure Security Agency is encouraging increased automation and enhanced security for access controls in its latest roadmap for agencies and organizations working to achieve zero trust.

Digital Government

Space Force Has a Major Satellite Oversight Problem, GAO Says

The government’s network of land-based satellite antennas is facing growing usage demands, but Space Force has not updated the system’s support operations plan since it took over control of the program in 2019.

Cybersecurity

Cyber Strategy Aims to Ensure Secure US Tech Design, Set International Example

Federal cybersecurity experts cited the importance of international and domestic partnerships in implementing cybersecurity standards and protocols.

Cybersecurity

CISA director details plan to address security risks in open source software

From hiring an open source security lead to establishing new public-private sector initiatives, the Cybersecurity and Infrastructure Security Agency is taking open source software security risks head on, according to Jen Easterly.

Cybersecurity

Genesis Black Market Dismantled, But Experts Warn of Potential Vacuum

A major coordinated effort took down the black market for stolen data, but experts warn the fight to secure data is ongoing.

Cybersecurity

Lawmakers Move to Elevate Leadership of Energy’s Cyber Office

Citing the threat posed by foreign adversaries, four Republican senators are pushing for a Senate-confirmed assistant secretary to helm Energy’s office tasked with cybersecurity.

Cybersecurity

Watchdog dings Energy Dept over cloud security

The agency's inspector general identified multiple security risks in the way Energy Department components authorize and use cloud computing applications.

Cybersecurity

DOD Launches New Site to Bolster ‘Hack the Pentagon’ 

The website seeks to scale the Defense Department’s bug bounty program by attracting additional white hat hackers.

Cybersecurity

Trade group floats cyber national guard plan

A new report from the Intelligence and National Security Alliance recommends public-private partnerships and new cybersecurity teams on the frontlines of the digital battlefield.

Cybersecurity

NATO to Seek a Contractor for Website Cybersecurity Testing 

Those interested will need to go through a Department of Commerce approval process to be eligible to bid on the contract.

Cybersecurity

IRS System Doesn’t Meet All Cloud Security Requirements, Watchdog Says

Treasury’s Inspector General found the IRS did not meet requirements like malicious code protection and timely risk mitigation.

Cybersecurity

White House Looks to Secure Space from Cyber Threats

The Office of the National Cyber Director, the National Space Council and leaders from the private sector laid out next steps to digitally secure the space ecosystem.

Cybersecurity

New Cyber Reports Will Show the Value of CISA Budget Investments, Director Says

Cyber incident reports will be shared with the agency under the soon-to-be implemented requirements of the Cyber Incident Reporting for Critical Infrastructure Act.

Cybersecurity

Biden Admin Targets ‘Misuse’ of Spyware with New Executive Order

The White House followed through on previous promises to pursue stronger oversight of commercial spyware companies and how their products are used in the U.S.

Cybersecurity

Lawmakers Warn of Cyber Threat Posed by Beijing, Moscow to Energy Sector

Enhancing collaboration and information sharing with industry partners can help mitigate threats, but concerns remain about the extent to which foreign-made equipment is embedded within the U.S. electric grid.

Cybersecurity

Acting National Cyber Director Explains New Cybersecurity Strategy to Congress

Acting National Cyber Director Kemba Walden highlighted some the strategy's key elements in testimony Thursday.

Cybersecurity

Industry reps like CISA's public-private cybersecurity collaborative, but offer tips on how to scale it

Rep. Eric Swalwell (D-Calif.) noted in the hearing that CISA’s Joint Cyber Defense Collaborative lacks a charter or membership criteria and previewed a forthcoming bill to “clarify activities of the JCDC.”