Cybersecurity

CISA Highlights Space, Bioeconomy as Possible New Critical Infrastructure Sectors

The agency also suggested existing sectors be consolidated and that there is a need for some agencies to exercise greater authority over private-sector entities.

Cybersecurity

DOD Must Enhance Cyber Incident Reporting and Sharing, Watchdog Says

The Government Accountability Office found that the Pentagon “lacks an accountable organization and consistent guidance” for documenting and sharing details about reported cyber incidents.

Cybersecurity

Deadline looms for plan to restart economy in case of major cyberattack

Lawmakers have been urging the Biden administration to develop a strategy first mandated in the Fiscal 2021 NDAA.

Cybersecurity

DHS Chief Appears to Back Status Quo Approach for Securing Critical Infrastructure

The Biden administration is looking to Congress for help with ‘filling gaps in statutory authorities’ for improving U.S. cybersecurity.

Cybersecurity

China’s Cyber Capabilities ‘Pose a Serious Threat’ to US, Advisory Panel Warns

The panel’s report also called for the Biden administration to consider revoking China’s status as a favored trading partner if a congressional review finds that Beijing is not complying with its commitments.

Cybersecurity

Breaches of personal data at DOD have doubled since 2015

A recent oversight report detailed that the Defense Department experienced nearly 1,900 breaches of personally identifiable information in 2021 and may need a better system for informing affected individuals.

Cybersecurity

CISA Issues Vulnerability-Management Tools Dependent on Industry Action

Federal agencies are under a binding operational directive to address exploitable security vulnerabilities in their software, but the success of CISA’s effort relies on the cooperation of software vendors.

Cybersecurity

NATO Allies Double Down on Cybersecurity in Warfighting Ops

U.S. and Italian officials convened the 2022 Cyber Defence Pledge Conference, focused on supporting Ukraine and investing in new technology for all member nations.

Cybersecurity

How Federal Agencies are Using Innovative Tech to Protect Critical Infrastructure Cybersecurity

Officials from CISA and DARPA spoke about their initiatives to support cybersecurity operations across critical infrastructure networks.

Cybersecurity

NIST Official Warns Against Device-only Approach to Securing IoT

Federal agencies’ implementation of NIST’s guidelines on the issue—under direction from Congress—is coinciding with industry resistance to the comprehensive approach stakeholders agree is necessary.

Cybersecurity

No ‘Specific or Credible’ Cyber Threats Affected Integrity of Midterms, CISA Says

Despite “a handful” of DDoS attacks targeting state and local election websites and some technical glitches affecting voting equipment, CISA says it saw “no activity” that should undermine faith in the results of the midterm elections.

Digital Government

What a Divided Government Could Mean for Tech Policy

Here’s what a split Congress might mean for tech, cybersecurity and governance.

Cybersecurity

Former CISA Head Calls for Renewed Action to Combat Election Lies

Inaugural CISA director Chris Krebs expressed concern about the spread of election misinformation as Twitter changes up its user verification process.

Cybersecurity

CISA, NSA and Industry Outline Security Responsibilities of Software Suppliers

New guidance from the federal agencies—and major companies serving the government—tries to distinguish between the security duties of software developers, suppliers and consumers.

Cybersecurity

Voting Machine Myths Likely to Increase During and After Midterms, Report Finds

Cybersecurity firm Recorded Future identified mis- and disinformation campaigns suggesting that voting machines from three major companies “will be used to falsify the results of the midterms.”

Cybersecurity

Former CISA chief warns of ‘very chaotic environment’ ahead of midterms

Chris Krebs said those hoping to undermine confidence in U.S. elections may have their best shot yet during this week’s midterm vote.

Cybersecurity

Almost half of phishing attacks target gov employees, research says

Traditionally aimed at stealing credentials, phishing attacks are growing increasingly sophisticated.

Cybersecurity

NIST on tap to improve cybersecurity of water systems

The National Institute of Standards and Technology (NIST) hopes a new project will create a set of best practices to help the nation’s complex water and wastewater systems bolster their cybersecurity posture.

Cybersecurity

CISA Leaning Toward Lower Threshold for Mandatory Cyber Incident Reporting

The agency has started to receive feedback from some key stakeholders for its rulemaking process on the issue.