Cybersecurity

Ransomware Hackers Will Still Target Smaller Critical Infrastructure, CISA Director Warns

CISA Executive Director Brandon Wales discussed how ransomware actors target companies of all sizes, and how CISA wants organizations to prevent zero-day events.

Cybersecurity

Hackers Use More Sophisticated Scams to Drive Costly Data Breaches, Analysis Finds

Criminals are using more sophisticated methods, including virtual meeting services, to take advantage of compromised business emails and accounts for financial gain.

Cybersecurity

Camille Stewart Gloster Latest Appointment to Office of the National Cyber Director

The former Google alum joins the White House as multiple federal agencies look to recruit top-tier talent for enterprise technology positions.

Cybersecurity

TSA revises cyber rules for pipelines

The Transportation Security Administration reissued its pipeline cybersecurity directive to offer flexibility to operators.

Cybersecurity

NIST Revises Cybersecurity Guidelines Specifically for HIPAA

NIST will accept comments on the updated draft publication regarding HIPAA’s Security Rule until September 21. 

Cybersecurity

Official: White House to Meet with Rail Industry Before Issuing Cybersecurity Rules

The meeting comes as the Office of the National Cyber Director prepares a more comprehensive approach to securing privately owned and operated critical infrastructure.

Cybersecurity

More Quantum-Focused Legislation Aims to Implement Stronger Cryptography Standards

The bipartisan bill seeks to fortify federal networks as innovation in quantum computing poses new threats to national security.

Cybersecurity

Senators look to thwart future quantum hacks

The Quantum Computing Cybersecurity Preparedness Act would instruct the federal government to accelerate preparations for defending against future exploits powered by quantum computing.

Cybersecurity

Election Officials Want to Tell the Public 'Where the Good Guys Won' in Cyber Efforts

As misinformation around the 2020 elections continues to swirl, state election officials say that DHS and CISA should do more to raise up ‘successes’ around efforts to mitigate vulnerabilities in voting systems.

Cybersecurity

Biden administration looks to jumpstart cyber training

At a White House event, the Labor and Commerce Departments announced a 120-day apprenticeship sprint to offer pathways into cybersecurity jobs.

Cybersecurity

Justice Recovered $500K for Victims, Traced Ransomware Payments to China

The announcement emphasizes the department’s new strategy to address cyber threats, which also includes enforcing financial penalties for federal contractors misrepresenting their cyber defenses.

Cybersecurity

Cyber looms large in House NDAA

From establishing the National Digital Reserve Corps to setting term limits at CISA, here’s what you need to know about the tech and cyber amendments currently featured in the House version of the FY2023 NDAA.

Cybersecurity

CISA Builds Out Effort to Influence Global Policy With London Attaché

The office will inform other efforts to come as the agency grows its international presence.

Cybersecurity

NIST Selects 12 Companies for Implementing Post-Quantum Cryptography 

Officials leading a standardization effort—based on four winning algorithms—are relying heavily on industry for success.

Cybersecurity

CISA’s first international office set to open later this month in London

CISA’s planned international attaché office will help promote the agency’s first-ever global strategy announced last year.

Cybersecurity

FTC explains 'reasonable' cybersecurity

From risk-based management to staying up-to-date about known vulnerabilities and their patches, the Federal Trade Commission is detailing key steps companies can take to avoid getting hit with a data security complaint.

Cybersecurity

Simple Cyber Reporting Will Enable Better Governmentwide Response, Lawmaker Argues

Sen. Gary Peters discussed how streamlined reporting to CISA can clarify the cyber threat landscape to all U.S. networks.

Cybersecurity

Cyber Safety Review Board Closes the Book on SolarWinds While Reporting on Log4j 

Legislation seeking to amend the annual National Defense Authorization Act wants the Government Accountability Office to investigate.

Cybersecurity

NIST promotes testbed to address threats targeting ML systems

Dioptra, an experimentation testbed fielded by the National Institute of Standards and Technology, allows researchers to better understand the techniques that can help protect their products and systems against an increasing number of attacks targeting machine learning algorithms.

Cybersecurity

Federal contractor to pay $9M to resolve cyber-related false claims case

The settlement stems from a 2017 whistleblower lawsuit alleging that Aerojet Rocketdyne concealed its poor cyber hygiene from its government partners.