Cybersecurity

VA Systems Vulnerable to Cyber Intrusions Due to Lack of Effective Oversight, Report Says

The Department of Veterans Affairs Inspector General's office said the agency is "leaving its systems vulnerable to compromise by impostors who may gain access to protected information."

Cybersecurity

Cyber Threats Warrant a Government Reorganization, Former CISA Head Says

Inaugural CISA director Chris Krebs said the federal government should do more to respond to cybersecurity and data concerns.

Cybersecurity

Former CISA chief wants a new, cross-cutting new agency to lead federal cyber

Chris Krebs wants to establish a new agency to focus on privacy, data and cyber risks facing the U.S., or to pull the Cybersecurity and Infrastructure Security Agency from under the Department of Homeland Security.

Cybersecurity

'Hack DHS' Bug Bounty Program to Begin Second Phase with New Contract Request

The contract is geared toward companies that can conduct crowdsourced events and competitions for vetted security researchers, to help bolster DHS’ cyber resilience.

Cybersecurity

FCC, FEMA Raise Alarm Bells About Vulnerabilities in Emergency Alert System

Both agencies warned that software and equipment vulnerabilities could allow hackers to transmit fake emergency messages or disrupt real ones. 

Cybersecurity

Top Malware of 2021 Has Been in Use for Years, CISA Warns

The advisory highlights that such usage offers “opportunities to better prepare” and provides recommendations to mitigate cybersecurity threats.

Emerging Tech

Treasury Sanctions Cryptocurrency Mixer

The online digital money platform has proven to act as a haven for cyber criminals looking to launder illegal cryptocurrencies.

Cybersecurity

Finance Sector Deals Latest Blow to Cyber Solarium Construct Teetering in NDAA

Congress will return from the August recess faced once again with the challenge of building cybersecurity policy for private providers of critical infrastructure faster than industry can tear it down.

Cybersecurity

DOD failing to track progress on military alternatives to GPS, GAO says

A new report says military leaders don’t have enough information to make crucial decisions about ongoing efforts to develop alternatives to the Global Positioning System.

Cybersecurity

New Bill Would Unlock Cybersecurity Funding for Small Businesses

Sen. Maggie Hassan’s proposed law would help set up funds to protect smaller organizations from malware.

Cybersecurity

Text messages are federal records and must be saved, DOD orders

After news that Jan. 6 insurrection-related texts were wiped from former Pentagon officials’ phones, Deputy Defense Secretary Kathleen Hicks ordered data on department devices must be retained. 

Cybersecurity

Misinformation Campaigns and Threats are Undermining Confidence in U.S. Elections, Official Says

CISA is ramping up efforts to defend voting systems from outside intrusion, but the spread of online misinformation and threats against election officials still damage faith in the electoral process.

Cybersecurity

A top senate democrat asks the defense watchdog to investigate a new batch of missing Jan. 6 texts

“I don’t know whether the failure to preserve these critical government texts from Jan. 6 is the result of bad faith, stunning incompetence, or outdated records management policies, but we must get to the bottom of it,” said Sen. Dick Durbin, D-Ill.

Cybersecurity

National Cyber Director’s office sheds light on forthcoming cybersecurity strategy

Building a more resilient cyber ecosystem tops the list, according to a top official from the office tasked with leading the initiative. 

Cybersecurity

How the Cyber Ambassador In Waiting Plans to Control $1.5 Billion for Open Networks

The recently passed “CHIPS and Science Act” funds a grants program that the new State Department official will have a key role in steering, including to telecom networking firms.

Cybersecurity

NIST, CISA Finalizing Guidance for Identity and Access Management Post-SolarWinds

The epic intrusion campaign has turned up the brights on vendors providing authentication services, but agencies will still need to be actively engaged for effective implementation.

Cybersecurity

National Computer Forensics Institute up for reauthorization

The proposal would continue NCFI’s services through 2028 for any government employee who could help prevent or investigate cyber crimes.

Cybersecurity

Banking Groups Urge Senators to Reject NDAA Provision as Harmful to Cybersecurity

The provision for identifying “systemically important entities” included in the House-passed NDAA could still hitch a ride on the massive defense bill when it’s called to the floor in the upper chamber.