Cybersecurity

Justice Builds Out Crypto Tracking, International Engagement Teams on Ransomware

The Justice Department will now require prosecutors to consult with the international and cyber crime specialists on significant cyber investigations.

Emerging Tech

Quantum Tech Still Too Young to Warrant Export Controls, Defense Advisers Warn

A report commissioned by the Pentagon helps provide insight into how various federal agencies fit into big-picture policy considerations on the emerging national security issue.

Emerging Tech

Nuclear Regulators Want Machines to Monitor Cyberattacks on Power Plants

This isn’t the NRC’s first ask about machine learning and artificial intelligence.

Cybersecurity

Russian hackers are hitting cleared defense contractors, security agencies warn

The two-year campaign targeted sensitive but unclassified information stored by defense industrial base companies.

Cybersecurity

Agencies need to measure improvements to critical infrastructure cybersecurity, report says

Federal agencies tasked with critical infrastructure risk management aren't measuring improvements made by the adoption of new guidelines, according to a watchdog report.

Cybersecurity

Ransomware Attacks Exploded in Number and Scale in 2021, Per Cyber Firm

A new Crowdstrike report describes a dramatic increase in activity from both criminal and smaller nation-state groups.

Cybersecurity

Nearly 100 Utility Companies Now Participate in Cyber Sensor Initiative

The White House effort to secure industrial control systems from cyberattack requires nothing of the private sector. 

Cybersecurity

Lawmakers want the SEC to expand cyber regs

As the Securities and Exchange Commission rolls out a series of expanded cybersecurity proposals, a group of bipartisan senators are calling for updates to mandatory reporting requirements for public companies.

Cybersecurity

Senators Want More out of SEC Plans to Address Cyberattacks

A rule the commission proposed for investment funds and advisors is not precisely what key cybersecurity leaders had in mind.

Cybersecurity

F-35 program seeks cyber reinforcements

To improve the joint strike fighters' defenses against cyber attacks, the program office responsible for it wants an open system design solution.

Cybersecurity

FBI: Ransomware Attackers Have Code to Halt Critical Infrastructure

Monitoring remote access technology will be especially important for limiting the reach of malicious actors, allied cybersecurity agencies said in a report on trends they’ve observed over the last year in a booming ransomware industry.

Cybersecurity

CISA's public-private cyber defense group helped speed Log4j mitigation, experts say

A panel of cybersecurity pros testified that the Cybersecurity and Infrastructure Security Agency's collaborative operational body helped speed up response times and provide critical real-time insights on the Log4J software vulnerabilities to a vast range of companies and federal agencies.

Cybersecurity

Senators Relaunch Cybersecurity Bills Following log4j Concerns

The new package bill was introduced amid calls for increased government support of open-source software development.

Cybersecurity

Former CMMC Lead Resigns Amid Legal Drama

Katie Arrington, who was previously the chief information security officer for acquisition and sustainment, has resigned from her post.

Cybersecurity

IRS Suggests Need to Disclose Crypto Exchange Information to Law Enforcement

A letter the tax bureau sent to a key senator says stronger penalties for failure to report cryptocurrency-based income gains might also help deter cyber criminals.

Cybersecurity

NIST Suggests Agencies Accept the Word of Software Producers Per Executive Order

The standards agency said an attestation from vendors themselves would be sufficient when screening for cybersecurity, unless an agency's risk calculus suggests otherwise.

Cybersecurity

NSA rounds up the year in cyber

The National Security Agency's Cybersecurity Collaboration Center helped mitigate major vulnerabilities in 2021 while serving as a critical hub for industry and government officials to collaborate on cyber initiatives in an unclassified setting, according to a new report.

Cybersecurity

New Cyber Safety Board Pivots to Tackle log4j Vulnerabilities

The DHS body’s primary focus will be on addressing vulnerabilities in the commonly used log4j software library, but will also incorporate findings on the ‘SolarWinds’ hack.

Ideas

Building the Cybersecurity Workforce America Needs

No effort is more important in cybersecurity than creating a highly skilled workforce to protect both public and private systems.