Ideas

Look to the Roman Empire to Truly Understand Zero Trust

With the network border blurry at best, we no longer have a single and convenient point of telemetry collection to force the attacker in the open.

Cybersecurity

US, UK Agencies Warn Russian Hackers Are Adapting Based on Government Advisories

The adversary is changing its tools to avoid detection while attacking the vulnerabilities governments issue warnings about. 

Cybersecurity

Cyberspace Solarium Commissioners Concerned Over Security of Nation’s Water Supply

Having succeeded in passing a number of their recommendations through the last National Defense Authorization Act, the commissioners plan to embrace an oversight role as they push for more new laws.

Podcasts

Critical Update: What Platform One Brings to the Pentagon’s Software Game

Air Force Chief Software Officer Nicolas Chaillan and industry experts explain how Platform One is eliminating barriers to entry for DevSecOps teams.

Cybersecurity

FedRAMP Board Extends Deadline For Cloud Providers to Pitch Line-Jumping Business Cases

Cloud service providers hoping to secure authorizations to operate at multiple agencies simultaneously got some more time to make a business case for their prioritization by the board.

Cybersecurity

NSA to Defense Sector: Think Twice Before Connecting Operational Technology to the Internet

The agency recognized benefits such as enabling remote work but notes the inherent risks and costs of putting industrial control system components online.

Ideas

What Texas Power Outages Can Teach Us About Securing the Electric Grid

Cyber threats have the potential to impact the power grid in a similarly serious manner.

Cybersecurity

White House Endorses Inclusion of Cybersecurity in Water Infrastructure Bill 

A recent attempt by hackers to poison the water supply in a Florida town prompted calls for more resources.

Cybersecurity

Senators Introduce Fresh Slate of Cybersecurity-Centered Bills

A couple would codify recommendations made by the Cyberspace Solarium Commission.

Ideas

The FBI Is Breaking into Corporate Computers to Remove Malicious Code – Smart Cyber Defense or Government Overreach

The actions raise questions about the power of courts to regulate cybersecurity without the consent of the owners of the targeted computers.

Artificial Intelligence

A Better Way to Spot Deep-Faked Satellite Images

Training AIs to look at 26 subtle features may help thwart attempts to peddle fraudulent imagery.

Ideas

How Do You Retire Technology and Limit Risk?

The challenge is that while many get excited about the new software when it’s installed, too few make long-term plans for removal at software end of life.

Ideas

Misinformation, Disinformation and Hoaxes: What’s the Difference?

Though many people are just paying attention to these problems now, they are not new – and they even date back to ancient Rome.

Cybersecurity

CISA Issues Deadline for Federal Agencies to Address Pulse Secure Vulnerabilities

The vulnerabilities led to the compromise of government agencies early last summer and, together with a newly disclosed flaw, continue to be exploited.

Cybersecurity

DOD’s Cybersecurity Accreditation Partner Working to Address Conflict of Interest Issues

Multiple members of the Accreditation Body’s board of directors also serve as consultants in the cybersecurity space, which critics say gives them an unfair advantage to cash in on the program.

Artificial Intelligence

Regulators Want to Know How AI Should (and Shouldn’t) Be Used In Nuclear Power Plants

The Nuclear Regulatory Commission put out a call for feedback on using artificial intelligence and machine learning to improve the safety and reliability of the grid.

Cybersecurity

Energy Department Announces 100-Day Sprint to Shore Up Power Grid Cybersecurity

The department will partner with the Cybersecurity and Infrastructure Security Agency and utilities to improve visibility, detection and response to cyber threats.