Cybersecurity
Federal Agencies Say ‘No Evidence’ Hackers Affected Colonial’s Operational Technology
A leading GOP lawmaker is pressuring CISA to release data on the agency’s pipeline cybersecurity initiative.
Cybersecurity
Senators Cite Colonial Pipeline Hack in Calling for Cyber Response and Recovery Fund
A hearing on federal agencies’ response to the SolarWinds hack drew attention to communication issues, both with the private sector and within the government.
Cybersecurity
Here's Why National Cyber Defense Is a ‘Wicked’ Problem
Vulnerable supply chains, sloppy security, and a talent shortage made events like the Colonial Pipeline ransomware attack and the SolarWinds hack all but inevitable.
Cybersecurity
Energy Department Leading White House Interagency Response to Pipeline Attack
The hack highlights jurisdictional issues on pipeline cybersecurity.
Ideas
Look to the Roman Empire to Truly Understand Zero Trust
With the network border blurry at best, we no longer have a single and convenient point of telemetry collection to force the attacker in the open.
Cybersecurity
US, UK Agencies Warn Russian Hackers Are Adapting Based on Government Advisories
The adversary is changing its tools to avoid detection while attacking the vulnerabilities governments issue warnings about.
Cybersecurity
Cyberspace Solarium Commissioners Concerned Over Security of Nation’s Water Supply
Having succeeded in passing a number of their recommendations through the last National Defense Authorization Act, the commissioners plan to embrace an oversight role as they push for more new laws.
Podcasts
Critical Update: What Platform One Brings to the Pentagon’s Software Game
Air Force Chief Software Officer Nicolas Chaillan and industry experts explain how Platform One is eliminating barriers to entry for DevSecOps teams.
Cybersecurity
FedRAMP Board Extends Deadline For Cloud Providers to Pitch Line-Jumping Business Cases
Cloud service providers hoping to secure authorizations to operate at multiple agencies simultaneously got some more time to make a business case for their prioritization by the board.
Cybersecurity
NSA to Defense Sector: Think Twice Before Connecting Operational Technology to the Internet
The agency recognized benefits such as enabling remote work but notes the inherent risks and costs of putting industrial control system components online.
Ideas
What Texas Power Outages Can Teach Us About Securing the Electric Grid
Cyber threats have the potential to impact the power grid in a similarly serious manner.
Cybersecurity
White House Endorses Inclusion of Cybersecurity in Water Infrastructure Bill
A recent attempt by hackers to poison the water supply in a Florida town prompted calls for more resources.
Cybersecurity
In Wake of Recent Breaches, FAA Wants to Up Cybersecurity of National Airspace System
The agency aims to be "more aggressive" in searching for network protections.
Cybersecurity
Senators Introduce Fresh Slate of Cybersecurity-Centered Bills
A couple would codify recommendations made by the Cyberspace Solarium Commission.
Ideas
The FBI Is Breaking into Corporate Computers to Remove Malicious Code – Smart Cyber Defense or Government Overreach
The actions raise questions about the power of courts to regulate cybersecurity without the consent of the owners of the targeted computers.
Artificial Intelligence
A Better Way to Spot Deep-Faked Satellite Images
Training AIs to look at 26 subtle features may help thwart attempts to peddle fraudulent imagery.
Ideas
How Do You Retire Technology and Limit Risk?
The challenge is that while many get excited about the new software when it’s installed, too few make long-term plans for removal at software end of life.
Ideas
Misinformation, Disinformation and Hoaxes: What’s the Difference?
Though many people are just paying attention to these problems now, they are not new – and they even date back to ancient Rome.
Cybersecurity
CISA Issues Deadline for Federal Agencies to Address Pulse Secure Vulnerabilities
The vulnerabilities led to the compromise of government agencies early last summer and, together with a newly disclosed flaw, continue to be exploited.
Cybersecurity