Cybersecurity

DOE Watchdog Detailed Its Cybersecurity State Amid SolarWinds Hack

The department continues to struggle with many of the issues the Cybersecurity and Infrastructure Security Agency identified after widespread intrusions into the public and private sector. 

Cybersecurity

Electric Cars, Smart Refrigerators Pose Cyber Risk To US Utilities, GAO Finds

The risks aren’t well understood by researchers, in part because of local and state control of electrical utilities.

Cybersecurity

CISA Orders Agencies to Conduct Fresh Scans of Microsoft Exchange Servers

The agency issued supplemental guidance requiring new tests with Microsoft-provided tools and measures to harden the attractive target.

Ideas

Getting and Growing the Cyber Workforce You Need for 2021—and Beyond

It’s no secret that the competition for cyber talent is stiff. With a 0% unemployment rate and nearly 400K open positions across the U.S., federal agencies must reinvent their cyber employee experience. 

Cybersecurity

FedRAMP Outlines Requirements for Using Containers

Container technology allows operability across operating systems and faster development but is a primary security concern for implementers. 

Cybersecurity

Director Says NSA’s Domestic Surveillance Authority ‘Rightly’ Limited

Gen. Paul Nakasone, who oversees both the intelligence agency and U.S. Cyber Command, stressed the need for greater visibility through private-sector information streams.

Cybersecurity

Energy Launches Supply Chain Program As Watchdog Called for More Action 

The Energy Department has been focused on securing the generation and transmission of power, but distribution processes are also increasingly vulnerable.

Cybersecurity

New Software Vendor Standards Coming Within Weeks, CISA Head Says 

The White House is leading an interagency effort focused on software development that will determine federal procurement of information technology.

Cybersecurity

Key Official: Defense Information Operations ‘Not Evolving Fast Enough’

China will soon harness AI to supplant Russia as the world leader in information warfare, a DIA leader said.

Cybersecurity

America’s Drinking Water Is Surprisingly Easy to Poison

The experts say the sorts of rudimentary vulnerabilities revealed in the breach are common among America’s 151,000 public water systems.

Cybersecurity

FCC Moves to Rescind Permits of More Chinese Telecom Operators

The commission is also seeking public comment on the development of Open Radio Access Networks to improve national security and prosperity.

Cybersecurity

NSA, CISA Promote Domain Name System Incorporating Threat Information

The agencies’ guide on selecting a provider of protective DNS services is based on a pilot with the Department of Defense Cyber Crime Center.

Ideas

Practical Steps to Managing Supply Chain Risk

Like with any new agency initiative, nothing moves forward without executive sponsorship.

Cybersecurity

CISA, FBI Link Exploitation of Microsoft Exchange to Nation-State Actors

The agencies also warned of impending commoditization by criminal groups of access gained through vulnerabilities in the email and calendar service.

Cybersecurity

CISA: No Federal Agencies Compromised Through Microsoft Exchange Servers

Investigations remain ongoing, Cybersecurity and Infrastructure Security Agency leaders said at a hearing on modernizing the federal government’s approach to cybersecurity.