Cybersecurity

Agencies Must Fix Newly Cataloged Vulnerabilities by Christmas Eve

Officials stressed the importance of maintaining a bill of materials for software in flagging the “Log4j” vulnerability.

Cybersecurity

Increased Interconnectivity Demands Stronger Federal Data Protection Protocols, Officials Say

Officials in the public and private sectors warned of the need to enact a robust cybersecurity posture at the federal level ahead of growing ransomware and hacking threats.

Cybersecurity

House Passes NDAA Without Cyber Incident Reporting Legislation

The bill still includes what the House Armed Services Committee referred to as the widest empowerment of CISA since SolarWinds.

Emerging Tech

ACLU Calls for Halt of Homeland Security’s Use Of Facial Recognition Technology

The civil rights organization said that the biometrics technology can lead to discriminatory arrests based on race.

Cybersecurity

OMB Guidance Heralds Automation of FISMA Reporting

The new Federal Information Security Modernization Act guidance also prioritizes security testing and doubles down on CISA’s Continuous Diagnostics and Mitigation program.

Cybersecurity

NSA, CISA List Expectations for Industry on Data Governance in 5G Environments

The document is the third in a four-part series of guidance that categorizes security responsibilities according to their relevance for the cloud service providers, mobile operators and users of emergent fifth-generation networks.

Cybersecurity

DHS Redefines ‘Cybersecurity Incident’ in Directives for Surface Transportation

The new definition allows industry more flexibility to decide what should trigger reporting mandates for the sector.

Cybersecurity

Hacker, Journalist Among CISA Directors’ 23 New Cybersecurity Advisors

The new Cybersecurity Advisory Committee will focus on five areas including workforce development, and has room for 12 more members.

Cybersecurity

Feds Warned to Look Out For Ransomware Grinches over the Holidays

Federal cybersecurity officials would prefer you keep your holidays a little more secure.

Cybersecurity

CISA Seeks Protective Email Service that Tracks Agencies’ Security Compliance

The agency is ramping up efforts to exercise its new authorities to hunt for threats across the .gov enterprise.

Cybersecurity

White House Holiday Warning Identifies Options for Reporting Ransomware

The FBI has a prominent portal for entities to report cybersecurity incidents, but Congress is considering legislation that officials fear could change the current dynamic.

Artificial Intelligence

Homeland Security Looking For Ideas on AI, Biological Surveillance

The Department of Homeland Security released a pre-solicitation for several innovative development projects.

Cybersecurity

NSA, CISA Say Industry Should Use Attestation Technology to Secure 5G Environments

The tech can provide evidence of compliance with configuration standards and detect anomalies in complex multi-tenant, multi-cloud computing architectures.

Digital Government

The State of the Federal Tech Workforce

Agencies have struggled to hire IT and cyber professionals but some are finding alternative ways to fill the talent gap.

Cybersecurity

DHS Launches Portal to Recruit—and Retain—Cybersecurity Talent

The moment of truth is here for a new hiring system that promises to address gaping cybersecurity shortages by redefining "merit."

Cybersecurity

Senators Urge Better Cyber Protection For K-12 Schools

A recent Government Accountability Office report dove into how virtual classrooms are increasing vulnerability to ransomware and other cyber threats.

Cybersecurity

CISA Director to Appoint Hackers to Cybersecurity Advisory Committee

Security researchers have a crucial role to play in balancing an offense-heavy ecosystem, the director said.

Artificial Intelligence

DHS Researching Public Perception of Facial Recognition and AI Use 

The Department of Homeland Security is collecting privacy concerns as critics fight to ban facial recognition outright.