Cybersecurity

ODNI Plans to Share More About Cyber Threats Under New Counterintelligence Strategy

The strategy requires the intelligence community to think of the private sector as consumers of its threat information.

Cybersecurity

House Panel Clears Bills to Give CISA Subpoena Power, Retain Leadership

The Homeland Security Department’s newest agency enjoys bipartisan support in shaky times.

Cybersecurity

Union Leader Says Utilities Not Incentivized to Report Cyber Incidents or Implement Protections

FERC’s recently “expanded” reporting requirements leave it up to entities to decide on qualifying events.

Cybersecurity

Survey: Financial-Sector Agencies’ Policies for Sharing Cyber Threats Inconsistent

Respondents describe barriers ranging from a lack of resources to intelligence agencies’ classification decisions.

Cybersecurity

Government Makes Strides Sharing Cyber Threat Information

The government’s only laggard complying with the Cybersecurity Information Sharing Act of 2015 is the Defense Department.

Cybersecurity

Federal CISO: Better Info Sharing Will Lead to More Secure Supply Chain

Federal Chief Information Security Officer Grant Schneider outlined the Federal Acquisition Supply Chain Council goals for 2020.

Cybersecurity

CISA Wants Feedback on Its Vulnerability Assessments

The agency is looking to improve a program that lets critical infrastructure operators measure their digital security and see how they stack up against their counterparts.

Ideas

Why Companies Should Be Open About Cybersecurity

Companies that are open about their cybersecurity risk management fare significantly better with investors than peers that don’t disclose those efforts, new research shows.

Cybersecurity

Russian Hackers Co-Opt Iranian Cyber Tools to Attack 35 Countries, NSA Warns

In a joint advisory, U.S. and British authorities said the Turla group is piggy-backing off the work of Iranian rivals to advance its own agenda.

Ideas

Get Proactive to Better Arm Yourself Against Cyberattacks

Agencies must move to an integrated data-driven approach aimed at predicting and preventing cyber threats.

Modernization

Legacy Systems Held DHS' Biometrics Programs Back. Not Anymore.

The cloud-based HART system, which will house data on hundreds of millions of people, promises to significantly expand the department’s use of facial recognition and other biometric software, as well as its partnerships with external agencies.

Cybersecurity

6 Cyber Bills You Might Have Missed

The bills aim to strengthen the Homeland Security Department’s cybersecurity efforts and help the energy sector improve its digital defenses.

Cybersecurity

CISA Chief Calls on Cybersecurity Community to ‘Stop Selling Fear’ 

Director Chris Krebs wants government and industry to get a broader community of people involved in the fight against digital threats but not by fearmongering.

Cybersecurity

Homeland Security Stands Up Transatlantic Aviation Roundtable

The new committee will address critical security issues that trouble the open skies.

Cybersecurity

NSA Cyber Chief Wants to Share Digital Threats Early and Often

The agency has historically been slow to share threat intelligence but accelerating that process would help the government get ahead of cyber adversaries, according to Anne Neuberger.

Digital Government

Immigration Officials Use Secretive Gang Databases to Deny Migrant Asylum Claims

Legal experts and human rights advocates say they were not told about the databases and question their reliability.

Policy

House Homeland Gives Thumbs Up for Permanent DHS Cyber Response Team

The committee passed a trio of other bills that would fight digital spies, improve intelligence sharing and bolster counterterrorism tech research.

Cybersecurity

CISA Cuts Deadline For Patching Critical Weaknesses In Half

A new binding operational directive requires agencies to patch critical vulnerabilities in just over two weeks.

Cybersecurity

The FBI Takes Too Long to Alert Victims of Cyberattacks

In one instance, agents waited nine months to tell a company it had been breached, according to an internal watchdog.