Cybersecurity

FCC Advances Order on Interagency Security Reviews of Foreign Applications

The effort tries to strike a balance between the desire to capitalize on foreign investments and managing threats from adversaries like China.

Cybersecurity

Industry Groups Ask Lawmakers to Remove Core Cybersecurity Provisions from NDAA 

The trade associations for various government contractors are also opposing a range of oversight proposals in the annual defense bill, including ones aimed at enhancing procurement value and reducing unfair labor practices.

Cybersecurity

Defense Department Certification Body Could Itself Conduct Audits Under Interim Rule

One lawyer notes continued confusion surrounding legal liability in the case of disputed assessments.

Cybersecurity

Hackers Take Data for Further Reconnaissance in Breach of Federal Agency

Initial access to the agency’s system was possibly due to failure to fix a known VPN vulnerability, a patch for which was released in April 2019.

Cybersecurity

FBI Director: Feeding DOD’s Cyber Offense Operations Is Crucial to New Strategy

Senator says legislation is moving forward to thwart intellectual property theft from China and defend federal networks from cyberattacks.

Cybersecurity

Watchdog Highlights Need for Better Cyber Coordination Across Government

A pair of reports point to confusion about the State Department’s new cyber bureau and the vacuum left behind by the eliminated White House cyber coordinator position.

Cybersecurity

FERC Asks Energy Sector to Report Huawei, ZTE Usage

Amid fears over having to replace equipment, Energy official noted no set timeline for implementing next steps on a related executive order.

Cybersecurity

Government Employees May Need to Update Threat Hunting Perspectives

As Congress considers expanding threat hunting programs into the private sector, a majority of federal workers surveyed last year didn’t seem to have a clue about such efforts within their own agencies.

Cybersecurity

CISA Orders Immediate Action to Fix Vulnerability in Windows Directory

The agency has seen code designed to exploit the vulnerability in a system used to permit access to network resources.

Cybersecurity

CISA Data Shows Federal Civilian Agencies Faster Than Industry at Patching

The nation’s risk adviser continues to expand its role in what it’s dubbed the year of vulnerability management.

Cybersecurity

FBI Fights Intellectual Property Theft from University Offices

Director Christopher Wray noted the importance of attribution in the bureau’s strategy amid growing difficulty investigating cyber crime.

Cybersecurity

CISA, FBI Warn Iran-based Threat Actor May Be Planning Ransomware Attacks 

The attacker is targeting virtual private networks and cloud computing vulnerabilities, and has been present in victim networks for several months.

Cybersecurity

What's Next for the House-Passed IoT Security Bill

Some security professionals point to broad exemptions in the Senate version of the legislation that could undermine the effort to guide federal procurement decisions.

Cybersecurity

Hackers Connected to China Have Compromised U.S. Government Systems, CISA says

Using publicly disclosed code and vulnerabilities, attackers appear to be winning a crucial race against defenders.

Cybersecurity

DOD Cybersecurity Certification Body Moving Forward Despite Uncertain Funding

It’s unclear where money for crucial tools such as continuous monitoring will come from.

Cybersecurity

Cyber Commission Suggests Reforms to Allow Flexible Pay, Hiring to Boost Workforce

Prospective federal employees might be turned off by cybersecurity jobs being classified as IT.

Cybersecurity

COVID Could Spur Reduced Reliance on Classified Sources of Cyber Intelligence

CISA officials highlighted cloud configuration and VPN vulnerabilities in assessing threats associated with the pandemic.

Cybersecurity

FCC Estimates Replacing Chinese Telecom Equipment Will Cost at Least $1.6 Billion

A key lawmaker echoed calls from the agency’s chairman for Congress to appropriate the money.