CISA, FBI Issue Joint Alert to Address Directory Traversal Vulnerabilities

The Cybersecurity and Infrastructure Security Agency and the FBI have issued the Eliminating Directory Traversal Vulnerabilities in Software Secure by Design alert. The move follows recent cyberattacks, including the ones on ConnectWise and Cisco’s applications, that exploited companies’ traversal vulnerabilities, compromising critical infrastructure such as health care institutions and disrupting critical services such as hospital […]
Posted on by Xavier Dolan

Senators Introduce Bipartisan Bill to Strengthen AI Security

Sens. Mark Warner, D-Va., and Thom Tillis, R-N.C., are co-sponsoring the Secure AI Act of 2024 to strengthen safeguards against cyberthreats involving artificial intelligence. The proposed legislation focuses on updating existing vulnerability reporting mechanisms, including the National Institute of Standards and Technology’s National Vulnerability Database and the Cybersecurity and Infrastructure Security Agency’s Common Vulnerabilities and […]
Posted on by Xavier Dolan

New KBR Contract With US Naval Research Laboratory Extends to Cybersecurity

The U.S. Naval Research Laboratory has placed a new task order with Houston, Texas-based science, technology and engineering company KBR for operations, maintenance and security at its facilities in Washington, D.C.  The new indefinite-quantity/indefinite-quantity recompete contract, valued at an estimated $34 million, covers five years and expands KBR’s scope and services to include the NRL […]
Posted on by Arthur McMiler

Carahsoft, QuintessenceLabs Partner to Offer Quantum-Safe Cybersecurity Solutions to Government Agencies

Carahsoft will serve as QuintessenceLabs’ public sector distributor in a new partnership aimed at strengthening government agencies’ cybersecurity posture. The partnership is a response to the evolving threat landscape, including the ones potentially caused by quantum computers, Carahsoft said. To address such emerging threats, QuintessenceLabs helps agencies build adaptable cybersecurity infrastructure, protecting sensitive data across […]
Posted on by Xavier Dolan

White House Memo Aims to Improve Critical Infrastructure Security

A White House memo aims to intensify the federal government’s efforts to improve the cyber posture of the nation’s critical infrastructure sector. On Tuesday, the White House National Security Council issued the “National Security Memorandum on Critical Infrastructure Security and Resilience,” a document that builds on the achievements of the Cybersecurity and Infrastructure Security Agency […]
Posted on by Brianne Monterey

CISA Budget Hike to Enhance Cyber Defense Programs’ Capabilities Against Chinese Hackers

The Cybersecurity and Infrastructure Security Agency plans to improve three of its cyber defense programs for critical infrastructures, particularly the systems against Chinese cyberattacks, Jen Easterly, CISA director, told a hearing of the House Appropriations homeland security subcommittee on Tuesday.  Easterly, a 2024 Wash100 award winner, pointed out to the lawmakers that the improvement plan […]
Posted on by Arthur McMiler

CISA Touts Cyber Hygiene’s Role in Reducing Ransonware-Related Vulnerabilities

The Cybersecurity and Infrastructure Security Agency is addressing the growing number of ransomware attacks targeting various organizations through cyber hygiene. Through the Ransomware Vulnerability Warning Pilot, CISA aims to promote a proactive approach to cybersecurity, preventing malicious actors from accessing and deploying ransomware on networks.  CISA emphasized the critical role to be played by its […]
Posted on by Brianne Monterey