The United States’ maritime transportation sector is wide open to cyberattacks by Russian adversaries and must be protected at all costs, according to Cybersecurity and Infrastructure Security Agency Director Jen Easterly. The official referred to ports as a “soft spot” in America’s critical infrastructure, Nextgov reported Tuesday. Speaking at the Hack the Port 22 conference […]
The Army’s new Cyber Military Intelligence Group is combining military intelligence and open-source intelligence to support cyber missions, a spokesperson said. CMIG is in charge of fulfilling the intelligence needs of the Army Cyber Command, which has responsibilities in cyberspace operations, electromagnetic warfare and information operations. The spokesperson added that the new group is using […]
The U.S. government is asking private sector organizations to address known vulnerabilities and improve their cybersecurity postures in light of a possible Russian cyberattack. Anne Neuberger, the deputy national security adviser for cyber and emerging technology at the White House, said during a press conference that evolving threat intelligence indicates that the Russian government is […]
Forescout Technologies and the National Institute of Standards and Technology are jointly developing cybersecurity guidance for manufacturing organizations. Work is being done as part of the NIST Cybersecurity Center of Excellence’s “Protecting Information and System Integrity in Industrial Control System Environments” project. The effort is specifically aimed at helping organizations bolster the cybersecurity of their […]
Cybersecurity experts said the U.S. oil and gas industry has a vulnerable cybersecurity posture because of a lack of government-mandated standards and investments. Peter Lund, chief technology officer at software company Industrial Defender, said the lapses in the oil and gas sector are due in part to industry lobbyists that pushed back against stricter regulations. […]
The Department of Health and Human Services has urged organizations regulated by the Health Insurance Portability and Accountability Act to step up their security for electronic protected health information. In its cybersecurity newsletter, the HHS Office of Civil Rights said that many HIPAA-covered entities underappreciate the impact of their action or inaction on ePHI security. […]
Fortanix, a multi-cloud security company headquartered in Mountain View, California, disclosed that a growing number of federal agencies are turning to its Data Security Manager offering to thwart the increasing number of cybercrime, data breaches and other security challenges posed by nation-state bad actors. The federal government has allocated billions of dollars into cybersecurity to […]
The Cybersecurity and Infrastructure Security Agency and the FBI have issued an alert about Russia-linked cyber actors who targeted a non-governmental organization. In a joint advisory, the agencies said that the hackers accessed the NGO’s network by exploiting a flaw in default multi-factor authentication protocols. The FBI observed the cyber actors exploiting MFA settings as […]
The Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency warned organizations about possible threats to satellite communication networks. According to a joint advisory, SATCOM network intrusions could pose risks to network providers and their customers. CISA and the FBI are urging network operators and customers to review the measures outlined in the […]
The FBI and the Cybersecurity and Infrastructure Security Agency have warned organizations about the ability of Russian state-sponsored cyber actors to gain network access by exploiting default multifactor authentication protocols. According to a joint cybersecurity advisory, state-sponsored hacking groups would exploit a misconfigured account to set default MFA protocols at a non-government organization and access […]
