Securities and Exchange Commission Chairman Gary Gensler on Monday called for the imposition of tougher cyber rules to protect investors from hackers and other online fraudsters. Gensler said that the commission’s staff is currently studying ways to tighten oversight on various players in the financial sector, such as advisers, brokerage firms and publicly traded companies, […]
The Cybersecurity and Infrastructure Security Agency plans to update its zero trust maturity model to help agencies meet the White House’s cybersecurity goals, an official said. Grant Dasher, an identity and access management expert at CISA, advised agencies to continue adopting cybersecurity measures as they wait for the release of the update, FCW reported Tuesday. […]
The Cybersecurity and Infrastructure Security Agency is working to increase the visibility of threats to networks across the federal government through its Continuous Diagnostics and Mitigation Program. Richard Grabowski, program manager for the effort, said work has been expanded to cover vulnerability detection and response in compliance with President Joe Biden’s cybersecurity executive order in […]
Jeff Dalton, the newly appointed chairman of the Cybersecurity Maturity Model Certification-Accreditation Body, said the organization’s board must be restructured to become a more professional group of strategic advisers. Dalton said in an interview with FedScoop that for the restructured CMMC-AB, members must be trained on ethics and professional board member guidelines from the National […]
The Cybersecurity and Infrastructure Security Agency has added 17 new entries to its list of actively exploited cyber vulnerabilities. CISA’s Known Exploited Vulnerabilities Catalog includes software flaws that have previously been abused and are required to be patched by federal civilian agencies, Bleeping Computer reported. The agency published the catalog’s first entries on Nov. 3, […]
Richard Glick, the commissioner of the Federal Energy Regulatory Commission, said during a hearing on Wednesday that he is supporting a piece of legislation that would create an organization within the Department of Energy that would oversee pipeline cybersecurity. The legislation was proposed by Rep. Bobby Rush, chairman of the energy panel at the House […]
President Joe Biden signed a national security memorandum granting the National Security Agency the power to order concerned agencies to implement updates and other remedial measures to national security systems through binding operational directives patterned after those currently being employed by the Cybersecurity and Infrastructure Security Agency, Nextgov reported Wednesday. Through the memo, Biden called […]
Sens. Gary Peters, chairman of the Senate Homeland Security and Governmental Affairs Committee, and John Cornyn have proposed legislation seeking to improve the commercial satellite sector’s access to cybersecurity resources. The Satellite Cybersecurity Act would direct the Cybersecurity and Infrastructure Security Agency to develop recommendations for satellite companies on how to best protect their systems. […]
The Government Accountability Office has released its report on the SolarWinds and Microsoft Exchange incidents, describing how federal agencies reacted to the two high-profile cybersecurity incidents that affected the U.S. government. The congressional watchdog found that federal agencies took several steps to coordinate and respond to the incidents, including forming two Cyber Unified Coordination Groups, […]
The Federal Bureau of Investigation is warning individuals about malicious quick response codes that cybercriminals are using to steal victims’ login and financial credentials. According to the notice posted on the Internet Crime Complaint Center, bad actors would replace original digital and physical QR codes with tampered ones that would take unknowing users to phishing […]
