U.S. federal security agencies, including the FBI, are ramping up their efforts to counter cyber threats without solely resorting to criminal indictments, according to an official from the bureau. Bryan Vorndran, deputy assistant director of the FBI’s Criminal Investigative Division, said the agency is more now more prudent in timing its indictments and in deciding […]
The Federal Bureau of Investigation wants to be among the first agencies to be notified in the event of a major cyber breach, and it wants that to be explicitly stipulated in the law. Late in 2021, the House hurriedly passed incident reporting legislation that requires affected organizations to report cyber incidents to the Cybersecurity […]
The chairwoman of the Federal Communications Commission wants to amend the agency’s rules on telecommunications companies’ duty to notify customers and government authorities about data breaches. FCC Chair Jessica Rosenworcel circulated a notice of proposed rulemaking to align the commission’s breach disclosure policy with recent developments in state and federal legislation, the FCC said Wednesday. […]
The U.S. Cyber Command posted over a dozen malware samples to the VirusTotal website on Wednesday to inform organizations about potential Iranian cyberattacks. USCYBERCOM said in a statement that the samples represent open-source tools that Iranian actors use around the world. The list refers to MuddyWater, a label for suspected Iranian government hacking activities that […]
The FBI, the Cybersecurity and Infrastructure Security Agency and the National Security Agency have warned organizations about Russian cyber threats amid the ongoing tension at the Russia-Ukraine border. According to a joint advisory released on Tuesday, Russian state-sponsored advanced persistent threat actors use common attacks like spearphishing and vulnerabilities exploitation to gain initial access to […]
The House Oversight and Reform Committee is seeking to reform the Federal Information Security Modernization Act to assign clear roles and responsibilities for federal cybersecurity leadership. The draft reform bill for FISMA was released on Tuesday. Committee Chairwoman Carolyn Maloney said during a hearing that reforming FISMA will ensure that intellectual property, sensitive data, essential […]
The National Institute of Standards and Technology has published updated guidance on the engineering and programming aspects of cybersecurity. In a document titled “Engineering Trustworthy Secure Systems,” NIST outlined engineering-driven ways to develop more defensible and survivable systems. Engineering-based solutions are critical for managing today’s complex systems such as cyber-physical systems and systems-of-systems, NIST said. […]
The Federal Bureau of Investigation has issued a warning about Eastern European cybercriminal group FIN7, which tried to hack U.S. transportation, defense and insurance companies by mailing fake letters. According to an FBI advisory, companies received fake snail mails that were processed by the U.S. Postal Service and courier service company UPS from August to […]
New Jersey-based Pivot Point Security, an information security advisory firm, announced the launch of its Federal Risk and Compliance “FedRisk” practice to help organizations doing business with federal agencies meet their unique and complex cybersecurity attestation and compliance requirements. FedRisk takes a targeted, “data first” approach that empowers clients to define and execute on their […]
U.S. Cyber Command has entered into partnerships with 84 universities across 34 states as part of an effort to expand the U.S. cybersecurity workforce. The Academic Engagement Network program will focus on supporting four lines of effort: future workforce, applied cyber research, applied analytics and strategic issues, CYBERCOM said. David Frederick, CYBERCOM executive director, said […]
