Cyber experts from the government and the private sector said zero trust has become the gold standard for cybersecurity and will go a long way to protecting organizations. They cautioned, however, that it is not a “silver bullet” for tackling threats, telling chief information officers that they should not be lulled into complacency, GovernmentCIO reported […]
Democratic and Republican senators want to know more about the roles and responsibilities that the Department of Homeland Security and Department of Transportation have in detecting, preventing and responding to transportation system cyber threats. The lawmakers wrote a letter on Jan. 3 asking how the agencies are handling risk management and assessment, sector coordination, security […]
Cyberattacks have become a significant threat to the maritime critical infrastructure and the U.S. Coast Guard must come to terms with their inevitability. A ranking USCG officer told lawmakers that the maritime critical infrastructure faces “very substantial threats” on a daily basis, adding that the traditional prevention and response framework currently in use may not […]
The Federal Trade Commission warned companies on Tuesday that they could face legal consequences if they fail to remediate the Log4j vulnerability. According to the FTC, technology companies and their vendors should take all necessary steps to mitigate the damage from Log4Shell and avoid potential harm to consumers. The agency pointed out that damages can […]
The Cybersecurity and Infrastructure Security Agency has recruited a total of 37 professionals for its state cybersecurity coordinators program as of the end of December, with five positions already going through selection processing, a top agency official said. The program was established pursuant to the fiscal year 2021 defense policy bill. Coordinators across the 50-state […]
The Cybersecurity Maturity Model Certification Accreditation Body has advised defense contractors not to hold off on pursuing CMMC accreditation once audits become available. CMMC-AB CEO Matthew Travis said that companies should seek certification even before it becomes a requirement in defense contracts, National Defense Magazine reported Tuesday. “You can think of a lot of different […]
The Cyberspace Solarium Commission, a government body that was established in 2019 and expired in mid-December 2021, plans to continue its national security work as a nonprofit organization. Rep. Mike Gallagher, co-chair of the CSC, told reporters that he is “cautiously optimistic” that “Solarium 2.0” will make progress in 2022, FCW reported. “All the low-hanging […]
The Cybersecurity and Infrastructure Security Agency has warned manufacturing organizations that they are more likely to be targeted by hackers during the pandemic. In a new CISA Insights report, the agency said that critical industrial control systems in the sector are especially vulnerable due to their increasing shift to remote-based management. The industry’s reaction to […]
Nick Marinos, a director of information technology and cybersecurity at the Government Accountability Office, said U.S. federal cyber strategies still leaves a lot to be desired even after decades of attempts dating back to the Clinton administration. Speaking at a Government Executive-hosted event, Marinos stressed that while there have been previous efforts at coalescing some […]
The Cybersecurity and Infrastructure Security Agency saw swift response from federal information technology and cybersecurity leaders amid the emergence of the Apache Log4j vulnerability. A CISA official told Federal News Network that CISA was pleased with the urgency shown by the federal government since the onset, adding that the agency hosted multiple calls with chief […]
