Cybersecurity officials and executives have issued warnings about a critical vulnerability in an Apache logging framework that could let an attacker remotely take control of a system. The Cybersecurity and Infrastructure Security Agency said the flaw affects versions 2.0-beta9 to 2.14.1 of the Log4j framework, an open-source, Java-based logging tool used for enterprise applications and […]
The National Institute of Standards and Technology is preparing to update its federal cybersecurity policy through a request for information that is expected to be issued in early 2022. Kevin Stine, chief of the applied cybersecurity division at NIST’s Information Technology Laboratory, said during an agency meeting that officials want to update the Cybersecurity Framework […]
The Government Accountability Office said in a new report that the Department of Defense failed to develop plans for an effective pilot phase of the Cybersecurity Maturity Model Certification program and that it left out industry on key implementation details. According to the report, the DOD’s plans to assess portions of the five-year CMMC implementation […]
CACI International announced that it has signed a memorandum of understanding with Yubico establishing the latter company as the exclusive provider of multi-factor authentication solutions in support of the former firm’s trusted mobile platforms. Under the deal, Palo Alto-based Yubico will provide its YubiKey 5 FIPS Series products for enhanced security and authentication protocols, CACI […]
Virtu, a data protection company, has launched a tool designed to help federal agencies securely share data with their components and partners. Agencies can use Virtu Secure File Collaboration to automate data-centric encryption and implement access controls on existing apps and tagging tools, Virtu said Monday. Will Ackerly, co-founder and chief technology officer of Virtu, […]
The Office of Management and Budget issued a memorandum on Monday reminding agencies to apply President Joe Biden‘s cybersecurity executive order to the Federal Information Security Modernization Act data compliance reporting. New guidance from OMB requires organizations to incorporate multifactor authentication and data encryption requirements into FISMA reporting. It also sets the groundwork that would […]
ASRC Federal Netcentric has been selected by the Pentagon to support the Defense Manpower Data Center Cybersecurity Support Services contract for the Defense Human Resources Activity. The five-year, $133 million contract aims to deliver cybersecurity services to support the entire DHRA in its mission to provide personnel data management and analysis for the Department of Defense […]
The Cybersecurity and Infrastructure Security Agency is finishing up several guidance documents that would help organizations transition to a zero trust environment. John Simms, deputy branch chief of CISA’s Cybersecurity Assurance Branch, said during an ATARC panel event that there is a necessary shift from a network-centric way of approaching cybersecurity and visibility. He shared […]
Matthew Travis, CEO of the Cybersecurity Maturity Model Certification Accreditation Body, is aiming for an early 2022 launch of the interim and voluntary phase of CMMC 2.0. The Department of Defense’s revamped cybersecurity program is currently under a reboot and it could take between nine and 24 months to get up and running once the […]
The U.S. Cyber Command wants to upgrade the training component of its Joint Cyber Warfighting Architecture, a suite of weapons designed for cyberspace operations. The Persistent Cyber Training Environment is one of JCWA’s six components, the others being joint cyber command and control, sensors, a unified platform, tools and access, National Defense Magazine reported. Coast […]
