The National Security Agency and the Department of Homeland Security’s cyber arm on Tuesday jointly published guidelines for securing virtual private network devices, along with a warning to users that foreign government-backed hackers are actively exploiting vulnerabilities in such networks. The advisory comes alongside the NSA’s repeated warnings about Chinese hackers who are out to […]
The U.S. Coast Guard has opened its first director commissioning program to recruit specialists for the military branch’s cyber command. The subject matter experts that will be hired will focus on cyberspace operations, cybersecurity, information assurance and cyber threat intelligence. Coast Guard Cyber Command chief Michael Ryan said the initial program rollout will start with […]
The National Institute of Standards and Technology and the Department of Homeland Security have jointly developed preliminary performance goals for the cybersecurity of critical infrastructure control systems. NIST and the Cybersecurity and Infrastructure Security Agency identified nine categories of cybersecurity practices that will serve as the foundation of the performance goals. The guidance is expected […]
The Department of Commerce published a Federal Register notice on Friday seeking industry feedback on how to implement rules to prevent the exploitation of infrastructure-as-a-service products for malicious cyber activity. Comments are due within 30 days of the notice’s publication date, Nextgov reported. In the document, the Commerce Department took note of how foreign actors […]
The National Institute of Standards and Technology, through its National Cybersecurity Center of Excellence, has selected a group of technology firms as partners for a Cooperative Research and Development Agreement in line with its zero trust architecture vision. Amazon Web Services, Appgate, Cisco, F5 Networks, FireEye, Forescout, IBM, Ivanti, Lookout, McAfee, Microsoft, Okta, Palo Alto […]
The Cybersecurity and Infrastructure Security Agency and the FBI have issued a joint alert over the increasing prevalence of a certain ransomware-as-a-service model. The Conti ransomware saw increased use in more than 400 attacks on U.S. and international organizations, including health care and first responder networks, CISA and the FBI said Wednesday. To mitigate the […]
Cybersecurity and Infrastructure Security Agency Director Jen Easterly and National Cyber Director Chris Inglis backed a bill introduced by Sens. Gary Peters and Rob Portman that requires critical infrastructure operators to report internal cyber breaches to CISA within the first 72 hours of detection. Speaking at a Sept. 23 Senate hearing, Easterly described incident reporting […]
The National Institute of Standards and Technology has selected integrated endpoint-to-cloud security company Lookout to be one of the National Cybersecurity Center of Excellence’s partners for the Implementing a Zero Trust Architecture project. An organization using zero trust assumes that no user or endpoint is trustworthy. Zero trust design users also assess their risk posture […]
Datacenter and cloud computing security company Illumino has received a new Small Business Innovation Research contract from the U.S. Air Force Research Laboratory. The contract will cover the second phase of a project that seeks to adopt Illumio Core, a solution designed for vulnerability mapping, automated security policy creation and enforcement. The phase two SBIR […]
Appgate, a provider of secure access solutions, announced plans to make its zero trust network access solution available as a service for government customers. Appgate SDP is an enterprise-grade solution that uses zero trust principles to ensure that users can securely connect to resources they are explicitly authorized to access, Appgate said Tuesday. Barry Field, […]
