The House Appropriations Subcommittee on Homeland Security has approved a bill that would provide the Cybersecurity and Infrastructure Security Agency $2.42 billion in funding for fiscal year 2022. The proposed CISA budget is $397.4 million higher than FY 2021’s, a 16 percent bump. Rep. Lucille Roybal-Allard, chairwoman of the appropriations subcommittee, said the bill, which […]
The Navy and Marine Corps should be prepared to defend against cybersecurity threats on the same scale as the SolarWinds attack, according to a top cybersecurity official in the military. Army Gen. Paul Nakasone, head of U.S. Cyber Command and a five-time Wash100 winner, said the growing sophistication of enemy hackers has increased the number […]
The Cybersecurity and Infrastructure Security Agency has logged the first entries in its list of “bad” cybersecurity practices for critical infrastructure operators. CISA warned organizations against using unsupported or end-of-life software for critical infrastructure and national critical functions. Operators should also avoid using known passwords and credentials, especially in internet-accessible technologies, CISA said. The Department […]
The Department of Defense said it will work to ensure that small businesses would not be burdened by costs brought about by the Cybersecurity Maturity Model Certification audit. According to a DOD spokesperson, an internal review is underway to minimize accreditation costs for small enterprises while keeping the integrity of the cybersecurity requirements. Most small […]
The cybersecurity executive order President Joe Biden signed in May includes an effort that seeks to exert more control over the content of codes entering government systems and public infrastructure. The National Institute of Standards and Technology completed the first deliverable in the EO on June 25, when it released a document defining “critical software,” […]
The Department of Defense’s Cyber Crime Center is conducting a pilot program showcasing a new service offering to inform contractors of the state of their overall defense against cyberattacks. The Krystal Ball pilot, which underwent a soft launch in February, aims to use publicly available information and threat intelligence to give companies insight into their […]
The government needs to enact new laws forcing companies to replace older software and computers that carry easily fixable vulnerabilities, according to one cybersecurity official. Rob Joyce, head of the National Security Agency’s Cybersecurity Directorate, said Americans need to pay their “historical tech debt” before smaller-scale hackers get their hands on more advanced technology, Nextgov […]
The Senate was unable to confirm a new director for the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency before the chamber went on a two-week recess, starting June 24. The Senate’s failure drew criticism from cybersecurity leaders who stressed the position’s importance. On April 12, President Joe Biden announced Jen Easterly as his […]
Law enforcement agencies should work more closely with ransomware victims on investigations, according to FBI Director Chris Wray. While Wray did not offer policy recommendations, he said the government cannot defeat ransomware without immediate and transparent cooperation from the private sector, FCW reported Wednesday. “Anything that helps provide more incentive for that to happen, I […]
The Cybersecurity Maturity Model Certification Accreditation Body has granted Smithers Information Security Services certified third-party assessment organization candidate status. The designation puts Smithers one step closer to performing assessments on defense contractors seeking compliance with the CMMC. Final C3PAO status is given by the CMMC-AB to organizations that have secured clearance from the Defense Contract […]
