Ivanti has released a software update to resolve the recently disclosed zero-day authentication bypass vulnerability affecting the Pulse Connect Secure VPN software. The software update addresses a security flaw tracked as CVE-2021-22893, which cyber actors are currently exploiting to gain access to compromised devices. The patch is the only known solution to remediate the issue, […]
The U.S. Cyber Command is shifting the priorities of its Joint Task Force-Ares to combat today’s threats. The majority of JTF-Ares will shift its focus from conducting counterterrorism operations against the Islamic State group to battling nation-state actors. The move to shift the team’s focus comes amid nation-state actors’ increasing development of cyber and information-related […]
The Department of Defense has expanded its Vulnerability Disclosure Program and allowed white hat hackers to target all of the department’s publicly accessible information systems. Ethical hackers were originally limited to the Pentagon’s public-facing websites. They may now also research and report vulnerabilities related to frequency-based communication, the internet of things, industrial control systems and […]
The U.S. needs to upgrade the nuclear command, control and communications system that functions as the link between nuclear forces and presidential authority to get rid of cyber attacks, according to Sen. Angus King. On May 1, King, chairman of the Senate Armed Services Committee’s subcommittee on strategic forces, and a bipartisan group of senators […]
Mark Bowling, a former FBI agent, has been named ExtraHop’s new vice president of security response services. In a statement, Raja Mukerji, co-founder and chief customer officer at ExtraHop, touted Bowling’s expertise in managing cyber risk and security incident response. He believes that Bowling’s insights will be critical to the company’s expansion into the network […]
The Ransomware Task Force, a private-sector think tank made up of experts from various industries, has released a framework for how organizations may deal with ransomware attacks. The report, titled “Combating Ransomware: A Comprehensive Framework for Action,” provided 48 recommendations on matters such as cyber insurance, cryptocurrency and safe havens for threat actors, according to […]
The Cybersecurity and Infrastructure Security Agency is conducting pilot programs to aggregate cloud logs across multiple departments and agencies in an attempt to better monitor threat activity. Speaking at an FCW-hosted event, CISA Chief Technology Officer Brian Gattoni said the agency is experimenting with endpoint visibility capabilities, with the goal of closing visibility gaps in […]
The Missile Defense Agency has begun implementing a new approach to improving cyber system requirements while streamlining test planning, according to the Government Accountability Office. MDA officials said the new approach replaces the 17 planned cybersecurity operational assessments that it decided to cancel for fiscal year 2020. The new method needs to be fully implemented […]
The National Security Agency has released a cybersecurity advisory on ensuring the security of operational technology and enterprise networks. The document, titled “Stop Malicious Cyber Activity Against Connected Operational Technology,” is targeted at the Department of Defense, the defense industrial base and national security systems, NSA said Thursday. Operational technologies are programmable systems that interact […]
CACI International has been awarded a $447 million contract to provide process and mission technology to the National Security Agency. The single-award contract has a five-year period of performance. The technologies will support the agency’s signals intelligence and cybersecurity missions that government decision-makers rely on for actionable intelligence, including information used for protecting critical networks, […]
