National Security Agency Director Paul Nakasone, a five-time Wash100 winner, has pushed back against using the agency’s surveillance tools within the United States. He made his statement in response to some lawmakers’ claims that the perpetrators of the SolarWinds hack took advantage of laws barring unwarranted surveillance within the United States, Nextgov reported Thursday. “My […]
Brandon Wales, acting director of the Cybersecurity and Infrastructure Security Agency, described the list of victims of the SolarWinds Orion hack as “solidified” and said that no other victim companies are likely to emerge. Wales made the remarks at an online forum hosted by the McCrary Institute at Auburn University in Alabama. While Wales did […]
The FBI has reported an increase in the number of business email compromise attacks targeted at state, local, tribal and territorial government entities. From 2018 through 2020, cybercriminals increasingly targeted victims using spoofed emails, phishing attacks, compromised vendor accounts and credential harvesting for financial gain, the FBI said in a Private Industry Notification report. The […]
The Biden administration will soon roll out new security standards for its information technology vendors, according to a senior cybersecurity official. Brandon Wales, director of the Cybersecurity and Infrastructure Security Agency, hinted at provisions related to software development standards, particularly for products likely to have increased privileges inside networks, Nextgov reported Tuesday. According to Wales, […]
The Cybersecurity and Infrastructure Security Agency has introduced a new threat detection tool for on-premise environments. The CISA Hunt and Incident Response Program tool is built to find indicators of compromise linked to the exploitation of vulnerabilities in SolarWinds Orion products and threat activity in Microsoft Cloud environments. Security researchers and CISA warned that many […]
Cybersecurity services provider Steel Root has entered into a partnership agreement with Zscaler, a company that offers cloud-based security services, to assist defense contractors in preparing for the Cybersecurity Maturation Model Certification program. According to Steel Root and Zscaler, in the next five years, about 300,000 companies within the defense industrial base will need to […]
The Department of Energy’s national cybersecurity plans do not fully address risks to the U.S. grid’s distribution systems, which carry electricity from transmission systems to consumers, according to the Government Accountability Office. Distribution systems are becoming more vulnerable to cyber attacks partly because of their increasing reliance on industrial control systems that allow remote access […]
The Department of Energy’s Office of Cybersecurity, Energy Security and Emergency Response has announced three new research programs aimed at enhancing the cyber and physical security of the U.S. energy system. The projects will help address supply chain vulnerabilities, protect critical infrastructure from interference and build a talent pipeline for next-generation cybersecurity, the Department of […]
The Cybersecurity and Infrastructure Security Agency might struggle to identify and respond to cybersecurity incidents until it fully implements its organization plan, the Government Accountability Office said in a report. GAO said CISA has so far finished two of the three phases of its plan, and that only a third of the final phase has […]
Members of the Senate Homeland Security and Government Affairs Committee pressed a panel of leading government cybersecurity officials for accountability over the recent SolarWinds Orion hack. The panel consisted of Brandon Wales, acting director of the Cybersecurity and Infrastructure Security Agency; Chris DeRusha, the federal chief information security officer; and Tonya Ugoretz, a senior cybersecurity […]
