Neutralizing China’s Advanced Persistent Threat Listed Among CISA’s 2024 JCDC Priorities, Deputy Director Says

The Cybersecurity and Infrastructure Security Agency’s 2024 Joint Cyber Defense Collaborative priorities include defending against advanced persistent threats, particularly countering the cyberattacks of groups linked with China.  Clayton Romans, CISA associate director, wrote in a blog post that the agency’s focus on APT campaigns supports the JCDC’s efforts to thwart threats targeting critical U.S. infrastructures. […]
Posted on by Arthur McMiler

CGI Federal: Atlassian Confluence Vulnerability Caused GAO Breach

CGI Federal said the data breach that affected the Government Accountability Office was caused by a vulnerability in the Atlassian Confluence suite. According to Mercedes Marx, a spokesperson for CGI, the Cybersecurity and Infrastructure Security Agency singled out the Atlassian Confluence vulnerability in October. The company said it took immediate remediation upon receiving CISA’s warning […]
Posted on by Lawrence Carter

Threat Intelligence Provider OpenText Named to CISA-Led Consortium

Threat intelligence company OpenText has announced its entry into the Joint Cyber Defense Collaborative, a public-private group founded by the Cybersecurity and Infrastructure Security Agency. The JCDC is tasked with strengthening the cybersecurity posture of the United States and its international allies, OpenText said. The group aims to protect the government’s sensitive data by promoting […]
Posted on by Noah Lowell

Marine Corps Grants AttackIQ Platform Continuous Authority to Operate Designation

The U.S. Marine Corps Recruiting Command has granted breach and attack simulation solutions provider AttackIQ a continuous authorization to operate, enabling the command to support continuous active penetration testing. Thurman Dubberly, deputy chief information officer at MCRC, said the partnership with AttackIQ will enable the command to provide near-real-time answers to whether an organization is […]
Posted on by Brianne Monterey

National Cyber Director Discusses Plans to Hold Software Makers Accountable for Flawed Code

National Cyber Director Harry Coker has revealed that his office is developing liability regimes to hold software makers responsible for flawed code. He told attendees of a recent Information Technology Industry Council conference that the Office of the National Cyber Director aims to figure out software measurability issues that make it difficult to understand code quality, The Record reported. Another […]
Posted on by Noah Lowell

CISA, Allies Issue Guidance on China-Sponsored Volt Typhoon Hacker Group

The Cybersecurity and Infrastructure Security Agency, the National Security Agency, the FBI and domestic and international agencies have released a joint cybersecurity advisory on Volt Typhoon, a China-backed hacker group found to have attacked U.S. critical infrastructure. Volt Typhoon has compromised communications, energy, transportation and water and wastewater entities, CISA said Wednesday. According to the agency, data […]
Posted on by Noah Lowell

CISA Could Improve Coordination With Other Agencies, Government Officials Say

Government officials said the Cybersecurity and Infrastructure Security Agency could enhance its network security support for other agencies. Speaking at a Center for Strategic and International Studies-hosted event, Jeff Spaeth, deputy chief information officer at the Department of Veterans Affairs, said CISA could improve the speed at which it notifies agencies about new vulnerabilities in a vendor’s […]
Posted on by Lawrence Carter

VA CISO: Federal Agencies Must Include Cybersecurity in Tech Modernization Contracts

The Department of Veterans Affairs’s deputy chief information security officer said cyber resilience should be one of the priorities federal agencies consider when modernizing systems. Speaking at a Center for Strategic and International Studies-hosted event, Amber Pearson shared that several agencies still use outdated systems and need to look at which areas should be prioritized […]
Posted on by Lawrence Carter