Defense industrial base companies could spend roughly $4 billion over 20 years to implement the Cybersecurity Maturity Model Certification 2.0 program, according to new Pentagon estimates. A proposed rule published in the Federal Register Tuesday would oblige contractors and subcontractors handling federal contract information and controlled unclassified information to adopt certain cybersecurity standards depending on […]
U.S. Coast Guard officials said the service needs to invest in data management to get the most out of zero trust. Speaking at the Eastern Defense Summit earlier in December, Capt. Andrew Campen, engineering service division lead official at the Coast Guard Command, Control, Communication, Computer, Cyber and Intelligence Service Center, said understanding and protecting […]
Microsoft’s Threat Intelligence team announced that it has discovered the Iranian cyber espionage group APT33 deploying the new FalseFont malware on the U.S. defense industrial base. The new malware provides a multi-function backdoor for remote access, deploying files and sending information to the malicious operators’ command-and-control servers, the Microsoft team said. According to the team’s […]
The Department of Defense’s Office of the Chief Information Officer has proposed a rule for the Cybersecurity Maturity Model Certification program that would require defense contractors and subcontractors to apply existing security measures to federal contract information. The rule would also set new controlled unclassified information security requirements for some priority programs, according to a notice posted in […]
U.S. Navy Reserve sailors are participating in the second iteration of Operation Cyber Dragon, an initiative by the U.S. Fleet Cyber Command and the U.S. 10th Fleet to teach reservists to pinpoint and remediate unclassified, front-facing network vulnerabilities. Participants have so far worked on network or asset misconfigurations, certificate issues and patch management, the Navy […]
The Cybersecurity and Infrastructure Security Agency is soliciting feedback on secure by design guidance it released in 2023 to inform future updates. A new request for information contains questions about implementing security early into the software development lifecycle, integrating cybersecurity into computer science education and facilitating efforts to address recurring vulnerabilities, CISA said Wednesday. Titled […]
The Cybersecurity and Infrastructure Security Agency has released the final version of its Microsoft 365 configuration baselines alongside a new tool to support baseline implementation. The Secure Configurations for Microsoft 365 Version 1.0 builds on hundreds of comments CISA solicited in October and pilots conducted to identify advanced cloud security practices and test the baseline […]
U.S. senators voted unanimously on Tuesday to confirm President Joe Biden’s appointment of Air Force Lt. Gen. Timothy Haugh as head of the U.S. Cyber Command and the National Security Agency. Haugh will succeed Army Gen. Paul Nakasone, who was CYBERCOM head and NSA director for almost six years. Before his confirmation, Haugh acted as […]
The National Science Foundation has awarded six academic institutions a total of $16 million in funding for cybersecurity training and cyber workforce improvements. Through the CyberCorps Scholarships for Service grants, the awardees will invest in artificial intelligence, machine learning, hardware security and other cybersecurity-related fields. The scholarships are designed to train the next generation of […]
Reston, Virginia-based Electrosoft has announced that it has secured a position on a potential five-year, $400 million blanket purchase agreement to operate, maintain and upgrade the Department of Health and Human Services‘ identity and access management program’s systems. HHS can access consulting, program management, smart card management and other services through the Homeland Security Presidential […]
