The National Security Agency and the UK National Cyber Security Centre have issued a cybersecurity advisory warning organizations about Russian spear-phishing techniques. The CSA focuses on how Russia’s Star Blizzard hacking group uses spear-phishing to illegally access various kinds of information, including those owned by the defense sector, national governments, non-government organizations and academia. The […]
The FBI has detailed the steps by which companies can ask for a delay in reporting cybersecurity incidents that the Securities and Exchange Commission requires effective Dec. 18. Under the SEC rule, companies have to report cyber issues to the commission in 8-K filings within four business days after the incident, unless the U.S. attorney […]
Carahsoft Technology has announced that it will distribute runZero’s cyber asset attack surface management solutions to the public sector under a new partnership. Government organizations can access the products through reseller partners and contract vehicles such as NASA Solutions for Enterprise-Wide Procurement V and Information Technology Enterprise Solutions – Software 2, Carahsoft said. RunZero’s solutions […]
The Department of Health and Human Services is working to fortify the health care sector’s cybersecurity. On Wednesday, the department released a concept paper detailing its cybersecurity strategy for the industry. Based on the Biden administration’s National Cybersecurity Strategy, the plan provides four pillars for actions, including collaborating with Congress to develop a support system […]
The National Security Agency, in partnership with the Cybersecurity and Infrastructure Security Agency and international agencies, released a cybersecurity information sheet focused on eliminating memory safety vulnerabilities from software products. The CSI, titled “The Case for Memory Safe Roadmaps,” includes technical and non-technical factors software manufacturers should consider when developing memory-safe code integration plans. Recommendations […]
The Moonlighter imaging satellite that NASA and SpaceX launched in June served as the platform for the U.S. Space Force Cyber Guardians’ cyber defense training exercise from Nov. 14 to 17. Dubbed Moonlighter after its sandbox, the training also focused on the Guardians’ cyber offense capabilities, dividing the participants into an offensive Red Team and […]
The Office of Management and Budget has instructed federal agencies to each produce internet of things inventories by the end of fiscal year 2024. The directive is part of a Federal Information Security Modernization Act implementation memo released Monday by OMB Director Shalanda Young, Nextgov/FCW reported Tuesday. According to the OMB, properly evaluating cybersecurity risks to missions and operations requires […]
The U.S. Naval Information Warfare Center Atlantic hosted a cybersecurity exercise for Navy reservists. During the four-day Gibson Castle 23 exercise, over 50 Naval Information Warfare Systems Command Reserve Program Cybersecurity Pillar reserves were trained on operational and tactical strategies for real-world cyber breaches. Specifically, the trainees learned how to coordinate with other agencies and […]
A bipartisan bill has been filed in Congress mandating the Cybersecurity and Infrastructure Security Agency to establish cybersecurity apprenticeship and the Department of Veterans Affairs to launch a veterans’ cybersecurity training program. Reps. Mike Gallagher, R-Wi., and Chrissy Houlahan, D-Pa., introduced the Federal Cybersecurity Workforce Expansion Act on Thursday, which has a companion bill in the […]
Nathaniel Fick, the Department of State’s ambassador at large for cyberspace and digital policy, called for digital development efforts to consider international security during the first Global Conference on Cyber Capacity Building, which took place in Ghana from Nov. 29 to 30. Organized by the government of Ghana, the World Bank, the World Economic Forum […]
