The deputy chief of the National Institute of Standards and Technology’s computer security division said the agency has been updating its software supply chain guidance to ensure that cyberthreats are kept at bay. In a Federal News Network interview, Jon Boyens shared that the NIST started focusing on the software aspect of supply chain risk […]
The Health Sector Cybersecurity Coordination Center within the Department of Health and Human Services has advised health organizations to patch their SolarWinds systems to address vulnerabilities in the Access Rights Manager software. SolarWinds has released security fixes for eight vulnerabilities, including three system issues deemed critical because they could enable hackers to perform remote code […]
The Cybersecurity and Infrastructure Security Agency has released a new logging management software to help organizations detect cyberthreats. The “Logging Made Easy” software is a Windows-based log management solution that allows users to use readily available data to detect and address threats more efficiently. It can be used to identify vetted protective monitoring capabilities, secure […]
Eric Goldstein, executive assistant director for cybersecurity at the Cybersecurity and Infrastructure Security Agency, has warned that a significant budget cut would impair his organization’s ability to monitor federal network risks. Testifying at a House Homeland Security cybersecurity and infrastructure protection subcommittee hearing, he added that malicious actors would “unequivocally exploit” gaps left by reduced […]
The Cybersecurity and Infrastructure Security Agency is looking to increase visibility across federal networks by expanding a “no-notice” penetration testing initiative known as Federal Attack Surface Testing. In the fiscal year 2021 defense budget, Congress authorized CISA to hunt cyberthreats on agency networks without prior approval, Federal News Network reported. Eric Goldstein, executive assistant director […]
The Cybersecurity and Infrastructure Security Agency and the Department of Health and Human Services have launched a new toolkit to help health care organizations protect their systems from cyber-enabled threats. The Cybersecurity Toolkit for Healthcare and Public Health consolidates several cybersecurity resources, including the CISA’s Cyber Hygiene Services and the HHS’s Health Industry Cybersecurity Practices […]
The Department of the Navy’s first principal cyber adviser, Chris Cleary, told DefenseScoop that his successor needs a longer term for more continuity in overseeing change, particularly on the civilian side of the service. Cleary’s three-year PCA tenure, which expires on Nov. 27, follows the 2020 Congress defense policy measure mandating the role’s creation to […]
U.S. Cyber Command will hold a cybersecurity event in the coming weeks to enhance its readiness to protect networks, data and critical infrastructure in support of the Joint Force commanders and interagency and international partners. The International Coordinated Cyber Security Activity will focus on defending the Department of Defense networks and systems from malware and […]
The workforce development nonprofit Cyber .org has secured $6.8 million from the Cybersecurity and Infrastructure Security Agency to support cyber career opportunities for elementary and high schoolers. Under the Cybersecurity Education and Training Assistance Program, the nonprofit will also encourage literacy and instruction initiatives to address a nationwide cyber workforce shortage, CISA said Monday. The […]
The National Security Agency has issued a new cybersecurity information sheet recommending ways to ensure that devices meet the security framework’s access criteria under the zero trust architecture. The CSI, titled Advancing Zero Trust Maturity Throughout the Device Pillar, guides federal agencies and their partner organizations in assessing their systems’ devices and equipping them with […]
