Tysons, Virginia-based Aeyon has announced that it won a U.S. Marine Corps contract for cybersecurity support services. Aeyon will work with partners Spry Methods, Black & Rossi and Zen Strategics to enhance the Marine Corps’ digital capabilities, internal controls and cybersecurity posture. Aeyon’s cybersecurity and IT teams will also use advanced technologies and best practices […]
The Cybersecurity and Infrastructure Security Agency has released a new report co-developed with the National Security Agency focused on the need to incorporate secure-by-design principles for software. The “NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Configurations” report provides guidance software manufacturers should follow to avoid software misconfigurations that can lead to […]
A panel of the cross-sector working group Enduring Security Framework has published a report detailing ways multifactor authentication and single sign-on technology vendors can address challenges in their offerings. The report’s authors observed that increased multi-computer use has led to the emergence of potential access management and identity verification exploits, the National Security Agency said […]
The Department of the Treasury has invited industry to provide input on a draft blanket purchase agreement for a multiple-award program to acquire enterprise-wide cybersecurity services. Vendors for the Providing Treasury Enterprise Cybersecurity Technology and Services program are expected to deliver architecture, engineering and management services to the security operations centers within internal bureaus and […]
Denmark is contributing $2.8 million to the U.S. Agency for International Development’s program, Cybersecurity for Critical Infrastructure in Ukraine, the U.S. and the Danish governments announced on Monday. Following Russia’s Ukraine invasion, USAID launched the program as a four-year activity in May 2020, with an initial $38 million in funding to strengthen and protect Ukraine’s […]
The Food and Drug Administration will reject applications seeking a substantive review of connected medical devices if the products fail to meet the agency’s cybersecurity guidelines. New rules implemented on Sunday under Section 524B of the recently amended Food, Drug, and Cosmetic Act directs medical equipment manufacturers to ensure that products connected to the internet, […]
Security data solution Singularity DataLake is now available to federal agencies via SentinelOne’s Federal Risk and Authorization Management Program Authorized platform, the company announced on Tuesday. SentinelOne, a Mountain View, California-based cybersecurity company, launched Singularity DataLake in April, describing it as a “one-of-its-kind” cloud-native solution providing a comprehensive look into data across security ecosystems. The […]
The Cybersecurity and Infrastructure Security Agency has added the OASIS Common Security Advisory Framework version 2.0 standard to its advisories for industrial control systems, operational technologies and medical devices. According to the agency, OASIS CSAF “supports the creation, update and interoperable exchange of security advisories as structured information on products, vulnerabilities and the status of […]
The Cybersecurity and Infrastructure Security Agency and the UK National Cyber Security Centre recently held a strategic dialogue where participants from eight countries discussed ways to support high-risk community cyber resilience. During the Strategic Dialogue on Cybersecurity of Civil Society Under Threat of Transnational Repression, participants affirmed their commitment to protect communities at risk of […]
The National Security Agency has urged all agencies operating national security systems to implement an automated acceptance test process as part of their supply chain risk management strategy to ensure newly procured devices are safe and secure. According to the NSA’s new cybersecurity information sheet, titled “Procurement and Acceptance Testing Guide for Servers, Laptops, and […]
