The Department of Homeland Security has warned critical infrastructure operators against actors using artificial intelligence to disrupt operations. According to the annual Homeland Threat Assessment report, state-backed hackers are using AI to infiltrate services and influence the United States’ election process and to develop faster, more efficient and more evasive malware for large-scale attacks. The […]
The National Security Agency and its federal agency partners have released a joint cybersecurity information sheet on how deepfake technology could present cybersecurity risks for the Department of Defense, defense industrial base organizations and national security systems. According to NSA applied research mathematician Candice Rockell Gerstner, cyber actors use deepfake to manipulate authentic media easily, […]
The Cybersecurity and Infrastructure Security Agency has released a new roadmap for securing open-source software in the government. From fiscal years 2024 to 2026, the agency aims to establish its role in the effort, improve its understanding of OSS usage and risks, address such risks and harden the broader ecosystem. Eric Goldstein, CISA’s executive assistant […]
The U.S. Army has awarded Leidos company Dynetics a $124.7 million contract to support Survivability and Resiliency Exercises, where the capability of soldiers and critical weapon systems to operate amid cyber electromagnetic activities is assessed and tested. Jonathan Pettus, senior vice president and operations manager for aerospace, defense and civil operations at Dynetics, said the […]
The Department of Health and Human Services has increased threat information sharing with federal agencies, scientific research institutions, medical device manufacturers and other organizations for improved cyber incident prevention. Speaking at the Billington Cybersecurity Summit, Karl Mathias, chief information officer for HHS, said the agency has enhanced information sharing in recent years through its Health […]
John Sherman, the Department of Defense’s chief information officer and a 2023 Wash100 winner, said his organization will soon evaluate military and internal zero trust strategies to ensure compliance with 2027 targets. He told attendees at the Billington Cybersecurity Summit on Thursday that the various DOD components and service branches are expected to submit plans […]
A group of senators has introduced the Small Business Cyber Resiliency Act, which seeks the creation of a government unit to protect small businesses from cyber threats. The bill will establish the Central Small Business Cybersecurity Unit within the Small Business Administration. The unit will create a public repository of cybersecurity resources for small businesses; […]
The Cybersecurity and Infrastructure Security Agency has added extended internet-of-things solutions provider NetRise to the Continuous Diagnostics and Mitigation Program‘s Approved Product List. NetRise’s automated platform provides XIoT users enhanced visibility and protects organizations from firmware-based attacks and threats through continuous risk monitoring and identification. The platform also generates a software bill of materials, performs […]
The Cybersecurity and Infrastructure Security Agency is working to integrate access management capabilities into its Continuous Diagnostics and Mitigation program to further strengthen the cyber defenses of federal agencies. CDM is currently focused on mitigating vulnerabilities and cyber incidents in federal systems, including the recent exploitation of a structured query language injection vulnerability in Progress […]
Carahsoft Technology has signed an agreement to serve as a public sector distributor of Semperis’ identity threat detection and response platform. The solution’s contracts will be made available through Carahsoft’s resellers and the National Association of State Procurement Officials’ ValuePoint, National Cooperative Purchasing Alliance and OMNIA Partners. The partnership with Carahsoft dovetails with the expansion […]
