NSA, CISA Issue Baseboard Management Controller Cybersecurity Guidance

The National Security Agency and the Cybersecurity and Infrastructure Security Agency have released the “Harden Baseboard Management Controllers” cybersecurity information sheet to help baseboard management controllers protect their systems from cyberthreats. According to the agencies, BMCs are prone to a variety of cyberthreats, including security solutions shutdown, data manipulation and malware infection. The damage could […]
Posted on by Lawrence Carter

Russian Cybercriminals Attack US Federal Government Agencies, Private Companies

Multiple federal agencies including the Department of Energy and various private companies and organizations have reported breaches in an ongoing global cyberattack by Russian cybercriminals. The Cybersecurity and Infrastructure Security Agency said the cybercriminals have exploited a vulnerability in MOVEit, a managed file transfer software used worldwide to provide visibility and control over file transfer […]
Posted on by

Department of Agriculture Awards $70M Cybersecurity Contract to Alpha Omega, Dynamo Technologies

The U.S. Department of Agriculture Office of the Chief Information Officer and Information Security Center Program and Security Management has awarded Alpha Omega Integration and Dynamo Technologies a $70 million contract. David Flynn, vice president of strategic accounts at Alpha Omega, said the collaboration will further strengthen USDA’s security operations. The five-year contract mandates the […]
Posted on by

CISA Requires Federal Civilian Agencies to Secure Network Devices Exposed to Public Internet

The Cybersecurity and Infrastructure Security Agency has ordered federal civilian agencies to secure their networked management interfaces exposed to the public-facing internet. In a recently issued binding operational directive, CISA called on the agencies to remove the devices that can be managed remotely via the public internet from their networks. Such devices include routers, switches, […]
Posted on by Lauren Grey

CISA Director: US Can Adopt Ukraine’s Cyber Threat Information-Sharing Model

The director of the Cybersecurity and Infrastructure Security Agency said Ukraine’s information-sharing model is a good example of how United States operators should exchange adversarial threat details. According to 2023 Wash100 awardee Jen Easterly, Ukrainian officials were quick to share information about Russian cyber operations in Ukraine and potential threats to U.S. targets. Easterly said […]
Posted on by Lawrence Carter

CISA, FBI: Ransomware Gang Exploiting Managed File Transfer Solution Vulnerability to Steal Data

The Cybersecurity and Infrastructure Security Agency and the FBI have warned that the CL0P ransomware gang is exploiting a structured query language injection vulnerability in Progress Software’s MOVEit Transfer online applications. CISA and the FBI published a joint cybersecurity advisory to inform organizations about CL0P’s tactics, techniques and procedures and indicators of compromise to help […]
Posted on by Lauren Grey

QuSecure Awarded US Army SBIR Phase II Contract for Quantum Tech R&D

The U.S. Army has awarded post-quantum security solutions provider QuSecure a potential Small Business Innovation Research Phase II Federal Government contract to continue research and development efforts for quantum-resilient software solutions. Under the SBIR contract, QuSecure will develop encryption technologies and solutions that would benefit Army users. The company will also identify how quantum technologies […]
Posted on by Lawrence Carter