The Cybersecurity and Infrastructure Security Agency has signed a memorandum of understanding with the nonprofit organization Women in CyberSecurity to collaborate on efforts to attract more women to cyber roles. CISA is expected to join WiCys’ mentorship program to pair experienced women in cybersecurity with those new to the field. Jen Easterly, director of CISA […]
The Department of Defense wants to allow its cybersecurity employees to transition in and out of the department to improve their skill sets. The Pentagon’s 2023-2027 cyber workforce strategy focuses on collaborative workforce efforts between the government, private and academic institutions and foreign allies. It also calls on the DOD to prioritize exposure engagements, such […]
A new bill is seeking to establish a $10 million grant program to help small clean water and wastewater utilities better defend their systems from cyberattacks. The federal funding would be used to subsidize the fees associated with joining the Water Information Sharing and Analysis Center, a nonprofit organization comprising water and wastewater utility managers […]
A vulnerability in Xtream has been added to the Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities Catalog. XStream contains a remote code execution vulnerability that an attacker can exploit to execute a local command on the server by manipulating the processed input stream and replacing or injecting objects. VMware Cloud Foundation, which uses the […]
Cyber deception company Acalvio Technologies has partnered with Carahsoft Technology to make its solutions available to the public sector. Carahsoft would offer Acalvio’s Active Defense Platform and ShadowPlex Advanced Threat Defense solutions through its reseller partners, the NASA Solutions for Enterprise-Wide Procurement V, the IT Enterprise Solutions-Software 2, the National Cooperative Purchasing Alliance and other […]
U.S. Army Gen. Paul Nakasone, the commander of U.S. Cyber Command, said his organization has gotten better at responding to threats posed by foreign adversarial actors but it needs to continuously improve to maintain readiness and resilience. According to Nakasone, U.S. adversaries are looking for new methods to compromise U.S. systems and steal critical information. […]
The Administration for Strategic Preparedness and Response within the Department of Health and Human Services has released a road map for the health care sector to implement the National Institute for Standards and Technology’s Cybersecurity Framework. ASPR developed the Cybersecurity Framework Implementation Guide in partnership with the private sector and government agencies in view of […]
The National Institute of Standards and Technology has launched a new cybersecurity community of interest program for U.S. small businesses. The program would improve collaboration between the NIST and small businesses that provide cybersecurity services. According to Deputy Commerce Secretary Don Graves, the program would highlight small business needs, capabilities and how they could support […]
The National Center for Advancing Translational Sciences within the National Institutes of Health is conducting market research to identify small businesses that can provide cybersecurity services to secure data, including protected health information, personally identifiable information, and proprietary and procurement data. NCATS intends to award an indefinite-delivery/indefinite-quantity contract with a one-year base period and two […]
The Transportation Security Administration has announced an emergency amendment to airport and aircraft operator security programs to address persistent threats to U.S. critical infrastructure. Entities regulated by TSA are tasked with devising an implementation plan outlining measures to improve cyber resilience and prevent system disruption and degradation. Such measures include the enactment of network segmentation […]
