The Cybersecurity and Infrastructure Security Agency has identified three vulnerabilities in IBM and Mitel software products that have been utilized by hackers. It has added the exploits to the Known Exploited Vulnerabilities Catalog, a list of common vulnerabilities and exposures that pose a danger to federal government systems. Version 4.4.2 Patch Level 1 of IBM […]
The Defense Information Systems Agency has rolled out the Thunderdome zero trust security and network architecture program to various locations, including in the Pacific and the Pentagon. Booz Allen Hamilton developed the prototype under a $6.8 million contract awarded in January 2022. Speaking at a recent FCW and Nextgov workshop, DISA Deputy Director Chris Barnhurst […]
Dylan Presman, the director for budget and assessment at the Office of the National Cyber Director, said that the upcoming national cybersecurity strategy will contain post-quantum cryptography guidelines that “take a strong stand” as the public and private sectors start to transition away from standard encryption. Speaking at an Advanced Technology Academic Research Center event, […]
The U.S. Navy is planning to create cyber-specific roles in response to a fiscal 2023 National Defense Authorization Act provision requiring the service to establish new positions focused on cyber operations. Speaking at WEST 2023, a conference co-hosted by AFCEA International and the U.S. Naval Institute, Vice Adm. Kelly Aeschbach, commander of Naval Information Forces, […]
The Cybersecurity and Infrastructure Security Agency has added a cyber vulnerability to its Known Exploited Vulnerabilities Catalog. The Cacti Command Injection Vulnerability allows unauthenticated users to execute arbitrary code on a server that runs the Cacti open-source platform. Specifically, it allows hackers to retrieve the client’s internet protocol address by bypassing authentication processes. The vulnerability […]
The U.S. Air Force has awarded Telos a two-year, $32.5 million contract extension to provide mission defense teams support for weapon systems and mission areas that fall under Air Combat Command defensive cyber operations. DCOs are meant to protect data, networks, related technologies and the ability to use them. Telos’ efforts will fall under the WhiteSpace […]
The Government Accountability Office has published a new report urging federal agencies to step up efforts to protect the privacy of sensitive data. The government watchdog conducted a review of 24 agencies in September 2022 and found that most of them established processes to identify types of personal data collected, performed privacy impact assessments and […]
The Tampa, Florida-based nonprofit organization SOFWERX has awarded Rebellion Defense a contract to expand the use of the Rebellion Nova software. SOFWERX will use Nova to identify network vulnerabilities that could significantly impact warfighter capabilities before adversaries can exploit them. The software uses automated adversary emulsion and vulnerability prioritization to identify critical lapses. The contract […]
Rep. Mike Gallagher is considering the establishment of an independent cyber military service after the idea was raised at a House Armed Services Committee hearing on Feb 9. Speaking to the press after the meeting, he expressed concerns about the potential for “more bureaucracy” and said that he would favor an approach built around an efficient […]
State and local governments are starting to receive funds from a four-year, $1 billion Department of Homeland Security grant program aimed at strengthening defense and response capabilities against threats to information systems. Tribal administrations are also set to receive support under a separate program, for which the funding notice is still being crafted. In all, […]
