CISA Seeking Potential Contractors Capable of Providing Threat Intelligence Enterprise Services

The Cybersecurity and Infrastructure Security Agency is conducting market research to identify potential contractors that can provide threat intelligence enterprise services to support the agency in improving its cyber threat intelligence capabilities. CISA is looking for vendors that can develop or configure a cyber threat intelligence exchange platform and provide integration to customized CISA applications […]
Posted on by Lauren Grey

State Department OIG Highlights Shortcomings in Information Security Efforts

The Department of State’s internal watchdog has identified security flaws in its information security program across eight different metrics, including risk management, identity and access management, data protection and privacy, continuous monitoring and contingency planning. According to the Office of the Inspector General, the weaknesses indicate that the agency has yet to fully develop and […]
Posted on by Noah Lowell

FDA Unveils Cybersecurity Modernization Action Plan Focused on Implementing Zero Trust Model

The Food and Drug Administration has released an action plan focused on improving the agency’s cyber defense capabilities using technological advances. Under the Cybersecurity Modernization Action Plan, the FDA aims to implement the zero trust cybersecurity approach to protect sensitive data and systems from cyberattacks. The Office of Information Security is in charge of coordinating […]
Posted on by Lauren Grey

CISA, FBI: Iran-Sponsored Actors Exploit Log4j Vulnerability in Federal Agency Network

A new joint cybersecurity advisory from the Cybersecurity and Infrastructure Security Agency and the FBI revealed that hackers sponsored by the Iranian government exploited a Log4Shell vulnerability in an unpatched VMware Horizon server of an undisclosed federal civilian executive branch organization. The Log4Shell vulnerability is a software flaw of open-source logging library Log4j. The infiltrators […]
Posted on by Lauren Grey

GAO Report: Interior Department Bureau Falls Short on Offshore Oil Rig Cybersecurity

The Government Accountability Office said a bureau within the Department of the Interior has done little to address cybersecurity risks across offshore oil and gas facilities. According to a GAO report concerning the DOI’s Bureau of Safety and Environmental Enforcement, which oversees over 1,600 offshore oil and gas facilities, a cyberattack on the offshore sites […]
Posted on by Lawrence Carter

Justice Department Official Speaks on Efforts to Help Ransomware Victims

Eun Young Choi, director of the Department of Justice’s National Cryptocurrency Enforcement Team, said at an Aspen Institute event Wednesday that her office is increasingly successful at helping victims of ransomware attacks. She explained that the team now has over 150 digital asset investigators and coordinators working to address illegal crypto-related activities and that work […]
Posted on by Noah Lowell

Sentar to Offer Idaho National Laboratory’s Cybersecurity Methodology for Operational Technology

Sentar will use the Consequence-driven Cyber-informed Engineering methodology patented by the Department of Energy’s Idaho National Laboratory to secure operational technology. CCE is meant to assist federal agencies with meeting cyber threat detection requirements established by the 2022 National Defense Authorization Act, the company said. To safeguard critical infrastructure, the proprietary risk management framework applies […]
Posted on by Noah Lowell