The Cybersecurity and Infrastructure Security Agency has announced a project focused on developing a capacity-building tool that will guide countries in forming or enhancing public-private partnerships to support their fight against ransomware. CISA, the U.S. Department of State, the Spanish Ministry of the Interior and the Global Forum on Cyber Expertise will work together to […]
The Cybersecurity and Infrastructure Security Agency has released a set of documents to guide agencies and organizations in their software vulnerability remediation processes. Eric Goldstein, executive assistant director of CISA, said in a blog post that a Stakeholder Specific Vulnerability Categorization should be used to decide which vulnerabilities should be prioritized. According to Goldstein, CISA […]
Anne Neuberger, the Biden administration’s deputy national security adviser for cyber and emerging technologies, urged attendees at a Thursday NATO meeting in Rome to step up cybersecurity efforts. She called for the ability to provide direct support in the event of an attack against a member country, CyberScoop reported. Neuberger cited NATO’s response to an […]
The Department of Defense will release its zero trust strategy in the coming days following approval from the department’s chief information officer. The strategy will outline the Pentagon’s approach to achieving zero trust, which includes over 100 activities and key elements that are designed to keep data secure. Some of the focus areas are automation, […]
The National Institute of Standards and Technology is planning to publish new guidance for the water and wastewater systems sector to improve its cybersecurity posture. NIST is currently seeking industry insights to help form the cybersecurity reference architecture called the NIST SP 1800 series practice guide. Water sector leaders previously called for enhanced oversight efforts, […]
The Office of Sen. Mark Warner has released a cybersecurity policy options paper outlining steps the Department of Health and Human Services can take to address vulnerabilities in the health care sector. Warner pointed out a lack of coordination between HHS and the Cybersecurity and Infrastructure Security Agency in the last two years, which have […]
Amy Hamilton, a senior cybersecurity adviser at the Department of Energy, said at an FCW event on Nov. 2 that she hopes the Cybersecurity and Infrastructure Security Agency will create a central repository for software bills of materials, which are itemized program component lists. She explained that a hub would reduce the legwork for federal […]
Idaho National Laboratory will seek feedback from industry on the use of cyber-informed engineering as part of its future action plan aimed at securing the energy sector from cyberattacks. The Department of Energy national lab managed by Battelle Energy Alliance is developing the action plan with the National Institute of Standards and Technology based on […]
The Department of the Treasury said financial institutions across the U.S. processed nearly $1.2 billion in ransomware payments in 2021, representing a nearly 200 percent on-year increase. According to a report from the Financial Crimes Enforcement Network, a bureau within the Treasury Department, the sharp increase indicates that ransomware remains a significant threat to businesses […]
The U.S. Army Cyber Command has awarded Fairfax, Virginia-based company ECS a five-year, $430 million recompete contract for Army Endpoint Security Solution support. Under the contract, ECS will continue providing managed service operations and continue developing enhanced functionality for AESS 2.0. The company will also expand the system’s endpoint detection and response capabilities and create […]
