The U.S.-China Economic and Security Review Commission’s 2022 report to Congress recommended conducting a review of the activities performed by Chinese companies in the U.S. critical sectors where the entities are found to have benefited from “cyber-enabled intelligence collection or theft of intellectual property” sponsored by China. The USCC also urged the Biden administration to […]
The Government Accountability Office said the Department of Defense needs to take additional steps to ensure that cyber incidents are properly reported and shared. According to a GAO report, the Pentagon has not yet fully implemented its processes for managing cyber incidents, does not have complete data on reports and does not document whether it […]
An official from the Defense Advanced Research Projects Agency said using emerging technologies and risk mitigation can create a better, more resilient digital infrastructure at the national level. Kathleen Fisher, the director of DARPA’s Information Innovation Office, said during a President’s Council of Advisors on Science and Technology meeting that one experiment involving its Rapid […]
The National Security Agency has published guidance that can help software developers and operators prevent and mitigate software memory safety issues. According to the Software Memory Safety Cybersecurity Information Sheet, hackers can exploit poor memory management issues to access sensitive information, execute unauthorized code, crash programs and compromise memory settings. The guidance also noted that […]
The Department of Defense Cyber Crime Center said the DOD-Defense Industrial Base Collaborative Information Sharing Environment has onboarded its 1000th voluntary partner into the DIB Cybersecurity Program. The public-private cybersecurity partnership began in 2008 with just 16 cleared defense contractors to allow threat sharing at both unclassified and classified levels. As part of the collaboration, […]
The Cybersecurity and Infrastructure Security Agency has announced a project focused on developing a capacity-building tool that will guide countries in forming or enhancing public-private partnerships to support their fight against ransomware. CISA, the U.S. Department of State, the Spanish Ministry of the Interior and the Global Forum on Cyber Expertise will work together to […]
The Cybersecurity and Infrastructure Security Agency has released a set of documents to guide agencies and organizations in their software vulnerability remediation processes. Eric Goldstein, executive assistant director of CISA, said in a blog post that a Stakeholder Specific Vulnerability Categorization should be used to decide which vulnerabilities should be prioritized. According to Goldstein, CISA […]
Anne Neuberger, the Biden administration’s deputy national security adviser for cyber and emerging technologies, urged attendees at a Thursday NATO meeting in Rome to step up cybersecurity efforts. She called for the ability to provide direct support in the event of an attack against a member country, CyberScoop reported. Neuberger cited NATO’s response to an […]
The Department of Defense will release its zero trust strategy in the coming days following approval from the department’s chief information officer. The strategy will outline the Pentagon’s approach to achieving zero trust, which includes over 100 activities and key elements that are designed to keep data secure. Some of the focus areas are automation, […]
The National Institute of Standards and Technology is planning to publish new guidance for the water and wastewater systems sector to improve its cybersecurity posture. NIST is currently seeking industry insights to help form the cybersecurity reference architecture called the NIST SP 1800 series practice guide. Water sector leaders previously called for enhanced oversight efforts, […]
