House-Approved FY2023 Defense Policy Bill Features Provision on Cybersecurity Reporting for Critical Infrastructure

The House of Representatives has approved the $839 billion Fiscal 2023 National Defense Authorization Act, which has provisions for a new program focused on enhanced cybersecurity reporting for critical infrastructure. The cybersecurity provision will require critical infrastructure operators to implement strong security standards and share threat intelligence with the government. In doing so, the operators […]
Posted on by Lawrence Carter

FTC Official Says Companies Must Establish ‘Reasonable’ Cybersecurity to Avoid Legal Action

A ranking Federal Trade Commission official said that companies are expected to have “reasonable” cybersecurity mechanisms in place to quickly spot and fend off attackers who may try to exploit known vulnerabilities. James Trilling, a senior attorney for the commission’s Division of Privacy and Identity Protection, issued this statement following a steep fine imposed on […]
Posted on by Michael Hill

NIST Showcases Platform for Testing Cybersecurity Solutions for Machine Learning Products

The National Institute of Standards and Technology has showcased the first iteration of Dioptra, a testbed that addresses cybersecurity matters aimed at machine learning algorithms. Dioptra allows researchers to find the best solution to defend against various cyber threats. According to Harold Booth, the project leader of the National Vulnerability Database at NIST, the testbed […]
Posted on by Lawrence Carter

NSA Posts Cybersecurity Technical Report on DOD’s Customizable Microelectronics

The National Security Agency has published a cybersecurity technical report characterizing the Department of Defense’s approach to protecting its custom microelectronics components. Authored by the NSA’s Joint Federated Assurance Center, the document discusses three levels of protection for configurable devices, including application-specific integrated circuits and field-programmable gate arrays. A device’s level of hardware assurance is […]
Posted on by Robert Johnson

US Government Deploys QuSecure Solution to Perform Post-Quantum Encryption Communication

Post-quantum cybersecurity company QuSecure is supporting the U.S. government’s efforts to perform the world’s first post-quantum encryption communication over a government network. The government is using QuProtect, an end-to-end, software-based PCQ solution that is designed to protect encrypted communications data through quantum secure channels. The solution is used on legacy systems at a combined U.S. […]
Posted on by Lawrence Carter

DHS Seeking Solutions to Patch Up Vulnerabilities in Critical Infrastructure Software

The Department of Homeland Security’s Science and Technology Directorate announced that it has partnered with the Cybersecurity and Infrastructure Security Agency to patch up known vulnerabilities in software used in critical infrastructure systems. Towards this end, a solicitation has been issued by the DHS seeking solutions to help secure the digital frameworks that people and […]
Posted on by Michael Hill

Langevin Proposes More Protections for Critical Infrastructure Owners, Operators

Rhode Island Rep. Jim Langevin is proposing to amend the annual defense policy legislation to include more cyber protections for the country’s most critical infrastructure. The proposed amendment uses language to link critical infrastructure to “national critical functions,” and recognizes that any disruption of such would have a debilitating effect on national security, the economy […]
Posted on by Michael Hill