Federal agencies face a Sept. 19 remediation deadline for a maximum-severity authentication bypass that can give remote attackers root-level access. […]

The new guidance offers federal agencies and cloud providers recommendations to protect identity and access tokens from theft, forgery, and misuse. […]

CISA is ramping up staffing and 24/7 support for the new service as officials look to expand governmentwide cyber visibility and give agencies a lower-cost path to modern SIEM capabilities. […]

Andersen said CISA must focus limited resources on the nation’s most consequential cyber risks as the agency moves to rebuild its depleted workforce. […]

Lawmakers say reductions at the cybersecurity agency raise concerns about its ability to protect federal networks and critical infrastructure and respond to evolving threats. […]

Federal agencies warn AI-assisted hacking tools are lowering barriers to attacks on industrial control systems used across critical infrastructure. […]

CISA’s new resources outline eight cybersecurity objectives to help K-12 schools and districts strengthen their defenses against growing cyber threats. […]

Cyber agencies warn that Gunra ransomware affiliates are exploiting internet-facing vulnerabilities to steal and encrypt data across critical infrastructure sectors. […]

CISA is warning water utilities to secure internet-exposed systems after recent cyberattacks disrupted operations in multiple states. […]

The bipartisan, bicameral bill would give CISA new tools and funding to help K-12 schools prevent, track, and respond to cyberattacks. […]

After a contractor exposed sensitive credentials in a public GitHub repository earlier this year, CISA is outlining how it responded and the security changes it says are needed to prevent similar incidents. […]

The regulation would require critical infrastructure entities to report major cyber incidents and ransomware payments to the federal cyber defense agency under a 2022 law. […]

The Homeland Security secretary told lawmakers CISA plans to hire about 600 employees after the Senate confirms a new director. […]

The new guidance aims to help federal civilian agencies move beyond perimeter-based security models and use TIC 3.0 flexibilities to advance zero trust adoption. […]

Warner wants CISA to detail staffing losses, regional vacancies, and cybersecurity service impacts amid workforce reductions and proposed budget cuts. […]

CISA’s new directive sets tiered remediation timelines for federal agencies, including a three-day deadline for the highest-risk vulnerabilities. […]

Program manager Matt House says the agency has completed efforts to help federal agencies deploy endpoint detection and response tools, marking a key milestone for the CDM Program. […]

Acting Director Nick Andersen said CISA is accelerating hiring, with 180 tentative offers expected by month’s end and hundreds of new employees slated to join the agency. […]

The agency plans to unveil federal AI platform access, binding operational directives, and broader cybersecurity reforms following this week’s AI executive order. […]

CISA will hold virtual town hall meetings June 15-18 to gather stakeholder feedback on proposed CIRCIA rules requiring critical infrastructure operators to report cyber incidents within 72 hours and ransomware payments within 24 hours. […]

CISA is exploring a new intergovernmental working group to help government and industry jointly address evolving cyber risks to critical infrastructure. […]

CISA is expanding its vulnerability disclosure efforts with a new online submission tool designed to accelerate reporting of known exploited cyber flaws. […]

Lawmakers warn that cuts to CISA could leave critical infrastructure and local governments exposed as AI-powered cyber threats become faster and harder to stop. […]

A contractor reportedly exposed CISA and DHS credentials on a public GitHub repository. The lapse comes amid internal upheaval at CISA and threats against U.S. critical infrastructure. […]

The Cybersecurity and Infrastructure Security Agency (CISA) and a coalition of international partners on May 1 released new guidance urging organizations to take a “careful” approach to adopting agentic artificial intelligence (AI) technologies, and outlining cybersecurity risks and safeguards for deployment.   […]

The Cybersecurity and Infrastructure Security Agency (CISA) launched CI Fortify, an initiative to help critical infrastructure owners and operators maintain essential services during large-scale cyberattacks and geopolitical crises.  […]

The White House officially withdrew the ill-fated nomination for Sean Plankey to become director of the Cybersecurity and Infrastructure Security Agency (CISA) on Monday.   […]

The Cybersecurity and Infrastructure Security Agency (CISA) instructed federal government agencies today to take further actions to identify FIRESTARTER malware that may be present in their systems and to take mitigation actions. […]

In the latest warning about the cybersecurity threat posed by China, U.S. officials are advising cyber defenders on how to combat what they call a major shift in tactics by Beijing-affiliated groups. […]

The Cybersecurity and Infrastructure Security Agency (CISA) is legally prohibited from carrying out core activities such as stakeholder outreach during the ongoing Department of Homeland Security (DHS) shutdown, even as cyber threats from nation-state actors persist, a top agency official told lawmakers Thursday. […]