The Cybersecurity and Infrastructure Security Agency (CISA) has released finalized versions of two Trusted Internet Connections (TIC) 3.0 use cases that Federal agencies can use to advance their security postures. […]

Following a joint cybersecurity advisory warning of potential vulnerabilities in Fortinet’s cybersecurity operating system from the Federal Bureau of Investigation (FBI) and the Department of Homeland Security’s (DHS) Cybersecurity Infrastructure and Security Agency (CISA), the company is urging customers to update their software to include the latest patches. […]

Focusing on diversity and inclusion in the cybersecurity space is “paramount” to protecting the United States against cyber risks, female cyber leaders said April 6 during the Women Leaders in Cybersecurity Webinar hosted by the Cybersecurity and Infrastructure Security Agency (CISA). […]

The FBI and the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) are warning about advanced persistent threat (APT) actors exploiting a Fortinet vulnerability to gain access to government and other networks, according to an April 2 joint advisory. […]

Back in December 2019, months before the COVID-19 pandemic hit, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) released a draft document of its Trusted Internet Connections (TIC) 3.0 guidance. […]

The Cybersecurity and Infrastructure Security Agency (CISA) is partnering with the Office of the Director of National Intelligence, the Department of Defense and other entities to recognize National Supply Chain Integrity Month and promote a call to action for strengthening global supply chains. […]

Department of Homeland Security (DHS) Secretary Alejandro Mayorkas on March 31 previewed six “sprints” planned by DHS and its Cybersecurity and Infrastructure Security Agency (CISA) component throughout 2021 to bolster Federal cybersecurity across a range of areas including ransomware, industrial control system (ICS) security, and workforce development. […]

The Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) has released supplemental directions to help agencies root out and mitigate vulnerabilities in their Microsoft Exchange on-premises products. […]

The Accreditation Body (AB) in charge of the Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC) program appointed Matthew Travis to serve as the body’s first CEO to oversee day-to-day operations and management. […]

The acting director of the Cybersecurity and Infrastructure Security Agency (CISA) told senators on March 18 that CISA is making efforts to complete deployment at Federal civilian agencies of the first two phases of the Continuous Diagnostics and Mitigation (CDM) program by the end of this year as part of a push to shore up Federal cybersecurity after the SolarWinds Orion hack. […]

Federal CISO Christopher DeRusha said today that new IT modernization and security funding streams stemming from the American Rescue Plan Act represent a “down payment” on extensive work that needs to be done to improve Federal agency network security. […]

The House Homeland Security Committee approved the DHS Industrial Control Systems Capabilities Enhancement Act of 2021 today. […]

Brandon Wales, acting director of the Cybersecurity and Information Security Agency (CISA) today defended the value of CISA’s EINSTEIN cyber defense program against criticism leveled by the ranking member of the Senate Homeland Security and Governmental Affairs Committee and suggested that the program be improved rather than scrapped. […]

Department of Homeland Security (DHS) Secretary Alejandro Mayorkas addressed a range of questions about the nation’s cybersecurity and spoke on how to better secure Federal networks in a March 17 House Homeland Security Committee hearing. […]

The White House said today the Federal government’s Unified Coordination Group (UCG) of intelligence and law enforcement agencies responding to the Microsoft Exchange hack now includes private sector firms. […]

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have released new guidance on selecting a Protective Domain Name System (PDNS) provider. […]

A bipartisan group of legislators introduced has the Department of Homeland Security (DHS) Industrial Control Systems Enhancement Act of 2021. The legislation will solidify the Cybersecurity & Infrastructure Security Agency’s (CISA) lead role in protecting critical infrastructure – particularly industrial control systems (ICS) – from cyber threats. […]

James Burd has taken over the role of Chief Privacy Officer (CPO) at the Cybersecurity and Infrastructure Security Agency (CISA). […]

The Cybersecurity and Infrastructure Security Agency (CISA) needs to update its milestones and fully implement its plans related to CISA Act of 2018 in order to provide more effective cybersecurity for the United States, the Federal government’s chief watchdog agency said. […]

In the wake of the recent SolarWinds and Microsoft Exchange hacks, the Cybersecurity and Infrastructure Security Agency (CISA) is emphasizing the need to shore up supply chain integrity, adopt a zero trust security concepts mindset, and direct more resources to best address vulnerabilities. […]

The House voted today to approve the Senate’s version of President Biden’s $1.9 trillion American Rescue Plan Act – and in the process release billions of new funding for Federal IT modernization and security improvements. […]

The Cybersecurity and Infrastructure Security Agency (CISA) announced that it will begin overseeing the .gov top-level domain (TLD) in April 2021, with a mandate to enhance security for the domain which is considered critical infrastructure. […]

The Cybersecurity and Infrastructure Security Agency (CISA) announced that it has awarded the Center for Infrastructure Assurance and Security (CIAS) at The University of Texas at San Antonio a $1.2 million grant to launch a pilot program to help state, local, tribal, and territorial governments identify high value assets (HVA) in order to prioritize resources and planning. […]

The Senate voted March 6 to approve the $1.9 trillion American Rescue Plan Act after a lengthy amendment and debate process that pushed the vote into the weekend. […]

The Cybersecurity and Infrastructure Security Agency (CISA) on March 3 issued an emergency directive to Federal civilian agencies to patch a critical vulnerability in Microsoft Exchange on-premises products.  The agency said that cloud services such as Microsoft 365 and Azure systems “are not known to be affected by this vulnerability.” […]

The Technology Modernization Fund (TMF) would get a $1 billion funding increase in President Biden’s $1.9 trillion American Rescue Act, according to a preliminary draft of the Senate version of the legislation obtained from sources by MeriTalk. The Senate will debate its version of the legislation this week. […]

Department of Homeland Security (DHS) Secretary Alejandro Mayorkas announced today that DHS will increase the required minimum spend on cybersecurity through the Federal Emergency Management Agency (FEMA) grant awards from 5 percent to 7.5 percent – approximately a $25 million increase across the country. […]

The Cybersecurity and Infrastructure Security Agency (CISA) named Matt Hartman the deputy executive assistant director of cybersecurity at the agency this month, confirmed by Hartman’s LinkedIn profile. […]

While it’s no secret that the healthcare sector became a major target for ransomware attacks during the COVID-19 pandemic, former Cybersecurity and Infrastructure Security Agency (CISA) Director Chris Krebs is shedding new light on the tone of CISA’s efforts to bite back against health-sector threats. […]

The Cybersecurity and Infrastructure Security Agency (CISA) has unveiled three key leadership appointments including the agency’s deputy director, and two covering hot-button security posts. […]