President Biden’s latest cybersecurity-themed executive order issued today aims to engineer security improvements in at least a dozen major areas, with Federal agency systems, cloud services, and software emerging as prominent topics on an exhaustive list of security policy items. […]

Increasing numbers of spyware firms are popping up around the globe and more nations are turning to their cyber tools, warned National Counterintelligence and Security Center (NCSC) Director Michael Casey.  […]

The National Institute of Science and Technology’s (NIST) National Cybersecurity Center of Excellence (NCCoE) is asking for feedback on an updated risk management framework draft that will steer the future of the agency’s ransomware prevention guidance.   […]

The Cybersecurity and Infrastructure Security Agency (CISA) has released a Jan. 10 report on adoption of the agency’s cross-sector cyber performance goals that finds four critical infrastructure sectors are seeing decreased cyber threats since putting the performance goals in place.   […]

The Intelligence and National Security Alliance (INSA) is calling on the incoming Trump administration to prioritize workforce development, cybersecurity, and the transformative impact of artificial intelligence (AI) technology within the Intelligence Community (IC). […]

Science fiction is no longer just fiction – it’s reality – as policymakers look to the Government Accountability Office (GAO) for advice on how to make brain-signal-powered computer chips ethical and safe. According to the watchdog, it’s going to require handing consumers control of their brain signal data and ramping up data privacy.  […]

National Cyber Director (NCD) Harry Coker used a Jan. 7 farewell address prior to the new Trump administration taking office to recap his office’s work on range of security initiatives since 2021, and to urge the incoming administration and Congress to push over the finish line his office’s long-sought goal of achieving “harmonization” of Federal cybersecurity regulations. […]

The White House on Tuesday launched the long-awaited U.S. Cyber Trust Mark, a voluntary cybersecurity labeling program for wireless internet of things (IoT) devices marketed to consumers. […]

The Cybersecurity and Infrastructure Security Agency (CISA) today released cybersecurity performance goals that the agency said will help to protect the information technology and product design sectors from cyber threats.   […]

A bicameral pair of lawmakers is demanding answers from the Treasury Department following a China state-sponsored breach of some of the department’s sensitive systems. […]

The increasing use of artificial intelligence technology – both from security threat and protection improvement perspectives – are among the top look-ahead issues for 2025 among officials with providers of security technologies to the Federal government. […]

A bipartisan pair of senators is asking the Department of Homeland Security (DHS) for more information on the agency’s efforts to protect Global Positioning System (GPS) technologies from foreign threats to their operation.   […]

The Department of Homeland Security (DHS) is gearing up to release a new white paper on how the Federal government can improve collaboration with industry to bolster the security of the subsea cable network, according to DHS Assistant Secretary for Trade and Economic Security Christa Brzozowski. […]

The Cybersecurity and Infrastructure Security Agency (CISA) released guidance today to protect “highly targeted” individuals – senior government and political officials – against the cyber espionage activity of Salt Typhoon. […]

While the Pentagon continues to build its cybersecurity capabilities, not everyone within the agency’s departments is prioritizing meeting cybersecurity standards, said David McKeown, the Department of Defense’s (DoD) senior information security officer and deputy chief information officer, on Friday.     […]

The Cybersecurity and Infrastructure Security Agency (CISA) today unveiled a draft update of its National Cyber Incident Response Plan (NCIRP), which was first published in 2016, and is seeking public comment on the draft through mid-January.   […]

More than 87 percent of all cyber threats took place over encrypted networks this year, a new Zscaler ThreatLabz report finds. The solution, the cybersecurity company says, lies in adopting zero trust security architectures. […]

Several agencies aren’t as secure as they need to be after missing deadlines to meet Internet of Things (IoT) cybersecurity requirements, the Government Accountability Office (GAO) revealed.   […]

The Department of Energy (DoE) needs to invest in and implement enterprise-wide data analytics capabilities in order to better identify and mitigate risk, according to a new report from the DoE Office of Inspector General (OIG). […]

A pair of bipartisan senators is pushing for the investigation of the Defense Department’s (DoD) “failure to secure its unclassified telephone communications from foreign espionage,” according to a letter sent Wednesday to DoD Inspector General Robert Storch. […]

The General Services Administration’s (GSA) Acquisition Policy Federal Advisory Committee (GAP FAC) held its first meeting today after tapping 14 new members and turning to new areas of focus including artificial intelligence, cloud computing, and cybersecurity.   […]

More than 80 percent of the most severe tech-related vulnerabilities to critical infrastructure originate from the same 20 software components, a new report out this week from Fortress Information Security finds. […]

Cybersecurity and Infrastructure Security Agency (CISA) Deputy Director Nitin Natarajan is urging critical infrastructure sectors to “elevate the discussion” of the growing risks of legacy operational technology (OT) systems. […]

The Cybersecurity and Infrastructure Security Agency (CISA) published guidance today that provides best practices to protect against cyberattacks by Salt Typhoon – a People’s Republic of China (PRC)-affiliated threat actor that has compromised networks of major global telecommunications providers. […]

As cyberattacks continue to target hospitals and other healthcare organizations, the Department of Health and Human Services (HHS) is failing to meet some of its bigger-picture cybersecurity goals for the sector, the Government Accountability Office (GAO) said in a Nov. 13 report.  […]

Through its notable sophistication, Salt Typhoon has cemented its status as one of the most advanced cyber-espionage groups in history – a new report reveals the tactics behind its success.  […]

As the number of successful cyberattacks on healthcare organizations continues to rise, a new report from the Department of Health and Human Services (HHS) Office of Inspector General (OIG) is calling on HHS to better ensure the protection of electronic protected health information (ePHI). […]

A report out this month by the Environmental Protection Agency’s (EPA) Inspector General (IG) finds that drinking water systems serving approximately 26.6 million people have critical or high-risk cybersecurity vulnerabilities. […]

What’s in store for Federal cybersecurity policy when the Trump administration takes charge in January? Illumio’s Gary Barlet told us in an exclusive interview that he is looking for much of the current bedrock of cybersecurity policy to carry forward, but with an accelerated timeline for action and greater accountability for results. […]

A new bipartisan bill from Sens. Bill Cassidy, R-La., Maggie Hassan, D-N.H., John Cornyn, R-Texas, and Mark Warner, D-Va., is aiming to bolster cybersecurity in the healthcare sector and safeguard Americans’ health data. […]