A new cybersecurity advisory from the Federal government’s top cybersecurity watchdogs says that Russian state-sponsored hackers have compromised numerous defense industrial base (DIB) contractors both large and small over the past two years, and warns about the extensive bag of tricks that those hackers use when they target defense contractors. […]

After reviewing the cyberattack trends from 2021, the Cybersecurity and Infrastructure Security Agency (CISA) issued a joint advisory with the FBI and other international security partners warning of the rising global threat of ransomware and gave mitigation and remediation advice. […]

The FBI has released a public service announcement (PSA) to warm the public about cybercriminals using Quick Response (QR) codes to steal financial information. […]

The Cybersecurity Infrastructure Security Agency (CISA), National Security Agency (NSA), and FBI are warning critical infrastructure owners and operators of Russian threats to domestic critical infrastructure. […]

The FBI’s email system was hacked, sending emails to thousands of recipients about a fake cyberattack, the agency confirmed over the weekend. The law enforcement agency said the cause of the hack has since been remediated. […]

The Federal Bureau of Investigation (FBI) issued a report detailing security compromises associated with Ranzy Locker ransomware, which has targeted victims in the U.S. since late 2020. […]

The Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) released a joint cyber advisory Oct. 14 warning of an ongoing cyber threat to U.S. Water and Wastewater Systems (WWS) facilities and gave the WWS sector recommended mitigations. […]

The House Oversight and Reform Committee is seeking a briefing on how the FBI handled the ransomware attack on Kaseya that affected up to 1,500 businesses worldwide, according to a letter today from the committee leadership to FBI Director Christopher Wray. […]

Today, the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI published a cybersecurity advisory, warning public and private sector organizations to stay vigilant for ransomware attacks ahead of the Labor Day holiday weekend. […]

As the number of cyberattacks continues to rise, Federal experts say information sharing between the private and public sectors is critical when it comes to defending against cyber threats. However, experts are warning agencies that they need to start getting more specific on their information sharing needs if they want to achieve “a joint end-state” with industry. […]

White House national security staff took the Biden administration’s strategic thinking on ransomware prevention to the local government mayors this week, as administration advisors continued to work through a long list of policy items aimed at curbing the attacks and making them less profitable. […]

The White House and key Federal agencies have been working since July 2 to assist in the response to the Kaseya ransomware attack, as President Biden gets set to meet this week with an interagency group taking a longer look at the ransomware problem. […]

The FBI is looking to issue a five-year indefinite delivery, indefinite quantity (IDIQ) award for a contractor to support the Office of the CIO in enhancing its enterprise systems, tools, and services to advance its mission. […]

The FBI is in search of a contractor that will offer technical expertise and personnel to support the agency’s data centers and key sites of IT operations, according to a June 7 request for information (RFI). […]

The Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the FBI are looking into last week’s spear-phishing campaign targeting the United States Agency for International Development (USAID), and have not found any “significant impact” to Federal agencies, according to a May 28 joint statement. […]

The United States and the United Kingdom have issued a joint cyber advisory on Russian Foreign Intelligence Service (SVR) tactics, techniques, and procedures. […]

As promised in President Biden’s executive order today that sanctions the Russian government for the SolarWinds Orion cyberattack and other transgressions, U.S. intelligence and law enforcement agencies published a list of five active Russian Foreign Intelligence Service cyberattack vectors that they say need network operators to defend against urgently. […]

Following a joint cybersecurity advisory warning of potential vulnerabilities in Fortinet’s cybersecurity operating system from the Federal Bureau of Investigation (FBI) and the Department of Homeland Security’s (DHS) Cybersecurity Infrastructure and Security Agency (CISA), the company is urging customers to update their software to include the latest patches. […]

Focusing on diversity and inclusion in the cybersecurity space is “paramount” to protecting the United States against cyber risks, female cyber leaders said April 6 during the Women Leaders in Cybersecurity Webinar hosted by the Cybersecurity and Infrastructure Security Agency (CISA). […]

The FBI and the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) are warning about advanced persistent threat (APT) actors exploiting a Fortinet vulnerability to gain access to government and other networks, according to an April 2 joint advisory. […]

Sen. Mark Warner, D-Va., chairman of the Senate Intelligence Committee, is asking the FBI and the Environmental Protection Agency (EPA) to provide more information on the recent attempt by cyber criminals to poison the water supply at an Oldsmar, Fla. water treatment facility. […]

What’s the biggest lesson to be learned from the recent thwarting of an attempt by cyber criminals to poison the water supply in Oldsmar, Fla.?

According to the Cybersecurity and Infrastructure Security Agency (CISA), the hackers likely took advantage of an outdated operating system to gain access, and the agency said “continuing to use any operating system within an enterprise beyond the end of life status may provide cyber criminals access into computer systems.” […]

Sens. Mark Warner, D-Va., chairman of the Senate Intelligence Committee, and Marco Rubio, R-Fla., the committee’s ranking member, are urging the Biden administration to “assign a clear leader” to lead the United States’ response to the Russia-backed hack of thousands of government and private-sector networks via SolarWinds Orion products. […]

Federal law enforcement and intelligence agencies said today they believe that “fewer than ten” Federal agencies have been targeted by “follow-on” activity after initial breaches in the Russia-directed hacking of government networks via SolarWinds Orion products. […]

Malicious actors are targeting K-12 schools with a strong increase in ransomware attacks and other cyber threats, according to a Joint Cybersecurity Advisory released December 10 by the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC). […]

State-sponsored hackers targeted cybersecurity firm FireEye in a recent cyberattack, company CEO Kevin Mandia disclosed in a Dec. 8 statement. The company said it is coordinating with the Federal Bureau of Investigation (FBI) in its investigation of the attack. […]

The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Oct. 2 to help the public recognize and avoid spoofed election-related internet domains and email accounts during the 2020 election year. […]

The FBI’s Boston Division has issued guidance to help the general public guard against foreign influence and disinformation campaigns in advance of the 2020 election. […]

Data from a Federal agency has been stolen in a cyber theft, according to an analysis report released Sept. 24 by the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency. The specific agency, timeframe of the intrusion, and thief are not identified in the report. […]

The FBI in conjunction with the Cybersecurity and Infrastructure Security Agency issued a public service announcement to raise awareness about the potential for disinformation around the results of the elections, especially in the period after voting has occurred. […]