A bipartisan initiative embedded in the fiscal year 2024 National Defense Authorization Act aims to address cybersecurity shortcomings within the nation’s nuclear weapons systems. Introduced by Reps. Salud Carbajal, D-Calif., Don Bacon, R-Neb., and Mike Gallagher, R-Wis., the provision establishes a “Cybersecurity, Risk Inventory, Assessment and Mitigation Working Group” within the Department of Defense, Nextgov/FCW […]
The United States, Japan, Australia and India reiterated their commitment to ensuring the cyber resilience of the Indo-Pacific region during their third “meeting of principles,” held in Tokyo on Dec. 5 and 6. In a statement issued by the White House, the four members of the Quad Senior Cyber Group said they remain committed to […]
The National Security Agency has released a cybersecurity information sheet to help network owners and operators protect the cybersecurity supply chain through software bills of materials. The CSI, titled “Recommendations for Software Bill of Materials Management,” includes measures to help operators implement effective SBOM tool management. According to the CSI, SBOM management includes examining and […]
The National Institute of Standards and Technology has awarded Electrosoft a spot on the five-year, $125 million Cybersecurity and Privacy Support Services indefinite-delivery/indefinite-quantity contract. Electrosoft will be able to compete for task orders, providing the NIST with cybersecurity, information security and privacy expertise and consultation services. The company may also secure task orders to provide […]
The National Security Agency has warned that Russian Foreign Intelligence Service attackers are exploiting a publicly known vulnerability in servers hosting JetBrains TeamCity software. Affected entities include information technology companies, tool manufacturers, an energy trade association and developers of billing, medical devices, employee monitoring, sales and video game software worldwide, the NSA said Wednesday. A cybersecurity advisory […]
The Defense Advanced Research Projects Agency is accepting applications for the AI Cyber Challenge, a competition to develop artificial intelligence-powered cyber reasoning systems that detect and remediate software vulnerabilities in real time and at scale. Winning teams stand to receive up to $29.5 million in cumulative prize money throughout the program, DARPA said. AIxCC will […]
A public-private working group led by the National Security Agency has published guidance for managing open-source software and software bills of materials. Titled “Securing the Software Supply Chain: Recommended Practices for Managing Open Source Software and Software Bill of Materials,” the new report builds on a recent Office of Management and Budget memorandum, the NSA […]
The Senate has confirmed the United States’ next national cyber director after a vote on Tuesday. Harry Coker, President Joe Biden’s nominee to become the government’s cybersecurity chief, secured the position after a vote of 59-40, putting him permanently in charge of the federal government’s cybersecurity efforts, CyberScoop reported. Coker’s confirmation is a much-needed development […]
The Cybersecurity and Infrastructure Security Agency has released nine new tools to help organizations protect their Google applications. The tools set configuration baselines for Gmail, Google Drive and other Google Workspace applications. Chad Poland, manager for cyber shared services at CISA, said the Google toolkit covers most of the business collaboration suite of software-as-a-service offerings […]
The FBI has detailed the steps by which companies can ask for a delay in reporting cybersecurity incidents that the Securities and Exchange Commission requires effective Dec. 18. Under the SEC rule, companies have to report cyber issues to the commission in 8-K filings within four business days after the incident, unless the U.S. attorney […]
