The National Security Agency and the UK National Cyber Security Centre have issued a cybersecurity advisory warning organizations about Russian spear-phishing techniques. The CSA focuses on how Russia’s Star Blizzard hacking group uses spear-phishing to illegally access various kinds of information, including those owned by the defense sector, national governments, non-government organizations and academia. The […]
U.S. Army Gen. Paul Nakasone, the head of the U.S. Cyber Command and a 2023 Wash100 awardee, shared on Friday that he and the Department of Defense are still evaluating the possibility of a new force generation model for his organization amid ongoing deliberations over establishing an independent cyber branch. Speaking at an Intelligence and […]
Carahsoft Technology has announced that it will distribute runZero’s cyber asset attack surface management solutions to the public sector under a new partnership. Government organizations can access the products through reseller partners and contract vehicles such as NASA Solutions for Enterprise-Wide Procurement V and Information Technology Enterprise Solutions – Software 2, Carahsoft said. RunZero’s solutions […]
The Department of Health and Human Services is working to fortify the health care sector’s cybersecurity. On Wednesday, the department released a concept paper detailing its cybersecurity strategy for the industry. Based on the Biden administration’s National Cybersecurity Strategy, the plan provides four pillars for actions, including collaborating with Congress to develop a support system […]
The National Security Agency, in partnership with the Cybersecurity and Infrastructure Security Agency and international agencies, released a cybersecurity information sheet focused on eliminating memory safety vulnerabilities from software products. The CSI, titled “The Case for Memory Safe Roadmaps,” includes technical and non-technical factors software manufacturers should consider when developing memory-safe code integration plans. Recommendations […]
The U.S. Naval Information Warfare Center Atlantic hosted a cybersecurity exercise for Navy reservists. During the four-day Gibson Castle 23 exercise, over 50 Naval Information Warfare Systems Command Reserve Program Cybersecurity Pillar reserves were trained on operational and tactical strategies for real-world cyber breaches. Specifically, the trainees learned how to coordinate with other agencies and […]
The Office of Management and Budget has instructed federal agencies to each produce internet of things inventories by the end of fiscal year 2024. The directive is part of a Federal Information Security Modernization Act implementation memo released Monday by OMB Director Shalanda Young, Nextgov/FCW reported Tuesday. According to the OMB, properly evaluating cybersecurity risks to missions and operations requires […]
The Moonlighter imaging satellite that NASA and SpaceX launched in June served as the platform for the U.S. Space Force Cyber Guardians’ cyber defense training exercise from Nov. 14 to 17. Dubbed Moonlighter after its sandbox, the training also focused on the Guardians’ cyber offense capabilities, dividing the participants into an offensive Red Team and […]
A Cybersecurity and Infrastructure Security Agency official said a rapid approach to addressing computer vulnerabilities is not the best way to resolve the issue. Speaking at an ISC2 event on Friday, Eric Goldstein, executive assistant director for cybersecurity at CISA, said the “patch faster, fix faster” model does not account for adversaries’ capabilities and adaptability […]
A bipartisan bill has been filed in Congress mandating the Cybersecurity and Infrastructure Security Agency to establish cybersecurity apprenticeship and the Department of Veterans Affairs to launch a veterans’ cybersecurity training program. Reps. Mike Gallagher, R-Wi., and Chrissy Houlahan, D-Pa., introduced the Federal Cybersecurity Workforce Expansion Act on Thursday, which has a companion bill in the […]
