The Cybersecurity and Infrastructure Security Agency has announced a feedback solicitation procedure as part of the agency’s efforts to update the National Cyber Incident Response Plan. According to CISA, the feedback solicitation period would inform the NCIRP 2024 planning effort, directed by the Biden administration’s 2023 National Security Strategy. The NCIRP 2024 is grounded on […]
BigBear .ai’s Troy, an artificial intelligence-powered workflow engine, has received “Awardable” status on the Chief Digital and Artificial Intelligence Office’s Tradewinds Solutions Marketplace. The designation allows government agencies to procure Troy, designed to streamline and accelerate binary reverse engineering, directly from the marketplace, BigBear said. Binary reverse engineering, a technique crucial for tasks such as […]
The Cybersecurity and Infrastructure Security Agency has issued its “Guide to Operational Security for Election Officials” to strengthen election infrastructure security in time for the upcoming elections. The guide details operational security principles in the election context, identifies potential risks and offers mitigation strategies, CISA said. The agency urges election officials to incorporate OPSEC principles, […]
The Department of Homeland Security has announced the recipients of a funding program to help tribal nations better manage cybersecurity issues. In partnership with the Federal Emergency Management Agency and the Cybersecurity and Infrastructure Security Agency, the Tribal Cybersecurity Grant Program named the Cherokee Nation of Oklahoma, the Blackfeet Nation and the San Carlos Apache […]
The National Institute of Standards and Technology has enlisted Post-Quantum in its consortium of organizations engaged in a project dubbed “Migration to Post-Quantum Cryptography” with the primary task of battling “Harvest Now Decrypt Later” cyberattacks. Post-Quantum, touted as the world’s first PQC firm, will support the project by developing practical PQC implementation and use cases, […]
The Department of Defense and the U.S. Transportation Command are collaborating to take the lead in protecting the global logistic network’s cybersecurity. In the last week of June, the Joint Force Headquarters-DOD Information Network and USTRANSCOM held a global logistics summit to discuss how both organizations could support each other in improving the cybersecurity posture […]
U.S. natural gas businesses are facing challenges in securing cybersecurity insurance amid growth in critical infrastructure attacks, according to Kimberly Denbow, the vice president of security and operations at the American Gas Association. Speaking at a hearing organized by the House’s Cybersecurity and Infrastructure Protection Subcommittee, Rep. Eric Swalwell, D-Calif., discussed how the lack of […]
A recent report by the Cybersecurity and Infrastructure Security Agency has found a security vulnerability in critical open-source software. The findings revealed that more than half of 172 open-source projects identified by the Open Source Security Foundation contain code written in programming languages that lack built–in memory management, Nextgov/FCW reported. Moreover, the report noted that […]
The Cybersecurity and Infrastructure Security Agency has collaborated with the FBI, the Australian Cybersecurity Centre and the Canadian Cyber Security Center to release the guidance titled Exploring Memory Safety in Critical Open Source Subjects. The document, which builds on a previous guide called The Case for Memory Safe Roadmaps, offers insights into the extent of […]
The Cybersecurity and Infrastructure Security Agency confirmed that malicious actors targeted its Chemical Security Assessment Tool in a cyberattack in January. The agency uses the CSAT online portal to determine whether a facility is considered high-risk under the Chemical Facility Anti-Terrorism Standards. Among the information uploaded on the platform are vulnerability assessments, site security plans, […]
