The Cybersecurity and Infrastructure Security Agency has released a new logging management software to help organizations detect cyberthreats. The “Logging Made Easy” software is a Windows-based log management solution that allows users to use readily available data to detect and address threats more efficiently. It can be used to identify vetted protective monitoring capabilities, secure […]
The Health Sector Cybersecurity Coordination Center within the Department of Health and Human Services has advised health organizations to patch their SolarWinds systems to address vulnerabilities in the Access Rights Manager software. SolarWinds has released security fixes for eight vulnerabilities, including three system issues deemed critical because they could enable hackers to perform remote code […]
The deputy chief of the National Institute of Standards and Technology’s computer security division said the agency has been updating its software supply chain guidance to ensure that cyberthreats are kept at bay. In a Federal News Network interview, Jon Boyens shared that the NIST started focusing on the software aspect of supply chain risk […]
The Cybersecurity and Infrastructure Security Agency and the Department of Health and Human Services have launched a new toolkit to help health care organizations protect their systems from cyber-enabled threats. The Cybersecurity Toolkit for Healthcare and Public Health consolidates several cybersecurity resources, including the CISA’s Cyber Hygiene Services and the HHS’s Health Industry Cybersecurity Practices […]
The Cybersecurity and Infrastructure Security Agency is looking to increase visibility across federal networks by expanding a “no-notice” penetration testing initiative known as Federal Attack Surface Testing. In the fiscal year 2021 defense budget, Congress authorized CISA to hunt cyberthreats on agency networks without prior approval, Federal News Network reported. Eric Goldstein, executive assistant director […]
Eric Goldstein, executive assistant director for cybersecurity at the Cybersecurity and Infrastructure Security Agency, has warned that a significant budget cut would impair his organization’s ability to monitor federal network risks. Testifying at a House Homeland Security cybersecurity and infrastructure protection subcommittee hearing, he added that malicious actors would “unequivocally exploit” gaps left by reduced […]
U.S. Cyber Command will hold a cybersecurity event in the coming weeks to enhance its readiness to protect networks, data and critical infrastructure in support of the Joint Force commanders and interagency and international partners. The International Coordinated Cyber Security Activity will focus on defending the Department of Defense networks and systems from malware and […]
The workforce development nonprofit Cyber .org has secured $6.8 million from the Cybersecurity and Infrastructure Security Agency to support cyber career opportunities for elementary and high schoolers. Under the Cybersecurity Education and Training Assistance Program, the nonprofit will also encourage literacy and instruction initiatives to address a nationwide cyber workforce shortage, CISA said Monday. The […]
The Department of the Navy’s first principal cyber adviser, Chris Cleary, told DefenseScoop that his successor needs a longer term for more continuity in overseeing change, particularly on the civilian side of the service. Cleary’s three-year PCA tenure, which expires on Nov. 27, follows the 2020 Congress defense policy measure mandating the role’s creation to […]
The Defense Logistics Agency has awarded a J6 Enterprise Technology Services task order to SNR Government IT Services, a SkyePoint Decisions business, to provide cybersecurity assessment and authorization analyst support services. SNR GovIT personnel are experienced in assessing and validating security controls and ensuring compliance with policies and procedures, SkyePoint said Thursday. Tetra Tech subsidiary […]
