A panel of the cross-sector working group Enduring Security Framework has published a report detailing ways multifactor authentication and single sign-on technology vendors can address challenges in their offerings. The report’s authors observed that increased multi-computer use has led to the emergence of potential access management and identity verification exploits, the National Security Agency said […]
The Cybersecurity and Infrastructure Security Agency has released a new report co-developed with the National Security Agency focused on the need to incorporate secure-by-design principles for software. The “NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Configurations” report provides guidance software manufacturers should follow to avoid software misconfigurations that can lead to […]
Security data solution Singularity DataLake is now available to federal agencies via SentinelOne’s Federal Risk and Authorization Management Program Authorized platform, the company announced on Tuesday. SentinelOne, a Mountain View, California-based cybersecurity company, launched Singularity DataLake in April, describing it as a “one-of-its-kind” cloud-native solution providing a comprehensive look into data across security ecosystems. The […]
The Food and Drug Administration will reject applications seeking a substantive review of connected medical devices if the products fail to meet the agency’s cybersecurity guidelines. New rules implemented on Sunday under Section 524B of the recently amended Food, Drug, and Cosmetic Act directs medical equipment manufacturers to ensure that products connected to the internet, […]
Denmark is contributing $2.8 million to the U.S. Agency for International Development’s program, Cybersecurity for Critical Infrastructure in Ukraine, the U.S. and the Danish governments announced on Monday. Following Russia’s Ukraine invasion, USAID launched the program as a four-year activity in May 2020, with an initial $38 million in funding to strengthen and protect Ukraine’s […]
The National Security Agency has urged all agencies operating national security systems to implement an automated acceptance test process as part of their supply chain risk management strategy to ensure newly procured devices are safe and secure. According to the NSA’s new cybersecurity information sheet, titled “Procurement and Acceptance Testing Guide for Servers, Laptops, and […]
The Cybersecurity and Infrastructure Security Agency and the UK National Cyber Security Centre recently held a strategic dialogue where participants from eight countries discussed ways to support high-risk community cyber resilience. During the Strategic Dialogue on Cybersecurity of Civil Society Under Threat of Transnational Repression, participants affirmed their commitment to protect communities at risk of […]
The Cybersecurity and Infrastructure Security Agency has added the OASIS Common Security Advisory Framework version 2.0 standard to its advisories for industrial control systems, operational technologies and medical devices. According to the agency, OASIS CSAF “supports the creation, update and interoperable exchange of security advisories as structured information on products, vulnerabilities and the status of […]
Space Systems Command has awarded Xage Security Gov a $17 million contract to provide zero trust access control and data protection to defend SSC’s current and next-generation ground and space architectures from cyberattacks. Under the contract, the command will employ the Xage Fabric cybersecurity mesh platform to cyber-harden ground stations, modems, operational technology assets and […]
The National Security Agency and other U.S. and Japanese security agencies have issued a joint cybersecurity advisory on the activities of Chinese cyber actors that exploit gaps in router firmware to cause damages. According to the “People’s Republic of China-Linked Cyber Actors Hide in Router Firmware” advisory, BlackTech cyber actors modify router firmware without being […]
