Defense Systems

Coast Guard updates cyber strategy with focus on 'mission platform'

The updated document aims to provide a clearer map for the Coast Guard's cyber priorities, including mitigating vulnerabilities in the maritime supply chain.

Ideas

How the Energy Department Can Improve Industry Cybersecurity

Practical steps include educating direct actors like electricians or IT professionals on basic cybersecurity priorities, concerns, and best practices.

Defense Systems

CISA debuts vulnerability disclosure platform

Federal civilian agencies can tap a bug reporting system fielded as a shared service by the Cybersecurity and Infrastructure Security Agency to gather information on potential website and software vulnerabilities.

Ideas

The US Needs a Department of Cybersecurity

As the saying goes, when everyone is in charge, no one is in charge.

Threats

The Most Targeted Vulnerability of the Year Was First Identified in 2017

In a joint advisory, international cybersecurity officials say failure to patch years-old vulnerabilities makes attributing cyberattacks more difficult.

Defense Systems

Lawmakers propose mandatory legacy IT audit in NDAA

The military services could be required to audit its legacy IT systems and software as part of a proposal to be considered in the 2022 defense authorization bill.

Policy

White House Asks CISA, NIST to Set Cybersecurity Performance Goals for Critical Infrastructure Operators

The initiative will not result in mandatory measures for the private sector, but the administration hopes to signal its commitment to cybersecurity and maybe get a little help from Congress on that front.

Defense Systems

Lawmakers advance cyber legislation

The Senate’s 2022 defense authorization bill and a number of House measures are addressing cyber authorities, domestic microelectronics manufacture, supply chain security and raising cyber awareness among the public.

Ideas

What China’s Vast New Cybersecurity Center Tells Us About Beijing’s Ambitions

The 15-square-mile campus in Wuhan will serve as school, research lab, incubator, and talent cultivator.

Ideas

The Automation Gap in Biden’s Cybersecurity Order

Network defense in the 21st century requires AI-powered penetration testing.

Policy

Biden Goes After China’s Cyber Attackers

U.S. and allies blame China’s government, announce new measures to fight a massive cyber criminal ring akin to Russia’s, but threaten no sanctions yet.

Ideas

The US Desperately Needs a Civilian Cybersecurity Corps

Bipartisan legislation aims to augment the National Guard’s cyber reservists, but a wholly civilian component could be larger and more flexible.

Science & Tech

Biden Urges Putin to Give up Russian Ransomware Gangsters, Threatens Unspecified 'Consequences'

The President is talking tougher on Russian criminal cyber gangs, but still isn’t naming specific penalties.

Defense Systems

DHS workforce sprint brings in nearly 300 cyber employees

Cybersecurity vacancies totaled about 2,000 at the start of the hiring sprint in May.

Defense Systems

CMMC board clarifies assessor training timeline

Training materials and certification exams for the assessors and instructors are at least four months away from delivery.

Defense Systems

Army tests network security, cyber tools in war games

Army officials said the Joint Warfighting Assessment exercise demonstrated that while the Army was able to create and share data across a multi-partner environment in a multi-partner network, the constructed virtual environment had its limitations.

Defense Systems

CISA predicts cyber EO will drive progress on zero trust

Most agencies are just getting started creating plans around zero trust, but tight deadlines featured in President Joe Biden's cybersecurity executive order and a wave of new guidance, may speed up implementation across the entire government.