Actors linked with the Iranian government were able to exploit an unpatched Log4Shell vulnerability—which the Cybersecurity and Infrastructure Security Agency asked agencies to address by the...
Major industry groups clashed on how CISA should define key terms in its rulemaking process to implement the federal incident reporting law. Providers of commercial information...
The Biden administration is looking to Congress for help with ‘filling gaps in statutory authorities’ for improving U.S. cybersecurity. Department of Homeland Security Secretary Alejandro Mayorkas...
Officials from CISA and DARPA spoke about their initiatives to support cybersecurity operations across critical infrastructure networks. A Wednesday meeting of the President’s Council of Advisors...
Federal agencies are under a binding operational directive to address exploitable security vulnerabilities in their software, but the success of CISA’s effort relies on the cooperation...
Despite “a handful” of DDoS attacks targeting state and local election websites and some technical glitches affecting voting equipment, CISA says it saw “no activity” that...
New guidance from the federal agencies—and major companies serving the government—tries to distinguish between the security duties of software developers, suppliers and consumers. Software suppliers have...
Inaugural CISA director Chris Krebs expressed concern about the spread of election misinformation as Twitter changes up its user verification process. Republican lawmakers need to forcefully...
The agency has started to receive feedback from some key stakeholders for its rulemaking process on the issue. Organizations should err on the side of reporting...
The agency has promised to measure the success of efforts to steer major software providers toward the inclusion of logging and other basic security features in...
Recent Comments