The Cybersecurity and Infrastructure Security Agency has released an emergency directive asking federal civilian agencies to mitigate Apache Log4j vulnerabilities in their internet-facing networks. CISA said Friday multiple threat actors are exploiting
MoreThe Enduring Security Framework working group, a public-private team led National Security Agency and the Cybersecurity and Infrastructure Security Agency, has released part four of guidance on protecting 5G cloud infrastructure. Part
MoreThe Department of Homeland Security (DHS) has launched a bug bounty program that seeks to discover cybersecurity vulnerabilities in DHS systems. DHS said Tuesday that its Hack DHS program invites cybersecurity researchers
MoreAlex Stamos, partner at the Krebs Stamos Group and a federal advisory committee member at the Cybersecurity and Infrastructure Security Agency, said he believes basic security functions should not be sold as
MoreJen Easterly, director of the Cybersecurity and Infrastructure Security Agency, said CISA has added a critical vulnerability involving the log4j software library to its “catalog of known exploited vulnerabilities” to incite federal
MoreThe Cybersecurity and Infrastructure Security Agency has introduced new guidance providing ways to ensure the security of social media accounts operated by organizations. The measures outlined in the Capacity Enhancement Guide seek
MoreTop cybersecurity officials of the Biden administration and technology company executives discussed ways to increase collaboration between the federal government and industry to strengthen U.S. cyber defenses in a meeting held Monday.
MoreThe Government Accountability Office (GAO) has recommended that the Department of Defense improve communication with industry on the Cybersecurity Maturity Model Certification (CMMC) program and come up with outcome-oriented performance measures to
MoreThe American Association for Laboratory Accreditation (A2LA) has issued an updated version of the R346 requirements document to reflect its decision to continue offering the remote participation option to third party assessment
MoreU.S. Cyber Command demonstrated collective cyber defense with international partners during the CYBER FLAG 21-1 exercise, which ran from Nov. 15 to 20 at Joint Base Suffolk in Virginia. The exercise employed
More