The National Counterintelligence and Security Center (NCSC) within the Office of the Director of National Intelligence released security guidance last week to help protect emerging technology startup companies from threats posed by nation-state actors.   […]

A National Institute of Standards and Technology (NIST) advisory board is urging the agency to scale and implement support for its national cyber vulnerability database to protect national security interests.  […]

The U.S. Army is launching a pilot program to help small businesses meet the cybersecurity requirements of the Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC) program, as the Pentagon moves to integrate these standards into defense contracts. […]

A large-scale spear-phishing campaign led by a foreign adversary is targeting government and IT sector systems, the Cybersecurity and Infrastructure Security Agency (CISA) warned in an Oct. 31 alert.   […]

As cybersecurity talent continues to thin relative to demand and artificial intelligence adoption surges, organizations are being left exposed to security risks amid slowing global workforce growth, according to a new report on the cybersecurity workforce released Thursday.  […]

The Treasury Department on Monday evening issued its final rule to block U.S. private sector investments in China that involve hot-button technologies including AI, quantum, and semiconductors. […]

The Department of Homeland Security’s (DHS) Cyber Safety Review Board (CSRB) will launch an investigation into China-sponsored infiltrations of U.S. telecom networks and infrastructure that have come to light since the beginning of this month, DHS confirmed today.  […]

Several Defense Department (DoD) officials highlighted the potential impact of artificial intelligence (AI) for cybersecurity efforts on Thursday, starting with the department’s information security chief, who emphasized AI’s ability to enhance threat detection and response capabilities. […]

Members of the House Homeland Security Committee are probing the intelligence community to provide updated information on the cyber threat China poses to the United States in the wake of reports that claim the PRC breached major phone and broadband companies. […]

The Google Play Store has more than 200 malicious applications that resulted in nearly 8 million downloads onto mobile devices, according to a new report from the cloud security company Zscaler.  […]

After joining the Cybersecurity and Infrastructure Security Agency’s (CISA) Secure by Design Pledge in May, Google released its strategy on Tuesday for how it’s meeting the pledge’s seven security goals.   […]

The chief information officer (CIO) at the State Department’s Bureau of Intelligence and Research (INR) laid out his team’s priorities for fiscal year (FY) 2025 with modernization, cybersecurity, and IT expansion topping the list. […]

Highly Assured Data-Centric Security (HADCS) goes beyond traditional perimeter-based security models by shifting the focus to securing the data itself, explained Keith Strini, the chief technical strategist for the Department of Defense and intelligence community at Dell Technologies. […]

As cyber threats evolve at lightning speed, Defense Department (DoD) Chief Information Security Officer (CISO) David McKeown unveiled his top ten cyber priorities, with cryptographic modernization (CM), zero trust, and defense industrial base (DIB) cybersecurity at the top of the list. […]

The Federal Communications Commission’s (FCC) Privacy and Data Protection Task Force has announced partnerships with five new state attorneys general to improve investigations into data privacy and security.   […]

To mark Cybersecurity Awareness Month, global tech trade association ITI released a new document on Tuesday that provides in-depth suggestions on how policymakers can improve the cybersecurity of AI models and systems. […]

A group of 40 public and private sector experts unveiled a report Tuesday that lays out more than three dozen cyber policy recommendations for the next administration to prioritize when elected in November. […]

The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI released draft guidance on product security bad practices last week, highlighting practices that are deemed “exceptionally risky” and providing recommendations for software manufacturers to mitigate these risks.  […]

The Cloud Safe Task Force (CSTF) – comprised of four nonprofits: MITRE, the Cloud Security Alliance (CSA), the Advanced Technology Academic Research Center (ATARC), and the IT Acquisition Advisory Council (IT-AAC) – published a new set of recommendations today to establish a National Cyber Feed (NCF). […]

Incorporating artificial intelligence technologies into defense systems is critical to staying ahead of threat actors as the AI landscape rapidly changes and new cyber-threat trends emerge, according to a new Microsoft Digital Defense Report.   […]

During its quarterly meeting on Friday, the Cybersecurity and Infrastructure Security Agency’s (CISA) Cybersecurity Advisory Committee (CSAC) approved recommendations in four reports delivered to Director Jen Easterly aimed at bolstering resilience for critical infrastructure and open source security, as well as ensuring adoption of the agency’s secure by design initiative and increasing the agency’s public outreach. […]

As artificial intelligence-assisted cyberattacks grow and deepfakes, data breaches, and other cybersecurity risks loom, AI will continue to be an asset to cyber defenders in the future but will also increase the capabilities of threat actors, according to a new report on the future of AI tech.  […]

Members of Congress are looking for answers from both Federal agencies and U.S. telecommunications service providers following a report from the Wall Street Journal last week that says Chinese government hackers may have breached major U.S. phone and broadband companies’ wiretapping systems. […]

Government agencies and critical infrastructure entities are not prepared for a cyber conflict with China, according to a new draft report from a subcommittee of the Cybersecurity and Infrastructure Security Agency’s (CISA) Cybersecurity Advisory Committee (CSAC). […]

As the Federal government progresses in implementing cybersecurity frameworks to safeguard its networks, private sector leaders underscore that continuous adaptation of data backup and recovery plans are essential components of these frameworks. […]

A Government Accountability Office (GAO) director of cybersecurity and IT advised Federal agencies today to get ready and stay ready for when cyberattacks are inevitably going to take place. […]

A top official within the Office of the Director of National Intelligence’s (ODNI) Cyber Threat Intelligence Integration Center (CTIIC) painted a vivid picture today of the modern cyber landscape, and how the threat has evolved over the past decade to include both nation-state and non-aligned adversaries.  […]

Wireless service provider T-Mobile has agreed to move to a “modern zero trust” security architecture, take steps to segment its networks, and implement some basic cyber hygiene practices under terms of a data breach settlement with the Federal Communications Commission (FCC). […]

The Federal Energy Regulatory Commission (FERC) proposed a new rule this month that aims to address the growing risks posed by malicious actors seeking to compromise the bulk-power system and related supply chains. […]

With nation-state and criminal adversaries in attack mode and putting an ever-higher premium on cyber resilience, some of the best practitioners on the Federal cybersecurity landscape are gathering online at the Rubrik Public Sector Summit on Oct. 8 from 1 p.m. to 4 p.m. Eastern time to explore the next steps toward stronger resilience, and you are invited to join. […]