Accenture
Pentagon Military Defense DoD
Jen Easterly, CISA

A total of 68 tech firms have signed onto the Cybersecurity and Infrastructure Security Agency’s (CISA) Secure by Design pledge under which they will use best efforts over the next year to build better security into their products. […]

The White House’s Office of the National Cyber Director (ONCD) released a report today showing the United States’ cybersecurity posture has improved over the last year, driven by progress on the administration’s March 2023 National Cybersecurity Strategy (NCS). […]

Senate hearing Congressional-min

The Federal government’s top intelligence official sounded the alarm last week about a daunting increase in cyberattacks in the last year, with the majority targeted at U.S. entities. […]

Department of Transportation

NASA’s spacecraft development programs lack mandatory cybersecurity controls for acquisition policies and standards, placing the technology at risk of cyberattacks, the Federal government’s top watchdog said this week. […]

CISA

Pro-Russia hacktivists are targeting and compromising small-scale operational technology (OT) systems in North American and European critical infrastructure sectors – including water and wastewater systems (WWS), dams, energy, and food and agriculture – according to a joint fact sheet released today by leading Federal cyber agencies. […]

U.S. and China tech competition, AI

Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly told lawmakers on April 30 that the Biden administration’s fiscal year 2025 request for CISA will help fund agency activities in three key areas, including to fight malign Chinese cyber actors. […]

EPA Environmental Protection Agency

In March, MeriTalk recognized the Environmental Protection Agency (EPA) at the annual FITARA Awards ceremony for winning in the “Most Improved” category. EPA’s Chief Information Security Officer (CISO) Tonya Manning told MeriTalk in an exclusive interview that the agency is keeping up the momentum by moving forward on several innovative cyber and IT projects – including AI implementation and supply chain cybersecurity.    […]

NIST

The National Institute of Standards and Technology (NIST) released its Cybersecurity Framework (CSF) 2.0 earlier this year, the first update since the original was released in 2014. The framework offers detailed guidance and recommendations on a wide range of cybersecurity topics, including the role of data backups in incident response and recovery plans. MeriTalk recently sat down with Travis Rosiek, public sector chief technology officer at Rubrik, to discuss the current threat landscape and the changes in the updated framework that help agencies and organizations plan for worst-case cyberattack scenarios. […]

The Art of Human and AI Teaming in Cybersecurity

New research from MeriTalk and RSA Conference reveals that while 80 percent of cybersecurity decision-makers say accelerating AI adoption is critical to their organization’s resilience against evolving threats, just 31 percent say their organization is using AI for cybersecurity today. […]

Defense Information Systems Agency, DISA

The Defense Information Systems Agency (DISA) expects to roll out its Thunderdome program to 60 sites in fiscal year (FY) 2024 – thus far the agency has deployed the zero trust program to 23 sites, an agency spokesperson confirmed. […]

Kemba Walden, Principal Deputy National Cyber Director, Office of the National Cyber Director

While a total ban on ransom payments to hackers remains “the ultimate goal” for cybersecurity experts, critical infrastructure organizations need stronger cybersecurity resilience before that happens, former acting National Cyber Director Kemba Walden told lawmakers on April 16. […]

Jen Easterly, CISA
healthcare cyber-min
Axonius panel

The former policy lead for the Department of Defense (DoD) under President Barack Obama said Tuesday that while the Biden administration’s National Cybersecurity Strategy (NCS) calls for secure-by-design technology principles, the White House doesn’t actually have the authority to regulate that. […]

Axonius Adapt 2024

In the lead-up to the Adapt 2024 conference in Washington on April 16, we sat down with two senior Axonius Federal officials – Brian “Stretch” Meyer, Senior Director of Federal Engineering, and Kevin Jones, Senior Director of Federal Sales – to talk about how Federal agencies are grappling with zero trust security mandates, and how Axonius is helping them leapfrog some of the toughest obstacles to the goal of achieving better security. […]

Ron Wyden Oregon
Axonius Adapt 2024

How do Federal cyber practitioners adapt to an increasingly complex attack surface? Where do Federal security leaders turn to reimagine the future cyber landscapes? Find answers to both of those questions at Adapt 2024: Reimagining Our Federal Cyber Future – a one-day event that brings together IT, cybersecurity, and operations leaders to unpack the complex security challenges that face U.S. government agencies. […]

CISA

The Cybersecurity and Infrastructure Security Agency (CISA) published a new dedicated High-Risk Communities webpage today with a range of cybersecurity resources for civil society organizations and other high-risk communities. […]

State Department

The Defense Department, General Services Administration, and NASA have issued a final rule amending the Federal Acquisition Regulation (FAR) to add the framework for a new FAR part 40 covering information security and supply chain security. […]

Categories