The Cybersecurity and Infrastructure Security Agency (CISA) issued guidance on Thursday that aims to help Federal agencies meet requirements related to the encryption of Domain Name System (DNS) traffic and bolster the cybersecurity of their IT networks. […]

Eric Goldstein, the executive assistant director for cybersecurity at the Cybersecurity and Infrastructure Security Agency (CISA), is stepping down from his role next month. […]

With the 2024 U.S. elections just six months away, top Federal intelligence and security officials warned lawmakers that America’s foreign adversaries will again seek to influence the upcoming elections by harnessing the latest innovations in artificial intelligence (AI) technology. […]

Nearly three years ago, the General Services Administration (GSA) embarked on its official journey towards zero trust architecture (ZTA), helped by a $29.8 million Technology Modernization Fund (TMF) award. GSA’s Chief Information Security Officer (CISO) Bo Berlas – who is spearheading the agency’s ZTA journey with the CIO shop – told MeriTalk in an exclusive interview that the Federal procurement agency has notched significant progress for ZTA in its initial three areas of focus: users; devices; and networks. […]

Sen. JD Vance, R-Ohio, is calling on the Cybersecurity and Infrastructure Security Agency (CISA) to provide more details on a People’s Republic of China (PRC) state-sponsored cyber actor – known as Volt Typhoon – which he says poses a national security threat. […]

Federal Chief Information Security Officer (CISO) and Deputy National Cyber Director (NCD) Chris DeRusha is leaving his post after nearly three and a half years, two White House spokespeople confirmed to MeriTalk. […]

Making the Federal government workforce flourish is at the very top of the President Biden’s management agenda, and the wheels are in motion on Capitol Hill, at the Office of Personnel Management (OPM), and at Federal agencies to execute on the vision of restocking the government with top-notch talent. […]

The head of the Cybersecurity and Infrastructure Security Agency (CISA) said today that her team has plans to unveil its own international cyber strategy on the heels of the State Department’s release of its International Cyberspace and Digital Policy Strategy during the RSA Conference in San Francisco last week. […]

Four key players in the establishment of U.S. Cyber Command (CYBERCOM) took a trip down memory lane at the RSA Conference in San Francisco on Wednesday to discuss how they worked together to set up CYBERCOM following one of the worst military compromises in U.S. history. […]

A total of 68 tech firms have signed onto the Cybersecurity and Infrastructure Security Agency’s (CISA) Secure by Design pledge under which they will use best efforts over the next year to build better security into their products. […]

Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly said her agency is due to reveal later on Wednesday at the RSA Conference in San Francisco that 60 tech companies will be signing onto a voluntary secure-by-design pledge to make their technology products more secure against ransomware and other forms of cyberattacks. […]

The Cybersecurity and Infrastructure Security Agency (CISA) is adding four new members to the Cyber Safety Review Board (CSRB) established by the Department of Homeland Security (DHS) in 2022 to review and assess major cybersecurity events, including former CISA Director Chris Krebs. […]

By Tim Jones and Alison King, Forescout The Cybersecurity and Infrastructure Security Agency (CISA) earlier this year announced that the next phase of its Continuous Diagnostics and Mitigation (CDM) program would broaden to include non-traditional technology, such as Operational Technology (OT) and the Internet of Things (IoT), in 2024. At its 2012 launch, CDM was focused on gaining […]

As the Federal government looks to upskill its technology developer workforce to take advantage of new AI capabilities, government officials on Wednesday explained a lot of that work comes down to simply “translating” technical skills they already know and applying them to AI. […]

Pro-Russia hacktivists are targeting and compromising small-scale operational technology (OT) systems in North American and European critical infrastructure sectors – including water and wastewater systems (WWS), dams, energy, and food and agriculture – according to a joint fact sheet released today by leading Federal cyber agencies. […]

Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly told lawmakers on April 30 that the Biden administration’s fiscal year 2025 request for CISA will help fund agency activities in three key areas, including to fight malign Chinese cyber actors. […]

President Biden today signed a new national security memorandum (NSM) that aims to better protect U.S. critical infrastructure sectors by enlisting U.S. intelligence agencies to ramp up their sharing of threat data across multiple levels of government and with private-sector critical infrastructure providers. […]

The Department of Homeland Security (DHS) on April 29 offered up new guidance and analysis on the use of artificial intelligence technologies in two particularly sensitive areas: weapons of mass destruction (WMD) and the 16 U.S. sectors classified by the Federal government as critical infrastructure. […]

As the Cybersecurity and Infrastructure Security Agency (CISA) celebrates the one-year anniversary of its Secure by Design initiative, the agency is looking to elevate the effort in public conversation and have customers make more demands of software vendors. […]

David Carroll is currently the CISA Associate Director for Mission Engineering, delivering wide ranging cyber defense capabilities to the federal enterprise. David’s extensive systems engineering experience, as well as operational experience in the field and as a decorated military cyber officer, has established him as a trusted cyber security leader. David has developed a deep […]

The head of the Cybersecurity and Infrastructure Security Agency (CISA) said Wednesday that some of the agency’s key ransomware initiatives have sent out more than 2,000 warnings of vulnerabilities over the last year. […]

Individuals and teams from the U.S. military service branches took home top prizes in the fifth annual President’s Cup Cybersecurity Competition organized by the Cybersecurity and Infrastructure Security Agency (CISA), CISA announced on April 19. […]

The Government Accountability Office (GAO) is calling on two Federal agencies in charge of overseeing the implementation of President Biden’s 2021 cybersecurity executive order (EO) to fully complete the remaining five requirements tasked to them in the order. […]

The Cybersecurity and Infrastructure Security Agency (CISA), FBI, and the Office of the Director of National Intelligence (ODNI) issued guidance on Wednesday that details how to protect election infrastructure from foreign malign influence operations. […]

The head of the Cybersecurity and Infrastructure Security Agency (CISA) said today that the Federal government has a “powerful” ability to mandate security standards for software vendors through its procurement process. […]

A group of industry experts called on Congress this week to enforce minimum cybersecurity standards among healthcare organizations in light of the February ransomware attack on UnitedHealth subsidiary Change Healthcare. […]

The former policy lead for the Department of Defense (DoD) under President Barack Obama said Tuesday that while the Biden administration’s National Cybersecurity Strategy (NCS) calls for secure-by-design technology principles, the White House doesn’t actually have the authority to regulate that. […]

While the Cybersecurity and Infrastructure Security Agency (CISA) developed its Continuous Diagnostics and Mitigation (CDM) program in 2012 with a monolithic software architecture, a top CISA tech official said today the program is looking to evolve to become “a lot more flexible and modular.” […]

The Cybersecurity and Infrastructure Security Agency’s (CISA) Continuous Diagnostics and Mitigation (CDM) program is focusing closely on a range of goals for the remainder of fiscal year (FY) 2024 including expanding the program’s asset management capabilities to include mobile and cloud services, and leveraging the fruits of the program’s endpoint detection and response (EDR) capabilities to help CISA provide better security intelligence across Federal civilian agencies. […]

Sean Connelly, who has been long been a prime mover on zero trust and other security policies for the Cybersecurity and Infrastructure Security Agency (CISA), will soon be leaving Federal government service to join cloud security provider Zscaler, the company confirmed to MeriTalk. […]