Defense Systems

Biden's cyber order lays foundation for securing government

The Biden administration’s long-anticipated cybersecurity executive order lays the groundwork for modernizing cyber defenses and protecting critical services from attack by improving incident response and information sharing between the public and private sectors.

Policy

Army’s Cybersecurity ‘Greatly Concerns’ Wormuth After Pipeline Attack

Biden’s SecArmy nominee told the Senate she’d fight deep troop cuts and support long-range fires and new measures against sexual crimes and extremism, if confirmed.

Science & Tech

White House Aims To Beef Up Nation’s Cybersecurity After Pipeline Hack

A new executive order shifts how the government buys software and gives consumers visibility into products’ security features.

Defense Systems

Moultrie's cyber background clears confirmation path

President Joe Biden's pick to lead the Defense Department's intelligence and security office, Ronald Moultrie, appears to have a smooth path to Senate confirmation thanks in large part to his cybersecurity experience.

Defense Systems

DOE 'totally focused' on cyber, says Energy secretary

The Energy secretary said DOE is committed to getting industry partners the tools, the intelligence and cyber response they need to address today's threats.

Defense Systems

DOD expands vulnerability disclosure policy to public networks, IoT devices

The Defense Department is expanding its vulnerability disclosure program to cover all of its publicly available systems, including networks, frequency-based communication, industrial control systems and internet-of-things devices.

Defense Systems

Homeland Security begins aggressive cyber workforce expansion

Department of Homeland Security launched its 60-day workforce sprint with an aggressive campaign to hire 200 cyber personnel by July 1.

Defense Systems

Pipeline ransomware attack renews infrastructure concerns

Senior administration officials say multiple government agencies are working to distribute information to industry about the ransomware attack that led to the shutdown of a key natural gas pipeline for the East Coast.

Ideas

Why National Cyber Defense Is a ‘Wicked’ Problem

Vulnerable supply chains, sloppy security, and a talent shortage made events like the Colonial Pipeline ransomware attack and the SolarWinds hack all but inevitable.

Science & Tech

To Understand 'Zero Trust,' Look to the Roman Empire

When the Romans realized that they could no longer prevent border incursions, they developed methods of fighting the attackers within.

Defense Systems

Boosting student loan debt forgiveness could pay off for cyber recruiting

Almost all Defense Department personnel who have sought student loan debt forgiveness have been denied -- a trend that, if unchanged, could make it even harder to recruit and retain tech talent.

Defense Systems

DHS, White House turn spotlight on ransomware

The Department of Homeland Security and the White House are putting the spotlight on combatting ransomware, actively developing plans to confront the issue.

Defense Systems

DOD expands bug bounty program to public networks, systems

The vulnerability disclosure program, which was started from the Defense Digital Service's 2016 Hack the Pentagon initiative, was initially restricted to public-facing websites and applications.

Defense Systems

Prepare for the next Sunburst by protecting controlled unclassified information

Protecting the supply chain and CUI will only become more challenging as the number of defense contractors and the amount of data they house continues to increase.

Defense Systems

Pentagon readies new policy to boost cyber workforce

The Defense Department is developing a new policy series aimed at improving the cyber workforce, but it has substantial work to do to recruit the talent needed in the future.

Defense Systems

Space Command moves for tighter cyber integration

U.S. Space Command is standing up a dedicated joint cyber center to improve integration with U.S. Cyber Command.

Defense Systems

CISA issues warning on exploited VPN flaw

A Chinese hacking campaign is using known flaws in a virtual private network application to breach entity networks and implant the SUPERNOVA malware.

Defense Systems

Russian operations targeting cloud and email, advisory warns

A new advisory describes how organizations can counter tactics and techniques used by Russia’s SVR foreign intelligence service, the attackers behind the intrusion involving SolarWinds.

Defense Systems

USTRANSCOM prepares for third-party cyber compliance assessments

U.S. Transportation Command is preparing a proof of principle for a cyber compliance program in preparation for broad adoption of CMMC.