Defense Systems

Impatient lawmakers press Biden for cyber director nominee

President Joe Biden has said cybersecurity will be a top priority for his administration, but two senior positions focused on the issue remain either vacant or held by an acting official.

Defense Systems

Where's the accountability for Solarwinds?

Three top cybersecurity officials struggled to answer questions from lawmakers about who is to blame for the government's failure to stop the breach of nine federal agencies.

Defense Systems

King: Mandatory breach disclosure bill coming soon

Sen. Angus King (I-Maine), a co-chair of the Cyberspace Solarium Commission, said he plans to propose new legislation in the coming weeks.

Defense Systems

U.S. power grid increasingly susceptible to cyberattacks, watchdog says

The country's electrical systems are increasingly susceptible to cyberattacks, according to government auditors, and there is uncertainty about the extent to which a localized attack might cascade through power distribution systems.

Defense Systems

What cyber risks will Biden's supply chain EO uncover?

The administration has ordered a wide-ranging assessment of the risks to various supply chain. Analysts, former government officials and industry say a large workforce gap and problematic frameworks are among the threats cybersecurity poses to the country's supply chains.

Defense Systems

IC: Influence campaigns, not hacking, used to meddle in US elections

The intelligence community's newly declassified report largely concludes Russia attempted to meddle in the U.S. election through influence operations but did not attempt the kinds of cyberattacks observed in 2016.

Defense Systems

NIST charting federal vulnerability disclosure policy

To design a software vulnerability program for the federal government, the National Institute of Standards and Technology is reviewing work done by the Defense and Homeland Security Departments.

Defense Systems

Hafnium hack poses extended threat

IT teams have a long road ahead of them as they work to find and root out all vestiges of the Hafnium hack in their Microsoft Exchange systems.

Defense Systems

Pentagon issues cyber tasking order in response to Exchange hack

The Pentagon's new order to its agencies and commands aligns with the recent emergency directive issued by the Cybersecurity and Infrastructure Security Agency.

Defense Systems

CIA nominee: Cyber threats are 'ever greater risk' for U.S. society

William Burns, the president's nominee to lead the Central Intelligence Agency, said the SolarWinds attack was a "harsh wake-up call" about the country’s vulnerabilities in both critical infrastructure and supply chains.

Defense Systems

White House plans executive action in response to massive breach

In the wake of a wide-ranging hack involving SolarWinds IT management software and other commercial products, the White House is planning executive action to address cybersecurity gaps.

Defense Systems

Tech exec to Congress: Supply chain hack took 1,000 engineers

The scope and scale of the attack as described by Microsoft President Brad Smith is in keeping with the attribution being made by public sector and private sector officials that the hack was perpetrated by Russian-sponsored actors.

Defense Systems

CISA looks inward to stop future supply chain attacks

The Cybersecurity and Infrastructure Security Agency is exploring ways to better monitor internal systems’ communications for suspicious signals.

Defense Systems

Biden pledges international cooperation on cyber in speech

Biden addressed the global security forum for the first time as president last week when he called for the United States to cooperate with European allies on establishing cyberspace norms.

Defense Systems

Crowdstrike: Pandemic drove 2020 uptick in cyberattacks

The company's new report highlights the threats facing healthcare institutions by both criminal and nation state-backed actors.

Defense Systems

Expect more nation-state cyberattacks, Krebs says

Attacks from China, Russia, Iran and North Korea will likely continue “until the leadership has decided that it cannot tolerate further behavior," former CISA Director Chris Krebs told the House Homeland Security Committee.

Defense Systems

Key weapons programs need new cyber requirements, IG finds

The Pentagon's watchdog says the five weapons programs it audited have been updating cybersecurity requirements to defend against identified threats.

Defense Systems

Biden taps former NSA cyber director to lead SolarWinds response

The lawmakers had sent a letter to the White House earlier this week urging President Joe Biden to select one official to oversee the federal government’s response to the breach.

Defense Systems

Lawmakers demand accountability for 'disjointed' SolarWinds response

The two leaders of the Senate Select Committee on Intelligence say the government's response to the hack so far has been "disjointed and disorganized."

Defense Systems

NIST posts enhanced requirements for protecting CUI

The National Institute of Standards and Technology has published requirements that can help organizations protect controlled unclassified information against nation-state backed threats.