Here’s how experts think CISA should tell agencies to protect OT

Government auditors say federal agencies haven’t met mandated security steps for operational technology, which hackers targeted in water sector attacks this summer.

The post Here’s how experts think CISA should tell agencies to protect OT appeared first on CyberScoop.

Continue reading Here’s how experts think CISA should tell agencies to protect OT→

National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations

Sean Cairncross talked about regulations, China, pilot projects and more Thursday.

The post National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations appeared first on CyberScoop.

Continue reading National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations→

WaterISAC reckons with range of threats after summer of cyberattacks

Internet-exposed tech, PLCs, outside integrators and inside protections are all factors the water sector’s information sharing and analysis center is watching.

The post WaterISAC reckons with range of threats after summer of cyberattacks appeared first on CyberScoop.

Continue reading WaterISAC reckons with range of threats after summer of cyberattacks→

Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond

Microsoft says the cyberespionage campaign has hit U.S. and U.K. targets, relying on sheer volume and requiring only a single victim interaction.

The post Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond appeared first on CyberScoop.

Continue reading Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond→

US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says

Sean Cairncross said CEOs need to be cognizant of how it’s being used, however.

The post US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says appeared first on CyberScoop.

Continue reading US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says→

House and Senate members propose legislation for CISA to step up cyber defenses for biotech

Biotechnology doesn’t have its own critical infrastructure designation, so the bipartisan group of lawmakers wants to make sure it’s protected like it.

The post House and Senate members propose legislation for CISA to step up cyber defenses for biotech appeared first on CyberScoop.

Continue reading House and Senate members propose legislation for CISA to step up cyber defenses for biotech→

Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges

The Justice Department said two leaders of the company have been arrested and face conspiracy to commit wire fraud.

The post Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges appeared first on CyberScoop.

Continue reading Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges→

Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks

The legislation from Senate Intelligence Vice-Chairman. Mark Warner, D-Va., and Senate Commerce Chairman Ted Cruz, R-Tex., would create a government-industry group to write voluntary best practices.

The post Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks appeared first on CyberScoop.

Continue reading Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks→

CISA outlines improvement plan for CVE program

The white paper is the latest step in trying to create a “Quality Era” for the Common Vulnerabilities and Exposures (CVE) program as the number of CVEs surges.

The post CISA outlines improvement plan for CVE program appeared first on CyberScoop.

Continue reading CISA outlines improvement plan for CVE program→

Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack

The DHS inspector general said CISA lacks the power to compel agencies to implement its Binding Operational Directives.

The post Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack appeared first on CyberScoop.

Continue reading Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack→