CISA warns of hackers exploiting bug for end-of-life Ivanti product

Ivanti’s Cloud Service Appliance has a “high severity vulnerability” being exploited in the wild.

The post CISA warns of hackers exploiting bug for end-of-life Ivanti product appeared first on CyberScoop.

Continue reading CISA warns of hackers exploiting bug for end-of-life Ivanti product

WordPress.org to require two-factor authentication for plugin developers 

The requirement begins Oct. 1. and would apply to plugin and theme authors.

The post WordPress.org to require two-factor authentication for plugin developers  appeared first on CyberScoop.

Continue reading WordPress.org to require two-factor authentication for plugin developers 

White House publishes latest plan to protect a key component of the internet

The roadmap for enhancing internet routing security follows action from the FCC and others.

The post White House publishes latest plan to protect a key component of the internet appeared first on CyberScoop.

Continue reading White House publishes latest plan to protect a key component of the internet

CISA moves away from trying to influence content moderation decisions on election disinformation

Director Jen Easterly and other leaders said engaging social media firms to remove inaccurate posts is “not our role.”

The post CISA moves away from trying to influence content moderation decisions on election disinformation appeared first on CyberScoop.

Continue reading CISA moves away from trying to influence content moderation decisions on election disinformation

Who would be the cyber pros in a second Trump term?

If elected again, the former president might draw both on returning officials and yet-untapped pockets of talent.

The post Who would be the cyber pros in a second Trump term? appeared first on CyberScoop.

Continue reading Who would be the cyber pros in a second Trump term?

Iranian-linked hackers collaborate with ransomware affiliates, feds say

The group’s side hustle may not have explicit permission from its Iranian government sponsor.

The post Iranian-linked hackers collaborate with ransomware affiliates, feds say appeared first on CyberScoop.

Continue reading Iranian-linked hackers collaborate with ransomware affiliates, feds say

Zero trust: How the ‘Jia Tan’ hack complicated open-source software

The volunteers that maintain open-source software have always been knocked around by the tech community. The Jia Tan hack made it all so much worse.

The post Zero trust: How the ‘Jia Tan’ hack complicated open-source software appeared first on CyberScoop.

Continue reading Zero trust: How the ‘Jia Tan’ hack complicated open-source software

Easterly: Cybersecurity is a software quality problem 

LAS VEGAS —  Jen Easterly, the head of the Cybersecurity and Infrastructure Security Agency, told attendees at the Black Hat security conference on Thursday that delivering major improvements in computer security will require a sea change in how companies approach building software.  Amid an epidemic of breaches, Easterly laid the blame squarely at the feet […]

The post Easterly: Cybersecurity is a software quality problem  appeared first on CyberScoop.

Continue reading Easterly: Cybersecurity is a software quality problem 

Brandon Wales reflects on 20 years of cyber as he leaves CISA

SolarWinds, election security and protecting federal networks were among the highlights, he said in an interview with CyberScoop.

The post Brandon Wales reflects on 20 years of cyber as he leaves CISA appeared first on CyberScoop.

Continue reading Brandon Wales reflects on 20 years of cyber as he leaves CISA

EPA ‘urgently’ needs to step up cybersecurity assistance for the water sector, GAO says

The watchdog said the agency lacks “cybersecurity-related goals, objectives, activities, and performance measures.”

The post EPA ‘urgently’ needs to step up cybersecurity assistance for the water sector, GAO says appeared first on CyberScoop.

Continue reading EPA ‘urgently’ needs to step up cybersecurity assistance for the water sector, GAO says