May 3, 2024
Home Page
Home Page
An updated version of the implementation plan for the national cybersecurity strategy should focus on near-term efforts to address supply chain issues with new authorities and build the cyber workforce, according to former Office of the National Cyber Director official Camille Stewart Gloster.
Director of National Intelligence Avril Haines stressed the need to improve cybersecurity practices in critical infrastructure amid one of the “most pernicious transnational threats” facing the United States, at a Senate Armed Services Committee hearing on the intelligence community’s 2024 global threat assessment.
Senate Intelligence Chairman Mark Warner (D-VA) and Sen. Thom Tillis (R-NC) have introduced a bill to leverage and supplement existing cybersecurity vulnerability disclosure and tracking programs for use in the artificial intelligence realm, with provisions including a new “voluntary database to record AI-related cybersecurity incidents including so-called ‘near miss’ events,” according to the senators.
The Cybersecurity and Infrastructure Security Agency and FBI are raising awareness of best practices to eliminate vulnerabilities in software directories, in the latest entry of the secure by design alert series.
Lawmakers at a House hearing sought to get an understanding of how the Cybersecurity and Infrastructure Security Agency can implement an effective mandatory incident reporting regime that meets the intent of the 2022 law, including harmonizing requirements across agencies and scoping what information is needed to provide value to all stakeholders.
The Cybersecurity and Infrastructure Security Agency is urging industrial control system and operational technology owners to take actions to address threats from Russian “hacktivists” targeting water and wastewater systems and other critical infrastructure sectors, in a new alert with federal and international partners.
Bob Kolasky, former chief of the CISA National Risk Management Center, says there are opportunities for more oversight over cloud service providers under President Biden’s national security memorandum updating the government’s decade-old policy for the resilience and security of critical infrastructure.