November 13, 2025
Home Page
Home Page
Allan Friedman, a leader on Software Bill of Materials, is starting a new initiative to build a multistakeholder process for Hardware Bill of Materials based at the Institute for Security and Technology, in one of his first moves since leaving the Cybersecurity and Infrastructure Security Agency in late July.
The Federal Communications Commission will put out a public notice “relatively soon” asking for comment on proposed technical requirements for the U.S. Cyber Trust Mark program, according to the Consumer Technology Association’s Mike Bergman, as the regulatory agency winds down a national security review of the initiative.
Bobbie Stempfley of Dell Technologies emphasized the importance of CISA in a recent essay of continuing to provide intelligence to the Multi-State Information Sharing and Analysis Center, following end of a contract with the Center for Internet Security to support the nonprofit hub.
The Cybersecurity and Infrastructure Security Agency has published implementation guidance instructing agencies to apply the latest software updates to Cisco security appliances, as a follow up to a September emergency directive on actively exploited vulnerabilities.
Larry Clinton, head of the Internet Security Alliance, is continuing to push for the establishment of a national cyber workforce academy in the second Trump administration, as National Cyber Director Sean Cairncross considers ideas to build the government’s cyber workforce.
The Health Sector Coordinating Council is working on guidance for 2026 on artificial intelligence cybersecurity risks, including a governance framework and AI secure by design guidance.
The energy sector is facing a surge of cyber attacks impacting Internet of Things devices and operational technology systems, according to a report from cyber firm Zscaler exploring trends in the malware threat landscape.