DarkReading
The space agency needs to implement stricter policies and standards when it comes to its cybersecurity practices, but doing so the wrong way would put machinery at risk, a federal review found.
SecurityWeek
The White House has published a national security memorandum focusing on critical infrastructure security and resilience.
SecurityWeek
Noteworthy stories that might have slipped under the radar: Volkswagen hacked by Chinese threat group, DDoS service shut down, Rubrik IPO.
The Record
An EPA spokesperson told Recorded Future news that the agency conducted a preliminary analysis, and it appears the data is “business contact information available to the public to provide a comprehensive picture of environmental impacts.”
Bleeping Computer
The U.S. Treasury Department has sanctioned a Wuhan-based company used by the Chinese Ministry of State Security (MSS) as cover in attacks against U.S. critical infrastructure organizations.
DarkReading
The response teams have a staging shortage, leaving them ill-prepared to take on significant threats from different places at once.
SecurityWeek
GAO study finds that CISA does not have enough staff to respond to significant OT attacks in multiple locations at the same time.
.webp)
Cyber Security News
The GAO, the Cybersecurity and Infrastructure Security Agency urged to enhance to protect OT systems critical to the nation's infrastructure.
Bleeping Computer
Two Chinese nationals face 20 years in prison after being caught and convicted of submitting over 5,000 fake iPhones worth more than $3 million to Apple with the goal of having them replaced with genuine devices.
The Hacker News
A critical vulnerability (CVE-2020-3259) in Cisco ASA and FTD software has been added to CISA's KEV catalog.
CyberNews
The US Government Accountability Office said the personal information of 6,000 GAO employees was compromised in a January breach of IT contractor CGI Federal.
Infosecurity News
A GAO report found that federal agencies are not assessing whether critical infrastructure sectors are implementing NIST ransomware protection guidance
DataBreaches
GAO-24-106683 Published: Dec 21, 2023. Publicly Released: Dec 21, 2023. Highlights: What GAO Found According to the Department of Health and Human Services...
DarkReading
Apache fixed a vulnerability in its OfBiz enterprise resource planning (ERP) framework last month, but attackers and researchers found a way around the patch.
SecurityWeek
Ubisoft investigating alleged hack, NASA releases security guidance, TikTok scares iPhone users by requesting passcode
SecurityWeek
A new GAO report reveals that 20 out of 23 US federal agencies have not fully implemented incident response plans.
DataBreaches
GAO-24-105658 Published: Dec 04, 2023. Publicly Released: Dec 04, 2023. Fast Facts Federal agencies have made progress in preparing for and responding to cyber...
Infosecurity News
20 government agencies have failed to reach the incident response maturity level required by law, the GAO found in a new report
The Record
The unidentified hackers exploited CVE-2023-26360 to gain "an initial foothold" on two systems at the same agency, CISA said.
DataBreaches
Hari Ravichandran writes: … A report (download) from the U.S. Government Accountability Office (GAO) found that school districts lose between $50,000...
SecurityWeek
Chinese authorities have netted thousands of people in a crackdown on cyber scams, but the criminal networks remain intact.
SecurityWeek
Dutch cloud company Leaseweb shut down some critical systems last week due to a cyberattack whose full impact is unclear.
DataBreaches
GAO-23-106443 Published: Feb 14, 2023. Fast Facts: Federal systems are vulnerable to cyberattacks. Our High Risk report identified 10 critical actions for...
Infosecurity News
Out of the 335 public recommendations issued since 2010, 190 still needed to be implemented
SecurityWeek
Out of the 335 public recommendations on a comprehensive cybersecurity strategy that GAO has made since 2010, 190 were not implemented as of December 2022.
CSO
Cybersecurity experts experiment with autonomous intelligence to secure and defend against increasing cyberthreats posed to critical infrastructure.
CSO
This year’s appropriation bill covers a lot of cybersecurity territory, including threats from TikTok and foreign adversaries and steps to improve medical device security.
SecurityWeek
The US Government Accountability Office has urged several agencies to assess IoT/OT cybersecurity effectiveness and risks to improve critical infrastructure protection.
SecurityWeek
GAO says the Department of Interior needs to address the cybersecurity risks that offshore oil and gas infrastructure face.
CyberSecurity Dive
A report warns the industry could see an attack that rivals the deadly 2010 Deepwater Horizon disaster and urges Interior Department officials to stand up safeguards.
SecurityWeek
New GAO report analyzes DoD’s cyber incident management capabilities and provides recommendations on addressing identified weaknesses.
The Record
Failures in reporting cyber incidents at the U.S. Department of Defense risks leaving commanders in the dark about the effects hackers could have on their missions, according to a new report by the Government Accountability Office.
CSO
A US Government Accountability Office report is calling for a host of changes to improve privacy within various federal agencies and departments. How those changes get implemented will depend largely on the establishment of new privacy leaders.
The Record
The watchdog agency reports CISA, FBI, and Secret Service need better coordination.
The Record
The US agency that maintains and modernizes the country’s nuclear stockpile was criticized by a government watchdog this week for spotty cybersecurity policies.
Bleeping Computer
Los Angeles Unified (LAUSD), the second largest school district in the U.S., disclosed that a ransomware attack hit its Information Technology (IT) systems over the weekend.
CSO
The main defense spending bill might enact the most significant pieces of U.S. cybersecurity legislation this year.
DataBreaches
Frank Konkel reports: The Government Accountability Office is recommending the Department of Health and Human Services establish a feedback mechanism to...
CSO
The new Bureau could enhance the United States' ability to work effectively with other nations on cybersecurity matters.
CyberNews
The Senate has approved a proposed new law that would end firms keeping quiet about cyber attacks - but the bill has yet to go before Congress and is opposed by the FBI.
CSO
Security community welcomes the update, but a U.S. GAO report cites slow adoption among government.
SecurityWeek
Siemens has released patches for a series of new PLC vulnerabilities dubbed S7+:Crash that can be exploited to remotely crash controllers.
DataBreaches
GAO-22-105024 Published: Oct 13, 2021. Publicly Released: Nov 12, 2021. Highlights from the government report: What GAO Found Federal guidance, such as the...
CyberSecurity Dive
With K-12 considered critical infrastructure, the Government Accountability Office is calling for more guidance on the federal government's role in protecting schools.
DataBreaches
Key points: More than half of ransomware victims reportedly pay ransom, but there is an absence of quality data and reporting that would enable better analyses...