Cybersecurity

NIST issues new guidelines on protecting unclassified data in government systems

The framework considers the private sector’s increased role in helping the federal government in day-to-day operations and aims to reduce the risk of supply chain cyberattacks.

Space assets are in foreign adversaries' cyber crosshairs, DOD official says

The easiest targets are ground assets like operation centers and launch facilities, said Mieke Eoyang.

Feds, military personnel compete in President's Cyber Cup Challenge

Michael Harpin, the competition’s section chief at the Cybersecurity and Infrastructure Security Agency, told Nextgov/FCW that the competition fosters internal recognition and networking that can help spur career growth.

Tech firms pledge to release products with built-in security features

The Cybersecurity and Infrastructure Security Agency has been trying to get companies to agree to its "secure by design" paradigm for months.

Thwarted cyberattack targeted Library of Congress in tandem with October British Library breach

Multifactor authentication prevented hackers from accessing the U.S. institution’s systems in the October campaign, documents show.

US advances on cyber goals amid rapidly changing threat environment, White House says

Cyber challenges in U.S. crosshairs include ransomware, AI, supply chain attacks and commercial spyware. A new version of an implementation plan might help address them.

CISA, FBI resuming talks with social media firms over disinformation removal, Senate Intel chair says

The Senate Intelligence Committee will hold an election security hearing in two weeks, according to Sen. Mark Warner, D-Va.

White House in talks with industry to build legal framework for software liability

As part of a broad cybersecurity strategy, the U.S. wants to create incentives for the tech industry to manufacture products and software that don’t contain major security flaws.

US sets sights on partnerships to counter cyberthreats, secure AI in new global cyber strategy

An update to US international cyberspace policy will leverage partnerships to defend against cyberattacks on critical infrastructure and help prevent surveillance misuses.

US warns of North Korean hackers using email security flaws for phishing attacks

The readout urges organizations to change email configurations to prevent the malign messages from reaching their inboxes.

Change Healthcare hasn't given VA details on hack-impacted veterans, top lawmaker says

Rep. Mike Bost, R-Ill., said the company has “impact attestations” on those affected but won’t provide them to VA.

House cyber chairman tries again to undo SEC cyber disclosure rules

Rep. Andrew Garbarino, a New York Republican, said he plans to get the measure into a House Financial Services markup.

NASA doesn't know if its spacecraft have adequate cyber defenses, GAO warns

The agency encourages its spacecraft programs to use an optional best practices guide when it comes to implementing cybersecurity requirements.

US warns of Russian hackers targeting operational technology in water systems

The advisory represents official U.S. confirmation that Russian operatives have breached water systems.

UnitedHealth CEO grilled over ‘clear national security threat’ from Change Healthcare hack

CEO Andrew Witty told members of Congress that UnitedHealth believes some members of the armed forces were exposed in the attack.

Critical infrastructure cyberattacks pushed NSA to unmask thousands of U.S. identities through spying law

The number of U.S. identity unmaskings NSA conducted in response to requests from other agencies through Section 702 of the Foreign Intelligence Surveillance Act tripled in 2023 compared to the prior year.