Cybersecurity

Tech firms pledge to release products with built-in security features

The Cybersecurity and Infrastructure Security Agency has been trying to get companies to agree to its "secure by design" paradigm for months.

Cybersecurity

Thwarted cyberattack targeted Library of Congress in tandem with October British Library breach

Multifactor authentication prevented hackers from accessing the U.S. institution’s systems in the October campaign, documents show.

Cybersecurity

US advances on cyber goals amid rapidly changing threat environment, White House says

Cyber challenges in U.S. crosshairs include ransomware, AI, supply chain attacks and commercial spyware. A new version of an implementation plan might help address them.

Cybersecurity

CISA, FBI resuming talks with social media firms over disinformation removal, Senate Intel chair says

The Senate Intelligence Committee will hold an election security hearing in two weeks, according to Sen. Mark Warner, D-Va.

Cybersecurity

White House in talks with industry to build legal framework for software liability

As part of a broad cybersecurity strategy, the U.S. wants to create incentives for the tech industry to manufacture products and software that don’t contain major security flaws.

Cybersecurity

US sets sights on partnerships to counter cyberthreats, secure AI in new global cyber strategy

An update to US international cyberspace policy will leverage partnerships to defend against cyberattacks on critical infrastructure and help prevent surveillance misuses.

Cybersecurity

US warns of North Korean hackers using email security flaws for phishing attacks

The readout urges organizations to change email configurations to prevent the malign messages from reaching their inboxes.

Cybersecurity

Change Healthcare hasn't given VA details on hack-impacted veterans, top lawmaker says

Rep. Mike Bost, R-Ill., said the company has “impact attestations” on those affected but won’t provide them to VA.

Cybersecurity

House cyber chairman tries again to undo SEC cyber disclosure rules

Rep. Andrew Garbarino, a New York Republican, said he plans to get the measure into a House Financial Services markup.

Cybersecurity

NASA doesn't know if its spacecraft have adequate cyber defenses, GAO warns

The agency encourages its spacecraft programs to use an optional best practices guide when it comes to implementing cybersecurity requirements.

Cybersecurity

US warns of Russian hackers targeting operational technology in water systems

The advisory represents official U.S. confirmation that Russian operatives have breached water systems.

Cybersecurity

UnitedHealth CEO grilled over ‘clear national security threat’ from Change Healthcare hack

CEO Andrew Witty told members of Congress that UnitedHealth believes some members of the armed forces were exposed in the attack.

Cybersecurity

Critical infrastructure cyberattacks pushed NSA to unmask thousands of U.S. identities through spying law

The number of U.S. identity unmaskings NSA conducted in response to requests from other agencies through Section 702 of the Foreign Intelligence Surveillance Act tripled in 2023 compared to the prior year.

Cybersecurity

Critical infrastructure blueprint gets long-awaited update but maintains status quo on key sectors

The memorandum reaffirms the statutory authority of America’s top cyber agency, but doesn’t update the primary list of critical sectors that can be targeted in cyberattacks, notably leaving out space infrastructure

Cybersecurity

VA is warning veterans about Change Healthcare cyberattack, secretary says

“There’s no confirmation yet” that veterans’ data was leaked by the ransomware attack, according to the VA secretary, but the department is proactively alerting millions of veterans and beneficiaries to be safe. 

Cybersecurity

Change Healthcare attack did not result in harm to veteran care, VA says

The Department of Veterans Affairs said the ransomware attack impacted just over 40,000 veterans’ prescription orders but that it moved to quickly fill the requests.

Cybersecurity

CISA to issue list of software products critical to agency security by end of September

The software offerings are crucial for federal cybersecurity because of certain privileges and controls they enable, as defined by NIST.

Cybersecurity

House passes bill barring spy agencies, law enforcement from buying Americans’ personal data

The measure doesn’t have support from the Biden administration, which argues it threatens national security and worsens Americans’ privacy protections.