Category: Cybersecurity

CISA Declares a CVE ‘Quality Era’ as Vulnerability Volume Heads Toward 96,000 This Year

By Christopher Prawdzik | In Cybersecurity | October 8, 2026

CISA’s new framework shifts the CVE Program from growth to data quality as 2026 CVE counts head toward 96,000, the NVD rations enrichment and the weekly Vulnerability Bulletin ends Sept. 28. [Read more.]

FBI-Japan Advisory Says North Korea’s Contagious Interview Hackers Infected 30,000 Devices

By Christopher Prawdzik | In Cybersecurity | September 22, 2026

North Korean hackers posing as recruiters infected at least 30,000 computers in more than 100 countries over eight months, according to a joint advisory from law enforcement and intelligence agencies in the United States, Japan, Australia and Germany. The operators… [Read more.]

Record Patch Load Puts CISA’s New BOD 26-04 Under Pressure

By Christopher Prawdzik | In Cybersecurity | September 21, 2026

WASHINGTON — The remediation window for three actively exploited Linux kernel vulnerabilities closes today for federal civilian agencies. It is one of the most demanding deadlines yet under the Cybersecurity and Infrastructure Security Agency’s (CISA) new risk-based patching directive, and… [Read more.]

CISA Issues First Dedicated Guidance on Cyber Decoys as Defenders Confront Living-off-the-Land Intrusions

By Christopher Prawdzik | In Cybersecurity | September 18, 2026

WASHINGTON — The Cybersecurity and Infrastructure Security Agency has published its first guidance document devoted specifically to defensive cyber deception, urging critical infrastructure owners and operators to seed their networks with realistic decoy systems and data as a counter to… [Read more.]

Department of Energy and FERC Enforce Mandatory Geomagnetic and EMP Standards for Bulk Power System

By Christopher Prawdzik | In Cybersecurity, Top411 | May 19, 2026

WASHINGTON — The Federal Energy Regulatory Commission and the North American Electric Reliability Corporation have finalized binding reliability standards requiring electric transmission utilities to install physical defenses against ext... [Read more.]

Interagency Advisory Details Pre-Positioned Living-off-the-Land Cyber Intrusions in Utility Networks

By Christopher Prawdzik | In Cybersecurity, Top411 | August 14, 2025

WASHINGTON — In one of the most sobering cybersecurity warnings in federal history, CISA, the NSA, and the FBI have revealed that Chinese state-sponsored threat group "Volt Typhoon" has pre-positioned malicious access within American wat... [Read more.]

Post-Quantum Cryptography: NIST Standards Trigger Interagency Encryption Migration Roadmap

By Sandra Sadek | In Cybersecurity, Top411 | January 22, 2025

WASHINGTON — Following the publication of finalized Federal Information Processing Standards for post-quantum encryption, the White House Office of Management and Budget has directed all federal civilian departments to initiate binding a... [Read more.]

Federal Evaluation Highlights Rapid Adoption of CISA Cross-Sector Cybersecurity Performance Goals

By Christopher Prawdzik | In Cybersecurity, Top411 | November 19, 2024

WASHINGTON — A comprehensive interagency progress assessment reveals that small and medium-sized critical infrastructure operators have achieved substantial improvements in baseline cyber hygiene by adopting CISA’s Cross-Sector Cybersecu... [Read more.]

Executive Order Strengthens Maritime Cyber Defense and Domestic Port Gantry Crane Security

By Christopher Prawdzik | In Cybersecurity, Top411 | February 21, 2024

WASHINGTON — President Joe Biden has signed an Executive Order granting the U.S. Coast Guard sweeping new regulatory authorities to secure commercial maritime ports against foreign cyber espionage and potential physical sabotage targetin... [Read more.]

Intelligence Community Warns of Generative AI Integration in Asymmetric Cyber Operations

By Christopher Prawdzik | In Cybersecurity, Top411 | May 23, 2023

WASHINGTON — Senior intelligence officials and CISA analysts have released an unclassified advisory warning that foreign state-sponsored cyber adversaries and ransomware cartels are weaponizing commercial and open-source generative artif... [Read more.]

1 2 3 4 Older Dispatches »