Explore

Rapid ReadRapid Read
CISA Urged to Issue Binding Directive for Federal Operational Technology Cybersecurity

CISA Urged to Issue Binding Directive for Federal Operational Technology Cybersecurity

A coalition of cybersecurity firms and critical infrastructure operators is urging the Cybersecurity and Infrastructure Security Agency (CISA) to issue a binding operational directive (BOD) specifically for federal agencies to protect their operational technology (OT) systems. This recommendation comes in the wake of recent attacks on water utilities, highlighting vulnerabilities in critical infrastructure. The Operational Technology Cybersecurity Coalition suggests that such a directive should clearly define responsibilities for OT system protection within each agency, leverage existing federal guidelines, and establish minimum cybersecurity practices. The coalition emphasizes the need for this BOD due to CISA's current lack of comprehensive visibility into the OT devices across federal agencies, the inconsistency in OT security policies, and the severe potential consequences of a successful attack on federal OT systems. A Government Accountability Office report from last month indicated that most federal...
FactFableFactFable
“Approve or Deny?” Is the Cybersecurity Awareness Month Question Attackers Exploit

“Approve or Deny?” Is the Cybersecurity Awareness Month Question Attackers Exploit

During Cybersecurity Awareness Month, learn how attackers exploit the 'Approve or Deny' login notifications and what you can do to prevent MFA fatigue.
FactFableFactFable
Why Cybersecurity Awareness Month Is the Perfect Time to Talk About Ransomware Recovery

Why Cybersecurity Awareness Month Is the Perfect Time to Talk About Ransomware Recovery

October is Cybersecurity Awareness Month, a prime opportunity to shift focus from just prevention to building a robust ransomware recovery plan.
FactFableFactFable
“Do Not Click the Link” Is No Longer Enough for Cybersecurity Awareness Month

“Do Not Click the Link” Is No Longer Enough for Cybersecurity Awareness Month

As Cybersecurity Awareness Month begins, learn why old advice is outdated and how to defend against modern threats like AI phishing and MFA fatigue.
TrendlineTrendline
IBM Acquires UK-Based Logiq Consulting to Bolster Secure Digital Transformation Capabilities

IBM Acquires UK-Based Logiq Consulting to Bolster Secure Digital Transformation Capabilities

IBM Acquires UK-Based Logiq Consulting to Bolster Secure Digital Transformation Capabilities
FactFableFactFable
From Password Hygiene to AI Defense: The Cybersecurity Awareness Month Upgrade

From Password Hygiene to AI Defense: The Cybersecurity Awareness Month Upgrade

Cybersecurity Awareness Month is here, but the threats have evolved. Learn why old advice isn't enough and how to defend against new AI-powered attacks.
FactFableFactFable
“This Looks Like My Boss” Is the New Cybersecurity Awareness Month Problem

“This Looks Like My Boss” Is the New Cybersecurity Awareness Month Problem

This October, Cybersecurity Awareness Month faces a new challenge as AI-driven deepfake scams impersonate executives with alarming accuracy.
Rapid ReadRapid Read
Florida Atlantic University Secures $200,000 NIST Grant for Quantum Cybersecurity Workforce Development

Florida Atlantic University Secures $200,000 NIST Grant for Quantum Cybersecurity Workforce Development

Florida Atlantic University (FAU) has received a $200,000 cooperative agreement from the U.S. Department of Commerce’s National Institute of Standards and Technology (NIST). This award is part of NIST’s Regional Alliances and Multistakeholder Partnerships to Stimulate (RAMPS) Cybersecurity Education and Workforce Development program. The grant will establish a regional quantum cybersecurity workforce ecosystem across South Florida and the Treasure Coast. The program, titled 'Building the Quantum Cybersecurity Workforce in the Palm Beach and Treasure Coast Region,' will integrate quantum computing, cybersecurity, and critical infrastructure training. It will feature workshops, curriculum development, case studies, online materials, mentoring, and internships. FAU will collaborate with D-Wave Quantum Inc., government agencies, industry partners, K-12 schools, and community organizations. The project leverages FAU’s existing NSF-supported CyberCorps SFS and CyberTraining initiatives, as well as its growing qu...
Rapid ReadRapid Read
Senator Amy Klobuchar and Senator Adam Schiff Introduce Water Safety Shield Act to Bolster Cybersecurity for U.S. Water Systems

Senator Amy Klobuchar and Senator Adam Schiff Introduce Water Safety Shield Act to Bolster Cybersecurity for U.S. Water Systems

Senators Amy Klobuchar (D-Minn.) and Adam Schiff (D-Calif.) have introduced the Water Safety Shield Act, a legislative initiative aimed at significantly enhancing the cybersecurity of U.S. water systems. This bill proposes the implementation of tiered cybersecurity standards for the water sector and allocates a substantial annual budget of $600 million specifically for water cybersecurity. The introduction of this act follows a series of cyberattacks by Iranian hackers on water systems in 12 states during the summer, which underscored the vulnerability of these critical infrastructures to foreign adversaries. The legislation seeks to move beyond previous, less prescriptive efforts to improve resilience in the sector, addressing the technical, legal, and practical challenges that make U.S. water systems susceptible to cyber threats, including the increasing sophistication of AI-driven attacks.
FactFableFactFable
Before and After AI Phishing: How Cybersecurity Awareness Month Has Changed

Before and After AI Phishing: How Cybersecurity Awareness Month Has Changed

Generative AI has transformed phishing from clumsy scams into sophisticated, personalized attacks. Here's how our defense strategies must evolve.
Rapid ReadRapid Read
Federal Agencies Mandated to Protect Information with NIST SP 800-53 Controls

Federal Agencies Mandated to Protect Information with NIST SP 800-53 Controls

The Federal Information Security Modernization Act of 2014 (FISMA) requires all federal agencies and their contractors to safeguard federal information. This protection must adhere to the NIST SP 800-53 control catalog, which outlines security and privacy controls for information systems and organizations. Companies like XQ are providing solutions to enforce these controls at the data layer, specifically covering access control (AC), audit (AU), identification (IA), communications protection (SC), and integrity (SI) control families. While XQ enforces policies, the responsibility for defining these policies and procedures, such as AC-1, AU-1, and IA-1, remains with the individual agencies. Other controls, like logon-attempt limits (AC-7) and input validation (SI-10), are handled by identity providers and applications, respectively, simplifying control inheritance documentation in system security plans. XQ's approach has been validated for the Data pillar of AWS ZTAG-I, AWS’s reference zero trust architectu...
TrendlineTrendline
Deloitte Managing Director Tiffany Kleemann Advises on Cyber Security Risk and Governance

Deloitte Managing Director Tiffany Kleemann Advises on Cyber Security Risk and Governance

Deloitte Managing Director Tiffany Kleemann Advises on Cyber Security Risk and Governance