Explore

Quantum Computing Poses Long-Term Cybersecurity Risk for Community Banks, Requires Proactive Vendor Management

Quantum Computing Poses Long-Term Cybersecurity Risk for Community Banks, Requires Proactive Vendor Management

Quantum Computing Poses Long-Term Cybersecurity Risk for Community Banks, Requires Proactive Vendor Management

Dealerships Face Heightened Cyber Threats, Emphasizing Need for Visibility Beyond Compliance

Dealerships Face Heightened Cyber Threats, Emphasizing Need for Visibility Beyond Compliance

Dealerships Face Heightened Cyber Threats, Emphasizing Need for Visibility Beyond Compliance

Baker McKenzie Partner Sumon Dantiki Comments on Reported FBI Data Breach in The New York Times

Baker McKenzie Partner Sumon Dantiki Comments on Reported FBI Data Breach in The New York Times

Sumon Dantiki, a Partner at Baker McKenzie and Co-Chair of the firm's National Security Practice, was quoted in a recent article published in The New York Times. The article discussed claims made by a hacking group regarding the alleged acquisition of sensitive personnel records belonging to thousands of current and former FBI employees. Mr. Dantiki, who previously served as a federal cybercrime prosecutor and Senior Counselor to the Director of the US Federal Bureau of Investigation, provided expert commentary on the incident. He emphasized that such cyberthreats are a reminder that any organization can be affected and highlighted the serious public safety and counterintelligence risks associated with such a breach.

Reps. Carter and Thompson Reintroduce Bill to Establish CISA AI Security Task Force

Reps. Carter and Thompson Reintroduce Bill to Establish CISA AI Security Task Force

Congressman Troy A. Carter, Sr. (D-LA) and Congressman Bennie G. Thompson (D-MS), Ranking Member of the House Homeland Security Committee, have reintroduced the Cybersecurity and Infrastructure Security Agency (CISA) Securing Artificial Intelligence (AI) Task Force Act. This legislation aims to create a dedicated task force within CISA, a component of the Department of Homeland Security (DHS), to address the evolving safety and national security challenges posed by artificial intelligence. The proposed task force would coordinate AI-related directives and activities across various CISA offices and divisions. Its responsibilities would include assessing relevant safety and security initiatives, advising stakeholders on potential cyber risks associated with AI deployment, and identifying workforce gaps within the agency related to AI. The bill mandates that the CISA Director establish this task force within one year of the act's enactment and provide biannual briefings to the House Homeland Security Committe...

Federal Buildings Face Merged Security and Facilities Management Challenges

Federal Buildings Face Merged Security and Facilities Management Challenges

Federal buildings are experiencing a significant shift where facilities management and information security are merging, a change that was not necessarily planned but is now underway. Historically, operational technology (OT) networks, such as building automation systems, were isolated from enterprise IT networks. However, modern facilities increasingly see OT and IT sharing the same physical infrastructure, like structured cabling and switching. While OT traffic is logically segregated into its own VLANs, this integration means building systems are no longer physically isolated and fall under the purview of the Chief Information Officer (CIO) for defense. Devices within these systems, such as field controllers, now authenticate users, hold credentials, run patchable firmware, and export data, making them information systems regardless of their traditional labels. This integration brings them under the scope of the Federal Information Security Modernization Act (FISMA), requiring agencies to secure these s...

DOJ and FBI Disrupt Chinese Hacking Group Flax Typhoon Targeting U.S. Critical Infrastructure

DOJ and FBI Disrupt Chinese Hacking Group Flax Typhoon Targeting U.S. Critical Infrastructure

The Department of Justice (DoJ) and the FBI have successfully disrupted the operations of Flax Typhoon, a Chinese hacking group allegedly linked to the Chinese government. This disruption involved seizing internet domains and tools used by the group in its cyber espionage activities. According to the DoJ, Flax Typhoon, associated with Integrity Technology Group, targeted various U.S. critical infrastructure sectors, including Government Services and Facilities, Critical Manufacturing, Healthcare and Public Health, and Information Technology. The group utilized a botnet of infected internet-of-things (IoT) devices, a variant of Mirai malware, to facilitate vulnerability scanning with a tool called Microscan. Another tool, FishHub, was used for spear phishing to exploit computer networks. Targets included a U.S. power company in South Carolina, as well as international entities like airports in Japan and Poland, and critical infrastructure and universities in Taiwan. The FBI's Cyber Division head, Brett Leat...

Google Workspace Introduces Alert Status Management for Enhanced Security Operations

Google Workspace Introduces Alert Status Management for Enhanced Security Operations

Google Workspace Introduces Alert Status Management for Enhanced Security Operations

Amazon Web Services Seeks Manager for Bespoke Solutions Team to Enhance Network Development Engineering

Amazon Web Services Seeks Manager for Bespoke Solutions Team to Enhance Network Development Engineering

Amazon Web Services Seeks Manager for Bespoke Solutions Team to Enhance Network Development Engineering

Rehmann Offers Cybersecurity Gap Analysis to Address Rising AI Risks for Businesses

Rehmann Offers Cybersecurity Gap Analysis to Address Rising AI Risks for Businesses

Rehmann Offers Cybersecurity Gap Analysis to Address Rising AI Risks for Businesses

Data Privacy Emphasized as Crucial for Responsible Information Handling in Digital Age

Data Privacy Emphasized as Crucial for Responsible Information Handling in Digital Age

Data privacy is increasingly recognized as essential for ensuring personal information is collected, used, stored, and shared responsibly, granting individuals appropriate control over their data. It focuses on questions such as who can use information, why it is collected, how long it is retained, and whether proper consent has been obtained. While closely related to data security, which protects information from unauthorized access, data privacy specifically addresses the appropriate and ethical handling of data. This includes understanding how digital platforms manage information throughout its lifecycle and recognizing that some categories of information require stronger protection due to potential harm from misuse.

BAE Systems, Inc. Seeks EMI Engineer for Aerospace and Defense Electronics in Nashua, NH

BAE Systems, Inc. Seeks EMI Engineer for Aerospace and Defense Electronics in Nashua, NH

BAE Systems, Inc., the U.S. subsidiary of the international defense, aerospace, and security company BAE Systems plc, is actively seeking an EMI Engineer for its facility in Nashua, New Hampshire. This role is critical for designing and validating electromagnetic interference/electromagnetic compatibility (EMI/EMC) solutions for advanced aerospace and defense electronics. The engineer will be responsible for reviewing electromagnetic environmental effects (E3) requirements, guiding design decisions related to printed circuit boards (PCB), cabling, shielding, grounding, filtering, and packaging. Additionally, the position involves developing interference simulation models, preparing compliance plans and test documentation, and troubleshooting EMC test failures. Collaboration with engineering teams is essential to ensure product compliance. The role is fully onsite and requires the ability to obtain and maintain a Department of Defense (DoD) security clearance. BAE Systems, Inc. delivers a comprehensive rang...

Erie Insurance Seeks IT Info Security Specialist Amidst Modernization Efforts

Erie Insurance Seeks IT Info Security Specialist Amidst Modernization Efforts

Erie Insurance Seeks IT Info Security Specialist Amidst Modernization Efforts