Explore

Rapid ReadRapid Read
Rainey Center Advocates for Standards-Based Grid Security Over Country of Origin

Rainey Center Advocates for Standards-Based Grid Security Over Country of Origin

The Joseph Rainey Center for Public Policy has released a new policy brief titled 'Securing the Grid While Growing the Grid,' which argues that the security of the U.S. electric grid should be determined by rigorous cybersecurity standards rather than solely by the country of origin of its equipment. Sarah E. Hunt, President and CEO of the Joseph Rainey Center, stated that while the origin of equipment is a risk signal, the critical factors are who can access it, who controls its software and updates, and the trustworthiness of its communications. The brief suggests that existing frameworks from organizations like NERC, NIST, IEEE, UL, and IEC already provide measurable standards for supply-chain security, operational technology, software integrity, access controls, and industrial control systems. The Center recommends that federal policymakers prioritize verified software, U.S.-controlled operations, independent testing, and protected operational data, while preserving exclusion as a tool for equipment th...
Rapid ReadRapid Read
Federal Agencies Face Challenges in Post-Quantum Cryptography Migration for Smart Identity Cards

Federal Agencies Face Challenges in Post-Quantum Cryptography Migration for Smart Identity Cards

Federal agencies are encountering significant hurdles in their efforts to migrate to post-quantum cryptography (PQC), particularly concerning the integration with smart identity cards like Personal Identity Verification (PIV) and Common Access Cards (CACs). The Office of Management and Budget (OMB) and the Office of the National Cyber Director have mandated that agencies submit their PQC migration plans by the end of October. However, experts from the Department of Defense (DoD), Cybersecurity and Infrastructure Security Agency (CISA), and the National Institute of Standards and Technology (NIST) indicate that many agencies are behind schedule. A primary issue is the lack of a comprehensive inventory of cryptographic systems, which is crucial for effective planning and risk assessment. Patrick Manley, CISA's lead for quantum security, highlighted that current inventory processes are often inconsistent and treated as mere compliance checks rather than tools for true visibility. Britta Hale, DoD's director o...
Rapid ReadRapid Read
Anthropic Launches Cybersecurity Program to Protect Critical Infrastructure and Open-Source Software with AI

Anthropic Launches Cybersecurity Program to Protect Critical Infrastructure and Open-Source Software with AI

Anthropic has introduced a new program aimed at bolstering cybersecurity for critical infrastructure and open-source software. This initiative combines Anthropic's advanced AI tools, specifically Claude models, with the expertise of various cybersecurity companies. The program involves Anthropic engineers and threat research collaborating with partners such as Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation. The goal is to identify and remediate cybersecurity vulnerabilities. Anthropic has already provided its frontier models and technical support to over half of U.S. states and major critical infrastructure operators, assisting with code scanning, patching, incident response, and red teaming activities. The company emphasizes that while AI cannot solve all critical infrastructure defense challenges, it can significantly help in finding and fixing weaknesses before they are exploited to disrupt essential services...
Rapid ReadRapid Read
RAND Corporation Seeks Information Scientists for Applied Technology Policy Research

RAND Corporation Seeks Information Scientists for Applied Technology Policy Research

The RAND Corporation, a non-profit, non-partisan organization renowned for its rigorous and objective research, is actively seeking Information Scientists to join its team. These roles are focused on contributing to impactful research in national security policy and other critical policy challenges. RAND researchers are expected to lead innovative projects that deliver objective, reliable insights for policymakers and the public. The responsibilities of Information Scientists include examining complex policy problems through innovative research approaches such as modeling and simulation, and novel artificial intelligence (AI)-enabled tools. They will execute research using a broad range of analytically rigorous quantitative and qualitative methods, interpret results to support stakeholder decision-making, and communicate findings to policymakers and the public through written products and oral presentations. The positions are available in Washington, DC; Santa Monica, CA; and Pittsburgh, PA.
TrendlineTrendline
Dealerships Face Heightened Cyber Threats, Emphasizing Need for Visibility Beyond Compliance

Dealerships Face Heightened Cyber Threats, Emphasizing Need for Visibility Beyond Compliance

Dealerships Face Heightened Cyber Threats, Emphasizing Need for Visibility Beyond Compliance
Rapid ReadRapid Read
Federal Buildings Face Merged Security and Facilities Management Challenges

Federal Buildings Face Merged Security and Facilities Management Challenges

Federal buildings are experiencing a significant shift where facilities management and information security are merging, a change that was not necessarily planned but is now underway. Historically, operational technology (OT) networks, such as building automation systems, were isolated from enterprise IT networks. However, modern facilities increasingly see OT and IT sharing the same physical infrastructure, like structured cabling and switching. While OT traffic is logically segregated into its own VLANs, this integration means building systems are no longer physically isolated and fall under the purview of the Chief Information Officer (CIO) for defense. Devices within these systems, such as field controllers, now authenticate users, hold credentials, run patchable firmware, and export data, making them information systems regardless of their traditional labels. This integration brings them under the scope of the Federal Information Security Modernization Act (FISMA), requiring agencies to secure these s...
Rapid ReadRapid Read
Nebraska Governor Declares Emergency Following Cyberattack on Lincoln County and North Platte

Nebraska Governor Declares Emergency Following Cyberattack on Lincoln County and North Platte

Nebraska Governor Jim Pillen has declared a state of emergency in response to a cyberattack that has significantly impacted Lincoln County and the city of North Platte. The proclamation authorizes the deployment of the Nebraska National Guard Cyber Protection Team to assist local jurisdictions. According to a news release from Lincoln County, the incident involved a breach in software used by both the county and the city, leading to widespread disruptions in internet and phone services. While 911 and other emergency services remain operational, some city and all county phones are currently down. The North Platte Public Safety Building's phones are functional, but the Lincoln County Sheriff’s office phones are not. Officials have stated that there does not appear to be any breach of "pertinent information." The Nebraska Emergency Management Agency is coordinating with state and local partners, including private sector cybersecurity experts, to address the attack and identify its cause.
TrendlineTrendline
IBM and Zscaler Partner with Red Hat to Enhance Application Security During Vulnerability Windows

IBM and Zscaler Partner with Red Hat to Enhance Application Security During Vulnerability Windows

IBM and Zscaler Partner with Red Hat to Enhance Application Security During Vulnerability Windows
TrendlineTrendline
IBM, Red Hat, and Zscaler Collaborate to Enhance Enterprise Application Security

IBM, Red Hat, and Zscaler Collaborate to Enhance Enterprise Application Security

IBM, Red Hat, and Zscaler Collaborate to Enhance Enterprise Application Security
TrendlineTrendline
IBM and Red Hat Remediate Over 400 Open Source Vulnerabilities, Launch Clearinghouse

IBM and Red Hat Remediate Over 400 Open Source Vulnerabilities, Launch Clearinghouse

IBM and Red Hat Remediate Over 400 Open Source Vulnerabilities, Launch Clearinghouse
Rapid ReadRapid Read
Anthropic Unveils Cyber Mission to Enhance U.S. Critical Infrastructure and Open-Source Software Security with AI

Anthropic Unveils Cyber Mission to Enhance U.S. Critical Infrastructure and Open-Source Software Security with AI

Anthropic has launched its Cyber Mission, a long-term commitment to bolster the security of critical infrastructure and open-source software systems. This initiative introduces two key programs: the Critical Infrastructure Defense Program (CIDP) and the OSS Scanner. The CIDP will provide frontier Claude models, on-site engineers, and threat research to trusted providers securing operational technology (OT) in sectors like power grids, water systems, and transportation networks. Founding partners include Accenture, Booz Allen, CrowdStrike, Deloitte, and Palo Alto Networks. The OSS Scanner offers free, regular security scans from Anthropic's most capable models to open-source projects, providing reports with potential bug exploitation proofs, explanations, and suggested fixes. This move comes as AI models are increasingly available to attackers, and Anthropic aims to shift the advantage towards defense by deploying AI-powered tools and expertise where resource shortages are most acute.
AP NewsAP News
The FBI has seized tools used by Chinese hackers for cyber operations, officials say

The FBI has seized tools used by Chinese hackers for cyber operations, officials say

The FBI has seized scanning and phishing tools used by a group of hackers that officials say is associated with the Chinese government and that is responsible for disruptive cyber operations in the United States and abroad, including against the power industry, academia and critical infrastructure