Cybersecurity

The intrusion by a hacking group affiliated with the People's Republic of China called Storm-0558 into the Microsoft Exchange Online service during the summer of 2023 could have been prevented,...

Randy Resnick, director of the Zero Trust Portfolio Management Office within the Department of Defense’s Office of the Chief Information Officer, said the CIO office plans to automate its review...

The Department of Defense has formed a new office that will be responsible for the development, coordination and oversight of the implementation of cyberspace policy and strategy in alignment with...

Col. Craig Frank, chief information officer of Space Systems Command, has underscored the necessity of implementing a "flat, zero trust network" to ensure the security of information while in use....

The Cybersecurity and Infrastructure Security Agency has issued a notice of proposed rulemaking, or NPRM, to solicit comments on a proposed rule to implement the requirements of the Cyber Incident...

The Department of Defense has published its new Defense Industrial Base Cybersecurity Strategy, dubbed DIB CS, to advance the department’s cyber posture. The plan, which covers fiscal years 2024-2027, is intended...

The Cybersecurity and Infrastructure Security Agency and the FBI have released a joint alert urging technology manufacturers to eliminate SQL injection vulnerabilities in software. The Secure by Design Alert was...

Retired Rear Adm. Mark Montgomery, a senior fellow at the Foundation for Defense of Democracies and senior director of the Center on Cyber and Technology Innovation, and Columbia University's Erica...

The Advanced Research Projects Agency for Health is now working with the Defense Advanced Research Projects Agency on the Artificial Intelligence Cyber Challenge. The two-year contest, also known as AIxCC,...

The Cybersecurity and Infrastructure Security Agency, along with the FBI and the Multi-State Information Sharing and Analysis Center, has updated its guidance regarding distributed denial-of-service — or DDoSS — attacks...