cisa

Federal-level web security for K-12 schools: Isolation holds the key
I recently had an opportunity to catch a fascinating talk by Alaina Clark, assistant director for stakeholder engagement for Cybersecurity and Infrastructure Security Agency (CISA). A trusted advisor for security professionals in ...

Wading Back Into the Software Liability Cesspool
Time must be a flat circle—it seems that every couple of years, someone brings up the topic of software liability. Just stay in one place, and soon enough, the train will come ...

Innovation at the Expense of Cybersecurity? No More!
Earlier this month, Jen Easterly and Eric Goldstein of the Cybersecurity and Infrastructure Security Agency (CISA) at the Department of Homeland Security signaled a major shift in the federal government’s approach to ...

New Ransomware Payment Reporting Requirements on Horizon
January 9, 2023, was the deadline for financial services companies doing business in New York (including cryptocurrency entities with a Bit license) to comment on new proposed cybersecurity regulations which would mandate, ...
New CISA Strategy Focused on Resilience, Inevitability of Data Breaches
A newly released strategic plan issued by the Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to improve on traditional cybersecurity prevention and detection approaches that focus on perimeter defense ...

Critical Infrastructure’s Open Source Problem
Open source has a security problem, and that could have real-world impact when it affects critical infrastructure. According to research from Synopsis, 78% of code in codebases is open source, and 81% ...

How VulnDB Is Helping Organizations Prevent Future Ransomware Attacks
For over 300,000 vulnerabilities, Flashpoint now provides our Ransomware Likelihood score. This capability can only be found in VulnDB, the most comprehensive source of vulnerability intelligence available. The post How VulnDB Is ...

Basic but Powerful – CISA’S Cybersecurity Performance Goals
CISA’S cybersecurity performance goals are an important first step to helping resource strapped critical infrastructure organizations improve cyber posture. Read More The post Basic but Powerful – CISA’S Cybersecurity Performance Goals appeared ...

Timeline: CISA and the Biden Administration’s Impact on Cybersecurity
The US president and Cybersecurity and Infrastructure Security Agency, or CISA, has steadily followed through with plans to implement new mandates intended, hone regulations, and improve the nation’s security posture. The post ...

CISA Directs Federal Agencies to Boost System Visibility
The Cybersecurity and Infrastructure Security Agency (CISA) this week issued Binding Operational Directive (BOD) 23-01 to improve vulnerability detection and identify weaknesses in federal civilian agencies’ systems and networks. Dubbed “Improving Asset ...