Policy & Regulation: Page 14
-
gorodenkoff via Getty Images
Threat actors are using remote monitoring software to launch phishing attacks
A joint warning from CISA, the NSA and MS-ISAC warns APT actors could leverage legitimate tools using help-desk themed lures to gain persistence.
By David Jones • Jan. 26, 2023 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
CISA issues baseline cybersecurity recommendations for K-12 schools
Insufficient funding and IT staffing levels make many CISA recommendations difficult for K-12 schools to achieve.
By Matt Kapko • Jan. 26, 2023 -
solarseven via Getty Images
World Economic Forum officials warn global instability could lead to catastrophic cyber event
A report released at the WEF said top business leaders and security experts fear heightened geopolitical tensions could result in a major attack in the next two years.
By David Jones • Jan. 19, 2023 -
qingwa via Getty Images
SEC aims to tighten cybersecurity, climate rules before May
The agency aims in early 2023 to complete several new regulations, many of them focused on increasing disclosures for investors.
By Jim Tyson • Jan. 17, 2023 -
Matt Kapko/Cybersecurity Dive
CISA’s 2022 highlight reel details progress and potential for security coordination
The agency acted on 2,609 cyber incidents and produced 416 vulnerability advisories in 2022.
By Matt Kapko • Jan. 17, 2023 -
grapestock via Getty Images
Surging cyberthreats, data concerns remain top dispute risks for organizations
A survey from Baker McKenzie shows a heightened risk of legal challenges amid a rise in sophisticated cyberattacks, along with concerns about the regulatory response.
By David Jones • Jan. 12, 2023 -
DKosig via Getty Images
FCC revives push to speed up telecom incident disclosures
Telecom operators are a primary target for threat actors. A change to breach reporting rules is long overdue, one analyst said.
By Matt Kapko • Jan. 10, 2023 -
CES
Tech priorities out of sync with security needs, CISA director says
As long as priorities and incentives are misaligned, security and safety needs will remain unmet. “We can’t just let technology off the hook,” Jen Easterly said.
By Matt Kapko • Jan. 9, 2023 -
Kevin Dietsch / Staff via Getty Images
National Cyber Director eyes retirement: report
The inaugural cybersecurity chief at the White House assumed the role in June 2021 following a nearly three decade career at the NSA.
By Matt Kapko • Dec. 22, 2022 -
Chris McGrath via Getty Images
Despite enforcement delays, attorneys urge preparation for AI, privacy laws
New legislation extends to employers with applicants or workers who are residents of New York City or California — and may be a harbinger of what’s to come elsewhere.
By Ginger Christ • Dec. 21, 2022 -
iStock / Getty Images Plus via Getty Images
NIST bids adieu to SHA-1 cryptographic algorithm
The widely used security specification has been insufficient since 2005, and won't fully sunset until 2030.
By Matt Kapko • Dec. 16, 2022 -
Drew Angerer via Getty Images
Google stresses unmet need for software supply chain security
The open source software ecosystem remains vulnerable, and fragmented efforts could stifle progress, according to Google.
By Matt Kapko • Dec. 8, 2022 -
Chip Somodevilla via Getty Images
Cyber Safety Review Board to probe Lapsus$ ransomware spree
Following an inaugural review of Log4j, the board will investigate the threat actor’s prolific campaign of cyber extortion against major companies, including Uber, T-Mobile and Nvidia.
By David Jones • Dec. 2, 2022 -
Kevin Frayer via Getty Images
FCC bans imports of telecom gear from China-based companies
The latest in a series of orders aligns the agency’s equipment authorization process with national security policies.
By Matt Kapko • Nov. 28, 2022 -
Mark Wilson/Staff via Getty Images
Defense Department launches zero trust, phasing out perimeter defense strategy
Private sector partners say the rollout will raise the security bar to better protect the entire defense industry ecosystem.
By David Jones • Nov. 23, 2022 -
CloudVisual via Getty Images
Offshore oil and gas at risk of potentially catastrophic cyberattack: GAO
A report warns the industry could see an attack that rivals the deadly 2010 Deepwater Horizon disaster and urges Interior Department officials to stand up safeguards.
By David Jones • Nov. 18, 2022 -
solarseven via Getty Images
Iran-linked threat actors exploiting Log4Shell via unpatched VMware, feds warn
The actors compromised a federal civilian agency, CISA and the FBI said. Authorities warned VMware users to assume breach and hunt for threats if they skipped patches or workarounds.
By David Jones • Nov. 16, 2022 -
onurdongel via Getty Images
Critical infrastructure providers ask CISA to place guardrails on reporting requirements
Top companies and industry groups fear incident reporting mandates would overwhelm CISA with noise.
By David Jones • Nov. 16, 2022 -
PeopleImages via Getty Images
Why privacy professionals should work closely with company engineers
Transcend's general counsel, Brandon Wiebe, said the increasingly technical nature of data privacy regulations requires cross-functional collaboration.
By Lyle Moran • Nov. 14, 2022 -
iStock via Getty Images
CISA wants to change how organizations prioritize vulnerabilities
Federal authorities want to take the guesswork and manual decision making processes out of the messy world of vulnerabilities.
By Matt Kapko • Nov. 14, 2022 -
Justin Sullivan / Staff via Getty Images
Twitter, amid security and compliance officer exodus, could run afoul of FTC rules
Regulatory attention is just the latest trouble for the embattled social media platform. Without chief security, privacy or compliance officers, following a consent decree becomes more difficult.
By Matt Kapko • Nov. 10, 2022 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by ismagilov via Getty Images
SolarWinds under SEC probe related to 2020 supply chain attack
The company also disclosed a proposed $26 million settlement of a class action suit related to the cyberattack.
By David Jones • Nov. 9, 2022 -
drnadig via Getty Images
Senator proposes cybersecurity mandates for health systems
Cybersecurity can no longer be treated as a secondary concern and must become incorporated into every organization’s core business model, according to the chairman of the Senate Select Committee on Intelligence.
By Susan Kelly • Nov. 8, 2022 -
anyaberkut via Getty Images
CISA demystifies phishing-resistant MFA
The “gold standard” safeguard isn’t a one-size-fits-all or all-or-nothing endeavor. For most organizations, a phased approach works best.
By Matt Kapko • Nov. 4, 2022 -
Courtesy of Brown and Caldwell
NIST seeks water industry feedback on boosting cyber resilience
The Biden administration is turning its security attention to the water and wastewater treatment industry, which has become vulnerable to cyberattacks as facilities grow more digital.
By David Jones • Nov. 4, 2022
Previous
