From Volt Typhoon to Salt Typhoon, major cyber incidents in 2024 shined a spotlight on how agencies are managing cyber threats to critical infrastructure.

Jane Rathbun, the Department of the Navy’s CIO, said tools from NSA and NCIS along with a new initiative could help small firms meet CMMC requirements.

Under a new plan, about one-third of CISA’s staff will keep working through a shutdown. But experts are still concerned about the impact on U.S. cyber defenses.

CISA is telling agencies they need to follow the “SCuBA” cloud security configurations for widely used applications, including Microsoft 365 products.

The draft national cyber incident response plan comes eight years after the last update, and more than six years after the creation of CISA itself.

The role of the White House national cyber director has emerged as a key issue for former cyber officials as the Trump administration prepares to take over.

CISA has worked with agencies in recent years to expand data captured by the CDM program, improve log retention, and boost network threat hunting operations.

A provision that made it into the compromise legislation will give the Defense Department components more authority to purchase alternative cyber products.