Cybersecurity Month
-
Effective EDR: Balancing testing rigor and velocity
Various industries are still dealing with the consequences of the July 2024 technology outage which led to a “blue screen of death” and extreme disruptions.
-
A new way to ensure government and industry have enough cybersecurity people
“We could view cybersecurity as an entry level problem, but it is probably more of an intermediate and advanced role problem,” Keith Clement said.
-
DoD wringing out zero trust concepts under assessment process
The Pentagon is also working with major cloud service providers like Microsoft and Google to evaluate their zero trust implementations.
-
A holistic approach to transitioning to a fully mature zero trust architecture
Implementing zero trust requires a significant cultural shift within all levels of an agency, as zero trust does not start and stop with IT professionals.
-
Addressing the public sector’s penetration testing problems
While there’s no such thing as a silver bullet solution to secure the public sector, continuous pentesting addresses these issues head-on.
-
DoJ revising vulnerability disclosure framework to encourage AI red teaming
DoJ says its policy will encourage independent security and safety research, but will large AI companies follow suit in encouraging vulnerability disclosure?
-
CISA faces challenges to sharing cyber threat information
The IG said CISA made some good improvements to the Automated Indicator Sharing program in recent years.
-
After Change Healthcare, HHS building cyber incident response team
In the wake of the Change Healthcare ransomware attack, HHS has been expanding its “one-stop shop” for working with the healthcare sector on cyber issues.