Tag: cisa
-
Secure by Design is likely dead at CISA. Will the private sector make good on its pledge?
Tags: cisa, cybersecurity, government, office, risk, risk-management, sbom, software, technology, toolCISA’s Secure by Design effort is ‘tiny’: Not everyone believes in the concept of security by design. Jeff Williams, founder and CTO of Contrast Security and creator of the first OWASP Top 10 list in 2002, told CSO that, in his view, the very first secure-by-design manual was the vaunted August 1983 “Orange Book” produced…
-
Schwachstelle in NTLM-Hashes – CISA warnt vor aktiven Attacken auf Windows
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-windows-sicherheitsluecke-alarm-cisa-a-b08f28d2e89b157520d6ac9c256fa33b/
-
CISA gets a deputy director as it braces for major layoffs
Madhu Gottumukkala, a state CIO, lacks the homeland security experience of his two predecessors. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-deputy-director-madhu-gottumukkala/746371/
-
CISA gets new No. 2: Madhu Gottumukkala
Tags: cisaHe served under then-South Dakota Gov. Kristi Noem, who now heads up the Department of Homeland Security. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-gets-new-no-2-madhu-gottumukkala/
-
Critical bugs in Siemens, Schneider Electric gear top CISA advisory
First seen on scworld.com Jump to article: www.scworld.com/news/critical-bugs-in-siemens-schneider-electric-gear-top-cisa-advisory
-
10 key questions security leaders must ask at RSA 2025
Tags: access, ai, api, application-security, authentication, automation, business, cisa, ciso, cloud, conference, control, corporate, cve, cyber, cybersecurity, data, defense, detection, edr, endpoint, fido, finance, gartner, google, government, healthcare, infrastructure, microsoft, mitigation, mitre, monitoring, mssp, network, nist, passkey, password, phone, programming, resilience, risk, risk-management, service, software, strategy, switch, threat, tool, training, vulnerability, zero-trustIs agentic AI more myth than reality?: Building on 2024’s AI enthusiasm, this year will be all about agentic AI, defined as “a type of AI that enables software systems to act autonomously, making decisions and taking actions based on goals, with minimal human intervention,” according to AI itself (source: Google Gemini). We’ll see lots…
-
Erodiert die Security-Reputation der USA?
Tags: business, ceo, china, cisa, ciso, cybersecurity, cyersecurity, endpoint, exploit, germany, governance, government, intelligence, iran, kaspersky, north-korea, service, strategy, threat, usaTrump stiftet Verunsicherung auch wenn’s um Cybersicherheit geht.Nachdem US-Präsident Donald Trump nun auch Cybersicherheitsunternehmen per Executive Order für abweichende politische Positionen abstraft, befürchten nicht wenige Branchenexperten, dass US-Sicherheitsunternehmen künftig ähnlich in Verruf geraten könnten wie ihre russischen und chinesischen Konkurrenten. Die zentralen Fragen sind dabei:Können sich CISOs beziehungsweise ihre Unternehmen künftig noch auf US-amerikanische Bedrohungsinformationen…
-
Cybersecurity Snapshot: NIST Aligns Its Privacy and Cyber Frameworks, While Researchers Warn About Hallucination Risks from GenAI Code Generators
Tags: access, advisory, ai, attack, breach, china, cisa, cisco, ciso, cloud, computer, control, csf, cve, cyber, cyberattack, cybersecurity, data, defense, encryption, espionage, exploit, firmware, framework, governance, government, group, hacker, hacking, healthcare, identity, infrastructure, Internet, LLM, malicious, mfa, mitigation, mitre, network, nist, open-source, password, phishing, privacy, risk, risk-assessment, router, service, software, strategy, supply-chain, technology, threat, tool, update, vulnerabilityCheck out NIST’s effort to further mesh its privacy and cyber frameworks. Plus, learn why code-writing GenAI tools can put developers at risk of package-confusion attacks. Also, find out what Tenable webinar attendees said about identity security. And get the latest on the MITRE CVE program and on attacks against edge routers. Dive into five…
-
CISA Weighs in on Alleged Oracle Cloud Breach
The agency is recommending that organizations and individuals implement its recommendations to prevent the misuse of stolen data, though Oracle has yet to publicly do the same for its customers. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/cisa-alleged-oracle-cloud-breach
-
Krebs Steps Down from SentinelOne, Vows to Fight Trump Attack
Chris Kreb, the former CISA director who has come under fire from President Trump for refusing to support claims at the 2020 election was tampered with, resigned from his position with cybersecurity vendor SentinelOne, telling employees that “this is my fight, not the company’s.” First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/krebs-steps-down-from-sentinelone-vows-to-fight-trump-attack/
-
U.S. CISA adds Apple products and Microsoft Windows NTLM flaws to its Known Exploited Vulnerabilities catalog
Tags: apple, cisa, cybersecurity, exploit, flaw, infrastructure, kev, microsoft, ntlm, vulnerability, windowsU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple products and Microsoft Windows NTLM flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple products and Microsoft Windows NTLM vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions of the flaws: This week Apple released out”‘of”‘band…
-
CISA Issues Alert on Actively Exploited Apple 0-Day Vulnerabilities
Tags: apple, cisa, cyber, cybersecurity, exploit, flaw, infrastructure, macOS, ransomware, vulnerability, zero-dayThe Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority warning regarding two critical zero-day vulnerabilities impacting a wide range of Apple devices. The flaws, which impact the latest versions of iOS, iPadOS, macOS, and other Apple products, are believed to be actively exploited in the wild, though connections to ransomware campaigns remain unconfirmed.…
-
Will politicization of security clearances make US cybersecurity firms radioactive?
Tags: access, business, ceo, cisa, cisco, ciso, credentials, crowdstrike, cybersecurity, disinformation, election, government, infrastructure, intelligence, law, microsoft, network, office, risk, spyware, strategy, threatWhat brought this on: This is mostly a reaction to a White House order on Wednesday that tied security clearances to supporting political concepts. The order chastised Chris Krebs, the former head of Trump’s Cybersecurity and Infrastructure Security Agency (CISA). “Krebs’ misconduct involved the censorship of disfavored speech implicating the 2020 election and COVID-19 pandemic. CISA, under…
-
Ex-CISA chief Krebs exits SentinelOne amid Trump targeting
Tags: cisaFirst seen on scworld.com Jump to article: www.scworld.com/brief/ex-cisa-chief-krebs-exits-sentinelone-amid-trump-targeting
-
Legacy Oracle cloud breach poses credential exposure risk
First seen on scworld.com Jump to article: www.scworld.com/brief/cisa-legacy-oracle-cloud-breach-poses-credential-exposure-risk
-
CISA Flags Risks from Legacy Oracle Cloud Credential Leak
First seen on scworld.com Jump to article: www.scworld.com/brief/cisa-flags-risks-from-legacy-oracle-cloud-credential-leak
-
Dogged by Trump, Chris Krebs Resigns from SentinelOne
The president revoked the former CISA director’s security clearance, half a decade after Krebs challenged right-wing election disinformation, prompting his eventual resignation. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/trump-chris-krebs-resigns-sentinelone
-
Krebs throws himself on the grenade, resigns from SentinelOne after Trump revokes clearances
Illegitimi non carborundum? Nice password, Mr Ex-CISA First seen on theregister.com Jump to article: www.theregister.com/2025/04/17/krebs_quits_sentinelone/
-
CISA warns companies to secure credentials amid Oracle Cloud breach claims
The agency is asking organizations to come forward if they detect suspicious activity or other evidence of a compromise. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-secure-credentials-oracle-cloud-data/745613/
-
Chris Krebs resigns from SentinelOne to focus on fighting Trump’s executive order
The former CISA director departed the cybersecurity company in response to the order, which directs DOJ to investigate him. First seen on cyberscoop.com Jump to article: cyberscoop.com/chris-krebs-resigns-sentinelone-fight-trump-executive-order/
-
CVE Program Cuts Send the Cyber Sector Into Panic Mode
After threatening to slash support for the CVE program, CISA threw MITRE a lifeline at the last minute, extending its government contract for another 11 months. After that, it looks like it’s up to the private sector to find the cash to keep it going. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/cve-program-cuts-cyber-sector
-
Older SonicWall SMA100 vulnerability exploited in the wild
CISA added the high-severity flaw, initially disclosed in 2021, to its known exploited vulnerabilities catalog this week. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/sonicwall-sma100-vulnerability-exploited/745637/
-
Chris Krebs leaves SentinelOne after Trump memo, saying ‘this is my fight’
Former CISA Director Chris Krebs has left a senior position at cybersecurity company SentinelOne to fight back against the Trump administration’s investigation into his activities atop the federal agency. First seen on therecord.media Jump to article: therecord.media/krebs-leaves-sentinelone-after-trump-memo
-
CISA warns companies to secure credentials amid claims of Oracle Cloud data breach
The agency is asking organizations to come forward if they detect suspicious activity or other evidence of a compromise. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-secure-credentials-oracle-cloud-data/745613/