Tag: nist
-
CMMC and NIST Password Compliance 101: Are They Different?
See how CMMC and NIST password compliance align. Why it matters for DoD contractors, and how Enzoic helps block weak & compromised passwords. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/cmmc-and-nist-password-compliance-101-are-they-different/
-
The Political Weaponization of Cybersecurity
Cybersecurity should be guided by technical principles”, not politics. Yet recent incidents in the U.S. highlight how cybersecurity decisions and dismissals are increasingly being used to advance partisan agendas. From cloud data migrations to high-profile government firings, security is becoming a political tool rather than a neutral safeguard. True cybersecurity must return to its foundation:…
-
USENIX 2025: Using Privacy Infrastructure To Kickstart AI Governance: NIST AI Risk Management Case Studies
Creators, Authors and Presenters: Katharina Koerner, Trace3; Nandita Rao Narla, DoorDash Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/usenix-2025-using-privacy-infrastructure-to-kickstart-ai-governance-nist-ai-risk-management-case-studies/
-
Zero Trust als neues Paradigma der IT-Sicherheit – Zero Trust in der Praxis: Chancen, Stolperfallen und NIST-Leitlinien
First seen on security-insider.de Jump to article: www.security-insider.de/zero-trust-praxis-umsetzen-a-13aab7b0b25f4f08400d04d985f60656/
-
Zero Trust als neues Paradigma der IT-Sicherheit – Zero Trust in der Praxis: Chancen, Stolperfallen und NIST-Leitlinien
First seen on security-insider.de Jump to article: www.security-insider.de/zero-trust-praxis-umsetzen-a-13aab7b0b25f4f08400d04d985f60656/
-
NIST SP 800-63B Rev. 4 Password Updates
Stay ahead of compliance with NIST 800-63B Rev 4. The latest password updates and how to enforce stronger security in Active Directory. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/nist-sp-800-63b-rev-4-password-updates/
-
5 questions CISOs should ask vendors
2. Will it reduce my workload, add value or improve operations?: A common starting point is to ask questions about how a new tool will reduce workload, minimize risk, improve resilience or simplify operations.Basu wants to know whether the product can consolidate capabilities instead of adding yet another point solution. “Without that, each tool only…
-
5 questions CISOs should ask vendors
2. Will it reduce my workload, add value or improve operations?: A common starting point is to ask questions about how a new tool will reduce workload, minimize risk, improve resilience or simplify operations.Basu wants to know whether the product can consolidate capabilities instead of adding yet another point solution. “Without that, each tool only…
-
Why federal IT leaders must act now to deliver NIST’s post-quantum cryptography transition
The NIST standards show that with one year of progress behind us, there are five years of opportunity ahead. First seen on cyberscoop.com Jump to article: cyberscoop.com/why-federal-it-leaders-must-act-now-to-deliver-nists-post-quantum-cryptography-transition-op-ed/
-
NIST explains how post-quantum cryptography push overlaps with existing security guidance
The agency published a document mapping its recommendations for PQC migration onto the advice in its landmark security publications. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/nist-post-quantum-cryptography-guidance-mapping/760638/
-
Operationalizing NIST and MITRE with Autonomous SecOps
How Morpheus brings trusted cybersecurity frameworks to life through automation and intelligence. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/operationalizing-nist-and-mitre-with-autonomous-secops/
-
Cybersecurity Snapshot: Security Lags Cloud and AI Adoption, Tenable Report Finds, as CISA Lays Out Vision for CVE Program’s Future
Tags: access, ai, api, attack, automation, best-practice, breach, bug-bounty, business, cisa, cloud, communications, computer, control, cve, cyber, cybersecurity, data, data-breach, defense, encryption, exploit, framework, google, governance, government, identity, infrastructure, intelligence, international, Internet, linkedin, mitre, network, nist, office, open-source, privacy, programming, RedTeam, resilience, risk, risk-management, service, skills, software, strategy, tactics, technology, threat, tool, update, vulnerabilityCheck out Tenable’s report detailing challenges and best practices for cloud and AI security. Plus, CISA rolled out a roadmap for the CVE Program, while NIST updated its guidelines for secure software patches. And get the latest on TLS/SSL security and AI attack disclosures! Here are five things you need to know for the week…
-
Ensuring Behavioral Analysis Data Integrity
See how using Q-Compliance to adhere to NIST 800-53 controls would help you and your organization ensure that all the core components for a robust User and Entity Behavior Analytics (UEBA) program are in place. This includes setting up proper data collection, managing access, and establishing a clear incident response framework. First seen on securityboulevard.com…
-
Cybersecurity Snapshot: Expert Advice for Securing Critical Infrastructure’s OT and Industrial Control Systems, IoT Devices and Network Infrastructure
Tags: access, advisory, apt, attack, authentication, breach, china, cisa, cisco, cloud, compliance, computer, computing, control, credentials, cryptography, cve, cyber, cybersecurity, data, defense, detection, espionage, exploit, firmware, framework, google, government, guide, hacker, Hardware, incident response, infrastructure, international, Internet, iot, login, mfa, military, mitigation, monitoring, network, nist, organized, password, phishing, ransomware, regulation, risk, russia, sans, service, software, technology, theft, threat, tool, update, vulnerability, zero-trustDestructive cyber attacks against critical infrastructure have unfortunately become increasingly frequent. Just last week, multinational government agencies blared the alarm about a global cyber espionage campaign targeting critical infrastructure networks. With this type of cyber threat in the spotlight, we’re rounding up recent cyber advice for securing critical infrastructure. In case you missed it, here…
-
The Full Lifecycle Imperative: Why >>Shift Left<>Shift Right<<
Tags: access, ai, api, attack, authentication, automation, business, cloud, compliance, data, detection, framework, governance, HIPAA, mitre, nist, PCI, risk, siem, strategy, threat, tool, vulnerability, wafIn this series, we examined the vital connection between AI and APIs, highlighting what makes a leader in the API security market through the 2025 KuppingerCole Leadership Compass. Now, we turn to the core strategy of true API security: the full-lifecycle approach, where security is a continuous, integrated process rather than a single action. The…
-
Quantum Is Closer Than You Think”, So Why Are You Still Encrypting Like It’s 2015?
Tags: access, ai, business, cloud, communications, compliance, computer, computing, container, crypto, cryptography, data, defense, encryption, endpoint, exploit, government, guide, Hardware, infrastructure, network, nist, privacy, regulation, resilience, risk, risk-assessment, service, software, strategy, technology, threat, tool, update, vulnerabilityQuantum Is Closer Than You Think”, So Why Are You Still Encrypting Like It’s 2015? madhav Tue, 09/02/2025 – 05:43 Not long ago, the idea that quantum computers could one day break today’s strongest encryption felt like science fiction. Today, it’s no longer about if”, but when. While real-world demonstrations of quantum algorithms like Shor’s…
-
NIST Enhances Security Controls for Improved Patching
The U.S. National Institute of Standards and Technology released Security and Privacy Control version 5.2.0 to help organizations be more proactive regarding patching. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/nist-enhances-security-controls-for-improved-patching
-
Custom Controls: Beyond NIST SP 800-53
Extend Q-Compliance’s capabilities beyond its out-of-the box offerings! Custom Controls allow organizations meet compliance objectives with unique requirements, procedures and risk profiles. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/custom-controls-beyond-nist-sp-800-53/
-
NIST Releases Lightweight Cryptography Standard for IoT Security
The National Institute of Standards and Technology (NIST) has formally published Special Publication 800-232, “Ascon-Based Lightweight Cryptography Standards for Constrained Devices,” establishing the first U.S. government benchmark for efficient cryptographic algorithms tailored to resource-constrained environments such as the Internet of Things (IoT), embedded systems, and low-power sensors. In February 2023, NIST selected the Ascon family…
-
Cybersecurity Snapshot: Industrial Systems in Crosshairs of Russian Hackers, FBI Warns, as MITRE Updates List of Top Hardware Weaknesses
Tags: access, ai, attack, automation, cisa, cisco, cloud, conference, control, credentials, cve, cyber, cybersecurity, data, data-breach, deep-fake, detection, docker, espionage, exploit, flaw, framework, fraud, google, government, group, guide, hacker, hacking, Hardware, identity, infrastructure, intelligence, Internet, iot, LLM, microsoft, mitigation, mitre, mobile, network, nist, risk, russia, scam, service, side-channel, software, strategy, switch, technology, threat, tool, update, vulnerability, vulnerability-management, windowsCheck out the FBI’s alert on Russia-backed hackers infiltrating critical infrastructure networks via an old Cisco bug. Plus, MITRE dropped a revamped list of the most important critical security flaws. Meanwhile, NIST rolled out a battle plan against face-morphing deepfakes. And get the latest on the CIS Benchmarks and on vulnerability prioritization strategies! Here are…
-
NIST Releases New Control Overlays to Manage Cybersecurity Risks in AI Systems
The National Institute of Standards and Technology (NIST) has unveiled a comprehensive initiative to address the growing cybersecurity challenges associated with artificial intelligence systems through the release of a new concept paper and proposed action plan for developing NIST SP 800-53 Control Overlays specifically designed for securing AI systems. New Framework Addresses Critical AI Security…
-
Zero Trust in Practice: Mapping NIST 800-207 to Real-World Technologies
Learn how to implement Zero Trust Architecture in practice. We map NIST 800-207 concepts”, like Policy Enforcement Points (PEPs) and Policy Decision Points (PDPs)”, to real-world technologies such as firewalls, identity providers, and endpoint protection platforms. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/zero-trust-in-practice-mapping-nist-800-207-to-real-world-technologies/
-
NIST Unveils Guidelines to Help Spot Face Morphing Attempts
NIST has released new guidelines examining the pros and cons of detection methods for face morphing software First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nist-unveils-guidelines-spot-face/
-
NIST’s attempts to secure AI yield many questions, no answers
Challenges to consider: The NIST report talked about various categories of AI integration that forced serious cybersecurity considerations, including: using genAI to create new content; fine-tuning predictive AI; using single AI agents as well multiple agents; and security controls for AI developers. The potentially most challenging element of securing AI in enterprises is visibility. But the…
-
NIST seeks input on control overlays for securing AI systems
The federal agency plans to develop guidance to organizations about various AI use cases. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/nist-input-control-overlays-securing-ai/757909/