Government auditors say federal agencies haven’t met mandated security steps for operational technology, which hackers targeted in water sector attacks this summer.

The vendor was much quicker and consistent in its response to the latest defect, and researchers consider the impact relatively low compared to the previous pair of…

Sean Cairncross talked about regulations, China, pilot projects and more Thursday.

Adam Meyers, CrowdStrike’s head of counter-adversary operations

Internet-exposed tech, PLCs, outside integrators and inside protections are all factors the water sector’s information sharing and analysis center is watching.

The vendor’s products are a common, recurring target for attackers, yet the official warning for some Citrix NetScaler customers was too late.

Biotechnology doesn’t have its own critical infrastructure designation, so the bipartisan group of lawmakers wants to make sure it’s protected like it.

The white paper is the latest step in trying to create a “Quality Era” for the Common Vulnerabilities and Exposures (CVE) program as the number of CVEs…

The DHS inspector general said CISA lacks the power to compel agencies to implement its Binding Operational Directives.

A key House Democrat and his bipartisan sponsors want to see a $100 million DHS pilot to help critical infrastructure owners and operators — separate from another…