The former CISA director and current head of the NSA Cybersecurity Directorate are among four new members to the DHS board.

The rewrite of PPD-21 is a good start, but still relies on Congress to get through the biggest hurdles, experts say.

The company says securing its products is its top priority after a series of damaging, embarrassing breaches. 

The draft cyber incident reporting rule faced significant pushback during a House hearing Wednesday, with industry groups arguing for a narrower reporting requirement.

A revised policy document aims to clarify the roles and responsibilities of federal agencies responsible for securing U.S. critical infrastructure.

The program warns organizations running software or hardware with vulnerabilities that are being exploited by ransomware gangs.

Kemba Walden, the former acting national cyber director, said that a ransom payment ban is the ultimate goal.

The Cyber Safety Review Board concluded in a report that Microsoft’s corporate culture has inappropriately deprioritized security.

The Cybersecurity and Infrastructure Security Agency’s reporting requirements represent a sea change for when private entities will have to report cybersecurity incidents.

There are 16 critical infrastructure sectors, and experts are deeply divided on whether space systems should be the 17th.