Closing software-understanding gap is critical to national security, CISA says
In a joint report with DARPA and others, the cyber agency said that knowledge gap “exacerbates” risks posed by threat actors in U.S. critical infrastructure.
Advertisement
software
CISA sees elimination of ‘bad practices’ as next secure-by-design step
Officials at the cyber agency are doubling down on shifting the security onus to software makers.
Security leader Ron Bushar on using software supply chain frameworks to improve security
Bushar shares that Google has worked to build the SLSA framework, allowing organizations to grade their supply-chain maturity and ensure the security lifecycle during modernization.
The Pentagon may require vendors certify their software is free of known flaws. Experts are split.
The debate is over whether the provision is unrealistic or if it's a game changing move to cut down on software vulnerabilities.
In studying tech supply chain, feds cite open source products, device firmware
The White House ordered Commerce and Homeland Security to examine weak spots in how the IT and communications industries produce hardware and software.
There’s a new Java ransomware family on the block
BlackBerry and KPMG researchers uncovered a new ransomware strain targeting education and software entities.
Advertisement
What to expect from the Cybersecurity Solarium Commission report
“We want this to be the 9/11 Commission Report without the 9/11,” Sen. Angus King told CyberScoop.
Ex-DHS inspector general indicted for allegedly stealing government software
The head-turning indictment accuses Charles Edwards of stealing DHS IG software and trying to profit from it.
Microsoft will offer free Windows 7 support for election officials through 2020
The move is the latest step by Microsoft and other powerful tech companies to offer free or discounted services in support of election security.
ASUS issues patch, downplays scope of APT hack of its supply chain
ASUS's statement contrasted with the findings of researchers who called the hack seemingly “one of the biggest supply-chain incidents ever.”