GSA to start collecting letters of attestation from software vendors in mid-June
The General Services Administration say it hopes to share details of the updated certification process with tech companies by June 12.
Advertisement
Cybersecurity
Watchdog warns FDIC fails to test banks’ cyberdefenses effectively
The agency’s Office of Inspector General says staff at the prudential regulator are not being kept abreast of the latest cyberthreats.
Cybercriminals scam two federal agencies via remote desktop tool, CISA warns
CISA and the NSA warned federal agencies that malicious hackers used legitimate remote monitoring and management software to execute scams.
Five cloud-native security risks agencies need to address
How agencies moving to the cloud can dramatically improve their cyber postures by adopting a holistic Cloud Native Application Protection Platform.
Too many products, not enough integration hampers agency security resilience
A new FedScoop study finds agencies are making progress in improving IT security but need greater security integration architecture to improve resiliency.
House Oversight expected to create new IT and cybersecurity subcommittee
Details of the new subcommittee structure have yet to be finalized, and a vote on the change is expected to take place in the coming weeks.
Advertisement
NSA awards $284M cybersecurity services contract to CACI
The five-year, single award contract focuses on modernizing the National Security Agency's cyber engineering practices.
NIST working on ‘potential significant updates’ to cybersecurity framework
The framework is a voluntary guide to help organizations in all sectors to better manage cybersecurity risks.
Interior Department watchdog finds 5% of active credentials at agency use word ‘password’
Interior Department IG staff were able to crack passwords for 16% of agency users within the first 90 minutes of testing.
Patent Office seeks penetration testing services
USPTO is looking for a red-team vendor that can simulate attacks on its networks using methods employed by some of the world's most sophisticated cybercriminals.