Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack
The DHS inspector general said CISA lacks the power to compel agencies to implement its Binding Operational Directives.
Advertisement
Binding Operational Directive
Sen. Wyden urges feds to discard older, insecure, public-facing VPNs
In a letter first reported by CyberScoop, Ron Wyden, D-Ore., said ‘devastating’ attacks on the federal government have accumulated due to the tech.
CISA directive orders agencies to prioritize vulnerability patching in a new way
A vulnerability that meets all four criteria would need to be fixed within three days, for instance.
CISA is rethinking how it prioritizes risks and vulnerabilities for feds, private sector
Acting director Nick Andersen said a binding operational directive is en route for agencies, and that more specific discussions need to happen with critical infrastructure owners.
CISA tells agencies to stop using unsupported edge devices
A binding operational directive issued Thursday looks to combat an attack pathway that has been behind some of the biggest attacks and most common exploits in recent…
How CISA’s list of ‘must-patch’ vulnerabilities has expanded both in size, and who’s using it
While CISA says the catalog is catching on, some think it needs improvement.
Advertisement
CISA tells agencies to fix hundreds of software flaws, prep for future vulnerabilities
CISA wants agencies to tackle nearly 300 flaws in all, ranging from within two weeks to six months.
CISA orders agencies to set up vulnerability disclosure programs
It’s the latest sign that federal officials are warming to white-hat hackers from various walks of life.
DHS issues draft order to require vulnerability disclosure policies at civilian agencies
The Department of Homeland Security’s cybersecurity division is trying something new in appealing for public input before issuing an order.
DHS is mulling an order that would force agencies to set up vulnerability disclosure policies
A directive under consideration at CISA would order agencies to set up disclosure programs to work with outside security researchers.