cisa

Imperva and the Secure by Design Pledge: A Commitment to Cybersecurity Excellence

| | Application Security, cisa, imperva, thales
The Cybersecurity and Infrastructure Security Agency (CISA) has introduced a voluntary “Secure by Design Pledge” for enterprise software manufacturers, focusing on improving the security of their products and services. This pledge outlines ...
Blog
Director of the Cybersecurity and Infrastructure Security Agency, Jen Easterly

CISA Director Easterly to Leave When Trump Assumes Presidency

| | cisa, Cybersecurity, Donald Trump, Jen Easterly, secure by design
Jen Easterly, who took over as CISA director in 2021, will step down in January when Donald Trump takes over as president, creating an uncertain future for the critical cybersecurity agency and ...
Security Boulevard
zero-day, vulnerabilities, zero-trust app hardware zero-trust prepare

Zero-Day Exploits Surge in 2023, Cisco, Fortinet Vulnerabilities Targeted

| | 0-day, cisa, cisco, Citrix, cyber threat actors, five eyes, Fortinet, SBD, vulnerability, zero-day
A report from the Five Eyes cybersecurity alliance, released by the CISA, highlights the majority of the most exploited vulnerabilities last year were initially zero-day flaws, a significant increase compared to 2022 ...
Security Boulevard
MixMode Observes Increase in Threat Actor Activity Supporting CISA’s Heightened Election Security Concerns

MixMode Observes Increase in Threat Actor Activity Supporting CISA’s Heightened Election Security Concerns

| | Blog, cisa, nation-state attacks, Nation-State Bad Actors, Nation-State Threat Actors, national cybersecurity, threat actors
The Cybersecurity and Infrastructure Security Agency (CISA) recently issued a joint statement with the Office of the Director of National Intelligence (ODNI) and the Federal Bureau of Investigation (FBI), highlighting the ongoing ...
MixMode
Secure by Demand with Dick Brooks

Empowering Software Buyers Through Secure-by-Demand Guidelines

| | cisa, sdlc, TalkSecure Blog
Interview by Deb Radcliff, editor of TalkSecure, hosted by CodeSecure and syndicated at YouTube, Bright Talk, and Security Boulevard Recently, the Cybersecurity and Infrastructure Security Agency (CISA) released its Secure by Demand ...
CodeSecure
CISA, cyber threats, Seal of the Cybersecurity & Infrastructure Security Agency

CISA Strategic Plan Targets Global Cooperation on Cybersecurity

| | cisa, Cybersecurity, global, IT Security, training
The Cybersecurity and Infrastructure Security Agency (CISA) introduced its inaugural international strategic plan, a roadmap for strengthening global partnerships against cyber threats ...
Security Boulevard
EU CRA: Good Intentions, Impossible Requirements

EU CRA: Good Intentions, Impossible Requirements

| | cisa, CodeSentry, ETSI, EUCRA, open source, SBOM, TalkSecure Blog
As the European Union’s Cyber Resilience Act (EU CRA) prepares to publish a final draft, product manufacturers with any “digital” component must comply three years after final publication. If passed, the EU ...
CodeSecure

Response to CISA Advisory (AA24-290A): Iranian Cyber Actors’ Brute Force and Credential Access Activity Compromises Critical Infrastructure Organizations

| | adversary emulation, cisa, Energy, government, Healthcare & Life Sciences, Iran, MFA, Professional Services, Resources & Utilities, technology
AttackIQ has released a new assessment template in response to the CISA Advisory (AA24-290A), published on October 16, 2024. The advisory highlights that since October 2023, Iranian cyber actors have used password ...
AttackIQ
critical, infrastructure, threats, cybersecurity energy infrastructure CISA NSA

US and Other Countries Outline Principles for Securing OT

| | cisa, Critical Infrastructure Security, OT security
US security agencies and international counterparts list six principles critical infrastructure organizations should hold onto to ensure their OT environments are protected against the rising tide of cyberthreats coming their way ...
Security Boulevard

CISA and FBI Issue Alert on XSS Vulnerabilities

| | cisa, CISA Alert, Cross-Site Scripting (XSS), Cross-Site Scripting (XSS) Attacks, Cyber threat landscape, Cybersecurity Best Practices, cybersecurity defense strategies, Cybersecurity Weaknesses, enterprise security, FBI, FBI alert, Linux & Open Source News, secure by design, Secure by Design Alert, Software Security, Vulnerability Management, XSS Vulnerabilities
Cross-site scripting (XSS) vulnerabilities continue to be a major concern in today’s software landscape, despite being preventable. CISA and FBI have issued a Secure by Design alert to reduce the prevalence of ...
TuxCare
Load more