Policy & Regulation

  • software developers using computer to write code sitting at desk with multiple screens work remotely in home at night.
    Image attribution tooltip
    MTStock Studio via Getty Images
    Image attribution tooltip

    Software vulnerabilities pile up at government agencies, research finds

    A Veracode report reveals that government networks have accumulated years of unresolved security flaws, putting them at serious risk of exploitation.

    By • June 12, 2025
  • President Donald Trump waves to a crowd at the White House on April 2, 2025.
    Image attribution tooltip
    Andrew Harnik via Getty Images
    Image attribution tooltip

    Trump scraps Biden software security, AI, post-quantum encryption efforts in new executive order

    The White House accused the Biden administration of trying to “sneak problematic and distracting issues into cybersecurity policy.” 

    By • June 6, 2025
  • Sean Cairncross stands on a stage in front of two microphones
    Image attribution tooltip
    Riccardo Savi via Getty Images
    Image attribution tooltip

    Trump’s national cyber director nominee dodges criticism of funding cuts

    Sean Cairncross said his managerial experience has prepared him well to lead a relatively new White House cyber unit.

    By • June 5, 2025
  • Man standing in a suit in front of a U.S. and EPA flags.
    Image attribution tooltip
    (2025). "EPA Administrator Lee Zeldin Launches the Greatest Day of Deregulation in American History" [Video]. Retrieved from U.S. Environmental Protection Agency.
    Image attribution tooltip

    Water utilities mitigate equipment flaws after researchers find widespread exposures

    Censys researchers said hundreds of water treatment facilities have taken steps to protect against malicious cyber intrusions.

    By • June 5, 2025
  • The FBI seal
    Image attribution tooltip
    Chip Somodevilla via Getty Images
    Image attribution tooltip

    FBI, CISA warn Play ransomware targeting critical infrastructure with evolving techniques

    The hacker group has breached hundreds of organizations and is working with others to exploit flaws in a popular remote support tool.

    By • June 5, 2025
  • SEC regulation securities laws
    Image attribution tooltip
    Hapabapa via Getty Images
    Image attribution tooltip

    Banking groups urge SEC to rescind Biden-era cybersecurity rule

    The rule has exposed companies to liability risks while failing to provide investors with “decision-useful” information, the coalition said in a recent letter.

    By Alexei Alexis • June 5, 2025
  • cybersecurity, matrix, abstract
    Image attribution tooltip
    iStock / Getty Images Plus via Getty Images
    Image attribution tooltip

    Bipartisan bill proposes $50M cyber threat analysis program for energy sector

    “Our national security depends on a resilient and secure energy grid,” said Sen. John Hickenlooper, D-Colo. Experts say the new effort would be welcomed by the private sector.

    By Robert Walton • June 5, 2025
  • CISA, cybersecurity, agency
    Image attribution tooltip
    Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
    Image attribution tooltip

    CISA workforce cut by nearly one-third so far

    The agency has lost roughly 1,000 staffers in the wake of the Trump administration’s workforce cuts, losses that could imperil its ability to protect government computer systems and critical infrastructure.

    By • June 4, 2025
  • View of the White House with flowers and fountain in front.
    Image attribution tooltip
    OlegAlbinsky via Getty Images
    Image attribution tooltip

    Trump’s cyber nominees gain broad industry support

    CISA director and national cyber director nominees could transform how the federal government engages with the private sector on cybersecurity issues.

    By • Updated June 3, 2025
  • The north facade of the White House is seen partially illuminated at night
    Image attribution tooltip
    Samuel Corum via Getty Images
    Image attribution tooltip

    Trump’s CISA budget lays out deep job cuts, program reductions

    Critical infrastructure organizations and small businesses would get less support under the president’s fiscal 2026 funding plan.

    By • Updated June 2, 2025
  • Rows of people sit at tables with name cards in front of each of them. The two people in the foreground look at each other as they converse.
    Image attribution tooltip
    Phoenix, Sydney. Retrieved from U.S. Department of Homeland Security.
    Image attribution tooltip

    Senate Democrats urge DHS to reconstitute CSRB

    The lawmakers said the Cyber Safety Review Board’s work has made government agencies and private businesses more secure.

    By • May 30, 2025
  • A banner bearing the eagle-and-shield logo of the Cybersecurity and Infrastructure Security Agency and reading "America's Cyber Defense Agency" hangs over a conference booth that contains chairs, posters, speakers, and plants.
    Image attribution tooltip
    CISA. (2024). Retrieved from Flickr.
    Image attribution tooltip

    CISA loses nearly all top officials as purge continues

    Most of the leaders of the agency’s operating divisions and regional offices have left or will leave this month amid the Trump administration’s aggressive government-downsizing campaign.

    By • May 27, 2025
  • CISA, cybersecurity, agency
    Image attribution tooltip
    Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
    Image attribution tooltip

    High-profile CISA departure adds to agency’s struggles

    The Trump administration’s workforce purge is sapping CISA of its best talent, experts say. CISA deputy Matt Hartman is the latest to leave the agency.

    By • May 20, 2025
  • an exterior view of the US Capitol building
    Image attribution tooltip
    Joe Raedle via Getty Images
    Image attribution tooltip

    Major tech vendors call for streamlining US foreign cyber aid

    A new coalition will push policymakers to change how the government oversees foreign purchases of U.S. cyber resources.

    By • Updated May 21, 2025
  • Image attribution tooltip
    Lintao Zhang via Getty Images
    Image attribution tooltip

    Researchers warn of China-backed espionage campaign targeting laid-off US workers

    A report by FDD says an elaborate online recruiting effort is using LinkedIn and fake online companies to gather sensitive intelligence.

    By • May 20, 2025
  • A woman’s hand is asking an AI chatbot pre-typed questions & the Artificial Intelligence website is answering.
    Image attribution tooltip
    Laurence Dutton via Getty Images
    Image attribution tooltip

    AI is stirring mixed feelings among CFOs, survey finds

    The research highlights a “trust gap between the untested promise of AI and the wariness of security and privacy risks,” finance software company Kyriba said.

    By Alexei Alexis • May 19, 2025
  • an exterior view of the US Capitol building
    Image attribution tooltip
    Joe Raedle via Getty Images
    Image attribution tooltip

    Hearing shows broad support for extension of cyber info-sharing law

    With bipartisan support and backing from the private sector, the 2015 law appears to be on a glide path to reauthorization.

    By • May 16, 2025
  • FBI seal displayed on a wall
    Image attribution tooltip
    Chip Somodevilla/Getty Images via Getty Images
    Image attribution tooltip

    FBI warns senior US officials are being impersonated using texts, AI-based voice cloning

    Hackers are increasingly using vishing and smishing for state-backed espionage campaigns and major ransomware attacks.

    By • May 16, 2025
  • A woman wearing a surgical mask stands in front of a booth for the Chinese networking company TP-Link at a German consumer electronics trade show.
    Image attribution tooltip
    Sean Gallup via Getty Images
    Image attribution tooltip

    GOP lawmakers urge ban of networking vendor TP-Link, citing ties to China

    The Trump administration is facing mounting pressure to formulate a strategy for addressing supply-chain threats that endanger national security.

    By • May 15, 2025
  • Longworth Congressional Building
    Image attribution tooltip
    Win McNamee via Getty Images
    Image attribution tooltip

    Congress faces pressure to renew cyber information-sharing law

    The law’s expiration in September could jeopardize a wide range of information-sharing partnerships that have helped catch and thwart cyberattacks in the U.S.

    By • May 14, 2025
  • The Pentagon, the headquarters of the U.S. Department of Defense in Arlington, Va., is seen from the sky.
    Image attribution tooltip
    Alex Wong/Getty via Getty Images
    Image attribution tooltip

    Defense contractors get a head start on CMMC audits

    Software investments, infrastructure upgrades and compliance documentation topped the list of Cybersecurity Maturity Model Certification implementation costs, a new survey shows.

    By • May 12, 2025
  • A large entrance sign that reads "Gate A, NIST, National Institute of Standards and Technology, U.S. Department of Commerce" is mounted on a rock base and surrounded by grass and trees. In the background to the left of the sign, there is a commercial building.
    Image attribution tooltip
    Retrieved from R. Eskalis/NIST.
    Image attribution tooltip

    NIST loses key cyber experts in standards and research

    The head of the agency’s Computer Security Division and roughly a dozen of his subordinates took the Trump administration’s retirement offers, placing key programs at risk.

    By • May 6, 2025
  • Military Surveillance Officer Working on a City Tracking Operation in a Central Office Hub for Cyber Control and Monitoring for Managing National Security, Technology and Army Communications.
    Image attribution tooltip
    gorodenkoff via Getty Images
    Image attribution tooltip

    DOD plans to fast-track software security reviews

    The Pentagon will lay out new security requirements and approval processes for the software it purchases.

    By • May 5, 2025
  • Harrods is one of three UK-based retail companies responding to a spree of attacks beginning in April 2025.
    Image attribution tooltip
    Hollie Adams via Getty Images
    Image attribution tooltip

    UK authorities warn of retail-sector risks following cyberattack spree

    Three major retail brands, including Harrods and M&S, have been targeted in recent weeks.

    By • May 5, 2025
  • Medical Coding Bill And Billing Codes Spreadsheets
    Image attribution tooltip

    Shutterstock / Andrey_Popov

    Image attribution tooltip
    Sponsored by Zilla, a CyberArk Company

    Access reviews can be fixed - here’s how

    Drowning in spreadsheets for access reviews? There’s a smarter solution.

    May 5, 2025