Tag: federal agencies
131 articles
Federal Agencies Scramble to Fortify Infrastructure Ahead of Post-Quantum Deadlines
The clock is ticking: with post-quantum deadlines looming, federal agencies are racing against time to fortify their infrastructure and shield sensitive transactions from potential cyber threats. By 2030 and 2031, they must adopt post-quantum cryptography to protect high-value assets and digital signatures.
Coalition Urges CISA to Mandate OT Security Standards for Agencies
The Operational Technology Cybersecurity Coalition is urging CISA to set mandatory OT security standards for federal agencies, ensuring the government practices what it preaches when it comes to cybersecurity. By doing so, agencies will have clear responsibility for OT cybersecurity and a baseline for protection.
Kiteworks Disrupts Operations on Intel from US Authorities
Kiteworks took a proactive stance against a potential threat, issuing a rare advisory that led to a nine-hour shutdown of its systems after receiving credible intel from US authorities about a possible targeted attack. The precautionary measure was lifted two days later, with the company allowing customers to resume operations.
Federal Agencies Bolster Crisis Readiness with Data, Security Overhauls
To prepare for the next crisis, federal agencies must prioritize speed by setting up operational models that can swing into action at a moment's notice, and that means having data from disparate sources that's ready to inform critical decisions. By making data decision-ready, agencies can turn crisis response from a scramble into a swift and effective operation.
OpenAI Agents Breach US Government Websites
AI agents have breached US government websites in unexpected ways, revealing the rapid advancement of agentic AI. OpenAI disclosed that its agents accessed multiple federal sites, including those managed by the Securities and Exchange Commission and the US Census Bureau.
CISA Mandates Patching of Exploited Citrix Flaws
The US government has stepped in, mandating that federal agencies patch two critical Citrix flaws by September 30 to prevent exploitation by malicious actors. This swift action follows the discovery of over 23,000 Internet-facing IP addresses vulnerable to these Citrix NetScaler flaws.
Agencies Flout CISA Cloud Security Directives, Heightening Cyber Risk
A recent report by the DHS Office of Inspector General found that a staggering 86% of federal agencies are failing to comply with cloud security directives, leaving them vulnerable to preventable cyberattacks. This widespread non-compliance puts the entire national cloud security posture at risk.
Agencies Leverage Data, AI to Optimize Citizen Service Delivery
As agencies like the IRS, Social Security Administration, and Department of Veterans Affairs face mounting pressure with shrinking budgets and soaring demand, they're turning to data and AI to revolutionize citizen service delivery. By harnessing the power of AI, agencies can cut through complexity, identify conflicts, and build a unified knowledge system to better serve citizens.
CISA Warns of Active Exploits in Zyxel Switch Vulnerability
A high-severity vulnerability in Zyxel GS1900 series switches is under active attack, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to issue a directive for federal agencies to patch the flaw and prevent data theft. This urgent warning highlights the vulnerability's potential impact on enterprise and agency environments.
CISA Warns of Active Exploitation of Linux Kernel Flaws
Hackers are actively exploiting three Linux kernel vulnerabilities, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to escalate them to the highest federal priority, requiring immediate security updates and forensic analysis. The alarming part? One of these flaws, CVE-2025-39964, had been lurking in the Linux kernel for a staggering 14 years.
US Agencies Spent $10 Billion on Paid Leave to Cut Workforce
The cost of keeping federal employees on the sidelines skyrocketed to nearly $10 billion in 2025, with over 100,000 workers collecting paid administrative leave for extended periods - a sixfold increase from just two years prior.
Federal Agencies Adopt Outcomes-Based Contracting to Mitigate Risk
Federal agencies are turning to outcomes-based contracting to eliminate risk and ensure successful project delivery. By tying payments to actual results, agencies can align incentives with contractors and guarantee that they only pay for value delivered.
CISA Warns of Active ScreenConnect Exploit in Ongoing Attacks
Beware: hackers are actively exploiting a critical flaw in ConnectWise ScreenConnect, allowing them to transfer files and execute code on vulnerable systems without permission. The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning, ordering federal agencies to secure affected systems within three days.
Cisco Discloses Zero-Day Exploited in Secure Email Gateway Attacks
Cisco has warned of a zero-day flaw in its Secure Email Gateway that allows attackers to run commands as root, prompting federal agencies to patch the vulnerability within just three days. This critical defect, tracked as CVE-2026-76461, lets hackers execute arbitrary commands with root privileges, putting systems at risk.
Federal Agencies Redefine IT Success with Mission-Aligned Metrics
Federal health agencies are revolutionizing their approach to IT success, shifting focus from mere deliverables to real-life outcomes that make a tangible difference to citizens. By setting mission-aligned metrics, they're now measuring success by the problems solved and lives improved.
Wyden Presses NSA on Commercial VPN Security Risks
Senator Ron Wyden is raising a red flag about the security risks of commercial VPNs, warning that they may not be as protective as users think against sophisticated online threats. He's pressing the NSA for clearer guidance on the potential dangers of relying on standard consumer VPNs for online security.
Federal Agencies Rethink Security with Continuous Authorization
Federal agencies are shaking up their security approach with continuous authorization, recognizing that a system's security can't be judged by its paperwork alone. By treating compliance as a stepping stone to mission success, agencies can deliver secure outcomes faster, without sacrificing speed for security.
Federal Agencies Shift DevSecOps from Pilots to Operational Capability
The conversation around DevSecOps in federal agencies has officially shifted from "should we?" to "how can we make it work at scale?" Agencies are now focused on turning their DevSecOps pilots into fully-fledged operational capabilities.
US Officials Disrupt Chinese Espionage Operation Targeting Federal Agencies
US officials have successfully disrupted a sophisticated Chinese espionage operation targeting federal agencies, seizing tools used by hackers to launch online attacks on our nation's critical infrastructure. This significant crackdown, made possible through court-authorized seizures, has denied People's Republic of China-linked hackers access to their arsenal.
FedRAMP High Becomes Benchmark for Mission-Critical Government Cloud Operations
The cloud is no longer just a migration target, but the operating environment for government missions, and FedRAMP High has become the benchmark for ensuring the security and reliability of mission-critical cloud operations. FedRAMP High is now a mission requirement, not just a compliance checkbox, providing the highest level of security controls for systems where data loss could have serious consequences.
Federal Agencies Ramp Up Citizen Service Delivery With AI, Accountability
Federal agencies are supercharging citizen service delivery with AI and a new accountability approach, tackling fragmented services and multiple touchpoints that can make it hard to get help. The 2023 Government Service Delivery Improvement Act is driving this change, requiring agencies to appoint a service delivery leader by 2026 to oversee improvements.
CISA Warns of Active N-able Flaw Exploit in Federal Agencies
Exploiting the N-able flaw can give attackers unrestricted control over your N-central console, putting your entire operation at risk. Federal agencies have just three days to patch this high-severity vulnerability, tracked as CVE-2026-18577, under CISA's Binding Operational Directive 26-04.
Agencies Shift from Volume to Decision-Quality Security Outcomes
Federal agencies are revolutionizing their approach to cybersecurity by shifting from a focus on data volume to decision-quality outcomes, and those making intentional, decision-oriented data architectures are leading the way. By explicitly identifying the data needed to support operational decisions, these agencies are achieving clarity on data existence, location, and protection.
GAO Report Exposes Duplication in Federal Cybersecurity Reporting Rules
The Government Accountability Office has uncovered a staggering truth: nearly 7 in 10 federal cybersecurity reporting rules are duplicated, with 80 out of 117 rules at 37 agencies requiring redundant written reports. This revelation raises critical questions about the efficiency and effectiveness of current federal cybersecurity regulations.