Tag: government regulations
36 articles
Federal Agencies Scramble to Fortify Infrastructure Ahead of Post-Quantum Deadlines
The clock is ticking: with post-quantum deadlines looming, federal agencies are racing against time to fortify their infrastructure and shield sensitive transactions from potential cyber threats. By 2030 and 2031, they must adopt post-quantum cryptography to protect high-value assets and digital signatures.
US Army Braces for Supply Chain Impacts as Critical Mineral Deadline Looms
The US Army is gearing up for potential supply chain disruptions as a critical mineral deadline approaches, with some impacts expected as early as January. The Army is bracing for a gradual effect, rather than a catastrophic one, as defense companies work to map their supply chains and comply with new rules.
Senators Urge Trump Admin to Bolster AI Safety Standards
Alarming revelations about undetected AI breaches have sparked urgent calls for stronger safety standards, with senators warning that current risks demand a swift and robust federal response. Hundreds, possibly tens of thousands, of incidents may have gone unnoticed, prompting Sens. Maria Cantwell and Mike Rounds to press for expanded measures to protect against AI threats.
New Federal Rules to Tighten Contractor Cybersecurity Reporting
Get ready for a seismic shift in cybersecurity reporting: new federal rules will soon require contractors to report unauthorized access to sensitive information within a tight 72-hour window. This stricter timeline aligns with upcoming CISA regulations, putting companies on notice to strengthen their incident response game.
Coalition Urges CISA to Mandate OT Security Standards for Agencies
The Operational Technology Cybersecurity Coalition is urging CISA to set mandatory OT security standards for federal agencies, ensuring the government practices what it preaches when it comes to cybersecurity. By doing so, agencies will have clear responsibility for OT cybersecurity and a baseline for protection.
Pakistan Overhauls Public Procurement Rules with Digital Mandates
Pakistan is revolutionizing its public procurement process with the introduction of the Public Procurement Rules 2026, making digital transactions mandatory for federal agencies through the E-Pak Acquisition and Disposal System (EPADS). Any procurement activities outside of EPADS will be flagged as mis-procurement, ensuring a transparent and accountable process.
Supreme Court Backs Use of SAVE Database for Voter Citizenship Checks
In a significant move, the Supreme Court has ruled that states can use the Department of Homeland Security's SAVE database to verify voter citizenship, paving the way for more accurate and secure elections. This decision allows state and local election officials to request citizenship checks, helping to ensure the integrity of the electoral process.
Court Upholds DOD Designation of Anthropic as Supply-Chain Risk
A federal appellate court has upheld the Pentagon's designation of Anthropic as a supply-chain risk, allowing the Defense Department to ban its products from being used for official business. This decision comes after a panel of judges reviewed the case and ruled in favor of the Pentagon's designation.
FedRAMP Overhauls Certification with Daily Vulnerability Scans
Get ready for a major shake-up in FedRAMP certification: by December 7, 2026, all cloud service offerings will be required to undergo daily vulnerability scans as part of the new Vulnerability Detection and Response rules.
Agencies Flout CISA Cloud Security Directives, Heightening Cyber Risk
A recent report by the DHS Office of Inspector General found that a staggering 86% of federal agencies are failing to comply with cloud security directives, leaving them vulnerable to preventable cyberattacks. This widespread non-compliance puts the entire national cloud security posture at risk.
Defense Cyber Spending Poised to Double by 2031
Get ready for a surge in defense cyber spending - it's expected to nearly double from $14.99 billion in 2026 to a whopping $28.75 billion by 2031. This dramatic growth is driven by increasing threats, a reliance on connected tech, and a new focus on cyber warfare capabilities.
Federal Agencies Rethink Security with Continuous Authorization
Federal agencies are shaking up their security approach with continuous authorization, recognizing that a system's security can't be judged by its paperwork alone. By treating compliance as a stepping stone to mission success, agencies can deliver secure outcomes faster, without sacrificing speed for security.
Pentagon Memo Reshapes Contractor Data Disclosure Rules
A new Pentagon memo is shaking up data disclosure rules for contractors, forcing them to rethink their approach at a time when AI innovation is taking center stage. This game-changing update intersects with emerging tech developments, sparking key questions for contractors, reporters, and military technologists.
Sharpening Cybersecurity Standards
Don't let your guard down now - Katie Arrington stresses that now is not the time to relax cybersecurity standards, especially after self-attestation failed to protect the war industrial base. The Cybersecurity Maturity Model Certification was created to ensure verification and accountability.
NIST Seeks Input on NVD Overhaul Amid AI-Driven Cybersecurity Shift
The US government's quest to modernize the National Vulnerability Database is underway, and it's seeking your input - with an October 13 deadline to share innovative ideas on how to bring this critical cybersecurity resource into the automation age. NIST wants to hear your forward-looking perspectives on how to scale the NVD and supercharge its support for automated security workflows.
White House Charts Course to Secure AI with Flexible Framework
The White House is taking a bold step towards securing AI, with National Cyber Director Sean Cairncross emphasizing the importance of speed, adaptability, and partnership with private-sector defenders to protect the country's systems. By striking a balance between responsible use, security, and mutual benefit, the administration aims to foster a flexible framework that prioritizes collaboration over regulation.
CMMC Pause Spurs Urgent Gap Assessments
The Department of Defense's sudden pause on CMMC Phase 2 has created an urgent need for gap assessments, especially for small and non-traditional businesses struggling to meet compliance requirements. This 60-day review aims to ease the burden, but existing obligations, including Phase 1 self-assessment requirements, remain in force.
US Government Accelerates Post-Quantum Cryptography Transition
The US government is taking a proactive approach to stay ahead of emerging threats by accelerating its transition to post-quantum cryptography, a critical step in safeguarding federal systems against advanced cryptographic attacks. A new Executive Order is driving this effort, requiring federal agencies to rapidly adopt this next-generation security measure.
Trump Administration Seeks to Revive Mail-In Voting Restrictions
The Trump administration is pushing to revive restrictions on mail-in voting, with the Solicitor General asking the Supreme Court to allow an executive order to take effect, potentially reshaping how Americans cast their ballots in the November midterms. The order, signed in March, aims to tighten mail-in voting rules and verify voter eligibility.
FedRAMP Rev5 Ends, 20X Transition Requires Continuous Evidence
FedRAMP 20X is a game-changer, shifting the focus from narrative security controls to measurable Key Security Indicators (KSIs) backed by machine-readable evidence, requiring organizations to continuously prove their security posture. This means moving beyond descriptions and curated evidence to demonstrable, machine-validated facts.
Pentagon Hits Pause on Cybersecurity Certification Requirements
The Pentagon has hit pause on its cybersecurity certification requirements, citing prohibitive compliance costs and bureaucratic burdens that could stifle innovation in the US defense industrial base. This 60-day suspension sparks a review that may reshape enforcement and acquisition rules for defense contractors.
CISA Mandates Patching of Exploited Adobe ColdFusion Flaw
Adobe has issued a warning to patch a critical flaw, CVE-2026-48282, in ColdFusion versions 2025.9, 2023.20, and earlier, as attackers have already begun exploiting it just two hours after disclosure. Admins are urged to deploy the updates within 72 hours to prevent code execution on unpatched systems.
Credentials Face Quantum Threat Decades Ahead
The NSA has set a critical deadline: by January 1, 2027, new national security systems must support quantum-resistant algorithms to stay ahead of emerging threats. With deadlines stretching into the 2030s, organizations must plan now to protect their systems from the looming quantum threat.
Federal Agencies Pursue Secure AI With Data Clarity, Infrastructure Overhaul
The harsh reality is that most organizations are flying blind when it comes to their data, with little insight into what they have, where it's stored, or if it's properly secured. This knowledge gap is a major hurdle for federal agencies looking to harness the power of AI while keeping sensitive data safe.