insidecybersecurity3d
Cyber assessment nonprofit identifies firewall vulnerabilities in ‘Big Three’ cloud service provider offerings
Firewalls provided by Amazon, Google and Microsoft as part of their cloud service offerings are vulnerable to a significant number of known exploit tactics, according to the latest test results from ...
insidecybersecurity3d
FTC study finds companies offering ‘smart’ products provide limited information on duration of software updates
The Federal Trade Commission determined in a new paper that the vast majority of companies are not disclosing publicly how long they will continue providing software updates on “smart” products and ...
insidecybersecurity3d
Former FTC policy advisor raises questions over need for safe harbor against software liability claims
Limited action to address software liability claims demonstrates that it is too early to grant tech companies a safe harbor for the use of secure development practices, according to former Federal ...
insidecybersecurity5d
FCC approves proposed rulemaking to launch review of submarine cable licensing in context of national security
The Federal Communications Commission has unanimously approved a notice of proposed rulemaking to conduct a “comprehensive review” of its licensing rules for submarine cables that will reflect changes ...
insidecybersecurity3d
University of Chicago launches pilot connecting small water utilities with volunteers to bolster security
The University of Chicago’s Cyber Policy Initiative has kicked off a pilot effort where six small water utilities will work with volunteers who have significant cyber expertise to help bolster their ...
insidecybersecurity5d
Senators introduce bipartisan cyber healthcare bill featuring grants, improved interagency coordination
An influential group of senators have introduced legislation offering a multi-faceted approach to strengthen cybersecurity in the healthcare sector, including grants and increased agency coordination ...
insidecybersecurity8d
FCC proposes fine for Chinese doorbell manufacturer over security flaws misrepresented in equipment authorization
The Federal Communications Commission is proposing a $734,872 fine against China-based smart doorbell manufacturer Eken over providing allegedly false statements that raise cybersecurity concerns ...
insidecybersecurity9d
Senate Homeland Security leaders criticize cancellation of public worldwide threats hearing
Senate Homeland Security Chairman Gary Peters (D-MI) slammed a decision from Homeland Security Secretary Alejandro Mayorkas and FBI Director Christopher Wray to not testify publicly in front of the ...
insidecybersecurity9d
CISA, MITRE raise alarm bells on ‘cross-site scripting’ in annual list of dangerous software weaknesses
Improper development practices that can lead to cross-site scripting vulnerabilities are the top software weakness in 2024, according to an annual list based on software security efforts led by the ...
insidecybersecurity4d
CISA emphasizes prioritizing vulnerability response following ‘red team’ assessment
“The Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team assessment (RTA) at the request of a critical infrastructure organization. During RTAs, CISA’s red team simulates real ...
insidecybersecurity9d
Sen. Paul sees addressing censorship as key component of CISA oversight efforts
Sen. Rand Paul (R-KY) says he will make scrutiny over the Cybersecurity and Infrastructure Security Agency’s efforts to work with social media companies a cornerstone of his approach to oversight of ...
insidecybersecurity11d
Carr selected to chair FCC under incoming Trump administration, setting up potential further action on China
Commissioner Brendan Carr is next in line to chair the Federal Communications Commission, putting in place a longtime advocate for addressing national security issues stemming from China’s presence in ...