The Cybersecurity and Infrastructure Security Agency (CISA) released new Trusted Internet Connections (TIC) 3.0 draft guidance that adjusts to federal agencies narrowing their cyberdefenses. 

New ISACA resources offer step-by-step guidance for the U.S. National Institute of Standards and Technology's (NIST) Framework for Improving Critical Infrastructure Cybersecurity (CSF). 

The Air Force is looking for industry help in securing security and industrial control systems networks on its bases.

While there is still time left in 2019, according to the recent Data Breach QuickView Report, there were 5,183 breaches reported just in the first nine months of 2019 exposing 7.9 billion records.

The Unified Carrier Registration Plan (UCR) has reported that the tax identification numbers of registrants may have been exposed during March due to a website vulnerability that existed in its online National Registration System.

The pace of change in cybersecurity is quickening as technologies like 5G and artificial intelligence enable new services, products and modes of communication.

The credentials and user data of 3,672 Ring camera owners were compromised and exposed log-in emails, passwords, time zones and the names people give to specific Ring cameras, which are often the same as camera locations, such as “bedroom” or “front door.”

The Cybersecurity and Infrastructure Security Agency’s (CISA) Information and Communications Technology (ICT) Supply Chain Risk Management (SCRM) Task Force approved the creation of a new working group to develop attestation frameworks around various aspects of supply chain risk management best practices. 

LifeLabs recently identified a cyberattack that involved unauthorized access to their computer systems that possibly impacts 15 million people.

Hackers can be relentless with their cyberattacks. While organizations can be vulnerable to many security threats, ransomware is especially ruthless since its attacks are completely automated. It doesn’t matter what industry or business you are in – hackers don’t care if your organization has “nothing of value,” their machines will try to attack anything that is vulnerable.