CISA Courts Private Sector to Get Behind CIRCIA Reporting Rules

May 9, 2024 at 08:13PM CISA extends the feedback period for proposed CIRCIA incident reporting by 30 days. Concerns of additional red tape on cybercrime victims arise. CIRCIA law, requiring reporting within specific time frames, is in final stages at CISA. Congress allocated no extra resources for CISA to fulfill its responsibilities. CISA stresses coordinated … Read more

US and EU infosec authorities pen intel-sharing pact

December 7, 2023 at 01:31PM CISA and ENISA, US and EU cybersecurity agencies, will enhance collaboration by sharing threat intelligence, best practices, and legislative approaches to improve cyber defenses. This agreement includes cybersecurity training and awareness programs. Additionally, the EU progresses with the Cyber Solidarity Act, aiming for stronger cyberattack response coordination across member states. … Read more

CISA shares vulnerabilities, misconfigs used by ransomware gangs

October 13, 2023 at 10:57AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has shared new details about vulnerabilities exploited by ransomware groups in order to help critical infrastructure organizations defend against attacks. Through its Ransomware Vulnerability Warning Pilot program, CISA has identified over 800 vulnerable systems frequently targeted by ransomware operations. CISA has also … Read more