• NIST seeking comments on energy industry security scenarios

    The National Cybersecurity Center of Excellence (NCCoE) works with industry, academic, and government experts to create open, standards-based, modular, end-to-end solutions to cybersecurity challenges that are broadly applicable across a sector. The solutions are customizable to the needs of individual businesses, and help them more easily comply with relevant standards and regulations. The work is organized around use cases that describe sector-specific challenges.

  • Senate panel to vote this week on cybersecurity bill

    The Senate Commerce Committee will this week vote on an industry-backed cybersecurity bill before Congress takes an August recess. Last year the Senate twice tried, and failed, to pass a cybersecurity bill because of GOP opposition to it. GOP lawmakers objected to a bill imposing mandatory cybersecurity standards on industry, and instead called for a bill which would make the adoption of cybersecurity standards voluntary. The bill now being considered in the Commerce Committee calls for industry and NIST to develop a cybersecurity framework for industry (something NIST is already doing following a presidential executive order), and for industry voluntarily to adopt it.

  • Overconfident, introverted people more likely to be e-mail phishing victims

    New study shows that people who are overconfident, introverted, or women are less able accurately to distinguish between legitimate and phishing e-mails. Phishing is the use of fraudulent e-mail correspondence to obtain passwords and credit card information, or to send viruses.

  • Cost to U.S. of cybercrime lower than earlier estimates

    The Center for Strategic and International Studies (CSIS) and security firm McAfee published a revision of McAfee’s previous estimate of the cost of cybercrime to the United States, reducing the amount from $1 trillion to $100 billion. Experts say this should not be a reason for complacency.

  • White House considering incentives for cybersecurity compliance

    The Obama administration is considering whether to back tax breaks, insurance perks, and other legal benefits for companies which bolster their digital defenses. The incentives, which include limited protections from legal liability and tax incentives, would be set up to persuade  power plants, water systems, chemical plants, and other critical infrastructure companies to comply with the voluntary cybersecurity rules which are being drafted as part of President Obama’s cybersecurity executive order.

  • UN warns regulators of mobile phone vulnerabilities

    The United Nations  is warning telecommunications regulators and government agencies  about significant vulnerabilities in cell phone technology which would allow hackers to attack at least half a billion mobile phones worldwide.

  • Budget cuts force DHS to scale back cybersecurity programs

    Sequestration-mandated federal budget cuts are beginning to have an effect on DHS cybersecurity efforts. Since March, the department has been forced to cancel two conferences and three training sessions for utility companies on how to defend against cyberattacks.Security experts are concerned that the budget cuts are affectingimpacting cybersecurity efforts at a time where more money needs to be put into securing critical infrastructure.

  • Are nuclear weapons safe from cyber-attacks?

    Research will look into whether today’s nuclear weapons are safe from computer hacking. Specifically, the research seeks to address the question of whether the ability to use and the confidence in nuclear weapons is being eroded by new cyber capabilities being developed by an increasingly large range of actors.

  • Spending on cybersecurity for critical infrastructure to reach $46 billion by end of 2013

    The digitization of critical infrastructures has provided substantial benefits — improved productivity, better connectivity, greater efficiencies. Yet this digitization also carries significant risks. Always-on Internet connectivity has ushered in a new cyber-age in which the stakes are higher. Better to shield critical infrastructure, cyber security spending for critical infrastructure protection will hit $46 billion globally by the end of 2013.

  • U.S. research universities subject to sustained cyberattack campaign by China

    Leading U.S. research universities report that they have been subject to millions of Chinese hacking attempts weekly. The Chinese are aware that universities, and the professors who do research under the schools’ auspices, receive thousands of patents each year in areas such as prescription drugs, computer chips, fuel cells, aircraft, medical devices, food production, and more. The Chinese government-sponsored cyberattacks on American research universities are an expansion of efforts by China to steal information that has commercial, political, or national security value.

  • McAfee’s Phyllis Schneck leading candidate for DHS cybersecurity post

    Phyllis Schneck, the vice president and chief technology officer for public sector at McAfee, is the likely choice to be the next deputy undersecretary for cybersecurity at DHS. The DHS deputy undersecretary for cybersecurity oversees DHS’s cyber operations, including its relationship with private businesses which run utilities and critical infrastructure.

  • Hackathons used by government, industry for app development, recruitment

    Local and state governments, the music industry and private businesses have begun to host “hackathons” in an effort to learn more about applications that steal and use their data, recruit candidates for cybersecurity jobs, and more generally celebrate the hacking subculture.

  • NIST biometric publication provides two new ways to identify people

    The National Institute of Standards and Technology (NIST) has issued a new publication that broadens agency security options for Personal Identity Verification (PIV) cards. The new publication adds iris images as biometric identifiers and on-card fingerprint comparison as options for the cards.

  • Cybersecurity funding increasing despite sequestration

    Sequestration-mandated cuts continue, but more money will continue to go to cybersecurity, and job opportunities in the field will continue to grow. The Defense Department intends to spend $23 billion on cybersecurity over the next five years, and that it is seeking more than $4.6 billion for cybersecurity in 2014 fiscal year, an 18 percent jump from the 2013 fiscal year.

  • U.S. Emergency Alerting System (EAS) vulnerable to hacking

    The U.S. Emergency Alerting System (EAS) is designed to allow for quick alerts during an emergency. Researchers uncovered vulnerabilities in the digital alerting systems, vulnerabilities which allow an attacker remotely to log in over the Internet and manipulate any system function. The attacker could disrupt a TV or radio station’s ability to transmit and could disseminate false emergency information.