Inside Cybersecurity

Daily News The Senate Environment and Public Works Committee has advanced a water resource bill with a provision directing the Environmental Protection Agency to develop a plan for supporting utilities who want to join the Water Information Sharing and Analysis Center, along with the reauthorization of key cybersecurity grant programs for the sector.

Daily News Lauryn Williams, a former strategic advisor at the Office of the National Cyber Director, highlighted opportunities for the Trump administration to promote engagement with additional stakeholders in the implementation of an AI cybersecurity clearinghouse recently launched by the White House to address patching.

Daily News HackerOne is asking the Cybersecurity and Infrastructure Security Agency to provide an exemption for good-faith security researchers from upcoming rules on cyber incident reporting, following a series of June town halls to get more feedback on the rulemaking.

Daily News Will Loucks, senior director for intelligence in the Office of the National Cyber Director, touted efforts to implement President Trump’s June 2 executive order on frontier AI models at an industry event, highlighting the recently announced AI cybersecurity clearinghouse and work at the Cybersecurity and Infrastructure Security Agency. “The EO is designed to meet the moment. We recognize that artificial intelligence is . . .

Daily News Jay Gazlay, a top vulnerability management official at CISA, identified national security concerns over frontier artificial intelligence models developed in China at a July 15 think tank event, discussing the need to strengthen interagency efforts to address against nation-state actors who target U.S. networks through policy actions.

The Cybersecurity and Infrastructure Security Agency is providing guidance with agency partners for software manufacturers on establishing a coordinated vulnerability disclosure process in collaboration with security researchers. “This guidance outlines best practices for suppliers to design and implement a coordinated vulnerability disclosure program to effectively and transparently collaborate with security researchers to report and remediate vulnerabilities,” CISA says in the July 15 resource.

Daily News The Pentagon’s decision to pause phase two implementation of the Cybersecurity Maturity Model Certification program caught off guard many private sector stakeholders who spent years building the ecosystem for third party assessments, while renewing concerns over costs to small businesses at the Defense Department. “I understand the need and desire from small businesses to reduce cost and complexity,” ControlCase’s Scott Singer said.

Daily News USTelecom is urging the Cybersecurity and Infrastructure Security Agency to lead a federal clearinghouse for cyber incident reporting, where the agency serves as a coordinating body providing information to relevant parties, in a filing building on recommendations provided at a June town hall to inform CISA’s upcoming mandatory reporting regime.

Daily News Former Pentagon officials Stacy Bostjanick and Katie Arrington encouraged stakeholders in the Cybersecurity Maturity Model Certification program to provide comments to a July 13 request for information seeking feedback on next steps for the initiative, as the Defense Department pauses implementation of phase two. “As many of you have seen the DoW has paused the CMMC for a 60 day review. I know this news is disconcerting to the ecosystem.

Daily News Matthew Noyes, a top cyber official at the U.S. Secret Service, highlighted the impacts at a recent webinar of threat actors who are targeting the personal data of corporate directors as a means of causing a larger disruption across their organization.