ActiveCyber
10Jul

Learn How Ransomware Affects Government Agencies In This Active Cyber™ Interview with Jason Baker of GRIT

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Interviews
No comments

July 10, 2024 I like returning each year to the AFCEA Technet Cyber Conference as it always has a lively exhibit hall and interesting panels and discussions. It is also focused quite a bit on government issues and solutions, although not exclusively, as members of the IC, DoD, and other federal agencies provide their insights […]

Read more
Tags:
8Jul

Learn How KDM Analytics Provides Automated and Continuous Risk Assessment For Complex Systems In This Active Cyber™ Interview

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Interviews
No comments

July 8, 2024 I remember making the case for automated and continuous risk assessment many years ago when the NIST Risk Management Framework (RMF) was first being drafted and put through some public review processes. Back then, the main focus of the RMF was enterprise IT systems. And back then, there were no tools that […]

Read more
Tags:
19Apr

IARPA Issues Award for ReSCIND Program to SRI For Novel Network Defense Technology

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Research & Standards
No comments

Press Release – March 7, 2024 SRI chosen to deliver cyber-psychology-informed network defense technology for IARPA  The innovative program will be centered around the psychology of cyber attackers.   [March 7, 2024]: Menlo Park, CA – SRI announced today that it has been selected by Intelligence Advanced Research Projects Activity (IARPA) to deliver advanced technology for its recently announced Reimagining […]

Read more
Tags:
19Apr

Active Cyber™ Explores the Future Landscape of Cyber and AI – Part 1

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Research & Standards
No comments

April 18, 2024 It is evident over the last few years that central national governments are applying tighter controls on the security of software and hardware products – from labels for IoT devices in the US and abroad, to controls over AI research and bans on high risk AI models, to more timely reporting requirements on vulnerabilities, ransomware, […]

Read more
Tags:
19Apr

Active Cyber™ Explores the Future Landscape of Cyber and AI – Part 2

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Research & Standards
No comments

April 18, 2024 This is the second part of a two part series. You can find the first part of this feature at this link. It is evident over the last few years that central national governments are applying tighter controls on the security of software and hardware products – from labels for IoT devices in […]

Read more
Tags:
2Apr

Learn About SBOMs In This Active Cyber™ Interview with Dr. Jean Camp of Indiana University

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Interviews
No comments

April 2, 2024 Software Bill of Materials (SBOMs) have been a hot ticket even before they were listed as a key initiative for secure software development practices in the National Cybersecurity Strategy of 2023. I started to track SBOMs progress when I heard a presentation by Alan Friedman, one of the early evangelists who was […]

Read more
Tags:
29Feb

Learn About the Evolution of Issues Involving Bug Bounty Programs in This Active Cyber™ Interview with Dr. Rahul Telang

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Interviews
No comments

February 29, 2024 One cybersecurity area that I tend to spotlight involves vulnerability management programs.  From vulnerability discovery, disclosure, sharing, prioritization, and remediation, there are many different types of tools, processes, and programs that can be employed to manage this problem. One unique vulnerability management program that has evolved significantly over the years is bug […]

Read more
Tags:
15Jan

Looking at the AI Impacts on the Cyber Kill Chain Frameworks

Posted by: CyberSecurityChief Categories: Active Cyber Defense Intel-Based Defenses
No comments

January 15, 2024 Lately, I have been wondering about the emerging threat factors that are impacting the cyber kill chain and how the cyber kill chain and related frameworks [MITRE ATT&CK™, Diamond] processes, tools, and defenders need to adapt to these changes in 2024. Given today’s hottest topics, this line of thinking naturally led me […]

Read more
Tags:
« Older posts
Newer posts »