Page 6 - Binding Operational Directive News Today

While the move is applauded, a short timeframe to address vulnerabilities will be a challenge for security resource-strapped agencies.

The Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday ordered all federal agencies to immediately begin work on patching hundreds of cyber vulnerabilities, warning that malicious actors are contin

The U.S. Cybersecurity and Infrastructure Security Agency on Wednesday issued a new directive - BOD 22-01 - requiring federal civilian agencies to patch

A new Known Exploited Vulnerabilities Catalog will guide all federal agencies' security efforts.

The U.S. Cybersecurity and Infrastructure Security Agency on Wednesday issued a new directive - BOD 22-01 - requiring federal civilian agencies to patch

The goal is to reduce civilian federal agency exposure to attacks that threat actors are actively using in campaigns, agency says.

The Cybersecurity and Infrastructure Security Agency (CISA) has partnered with Bugcrowd to launch the first ever federal civilian enterprise-wide crowdsourced vulnerability disclosure policy (VDP) platform. The move will allow Federal Civilian Executive Branch (FCEB) agencies to coordinate with the civilian hacker community about vulnerabilities in their critical systems. FCEB agencies will now be able to receive security feedback from Bugcrowd’s community of ethical hackers around the world,...

Bug bounty vendor Bugcrowd to oversee the project

The deal follows the announcement of Binding Operational Directive 20-01 last September, in which CISA laid out plans to create a vulnerability disclosure policy (VDP). It directed agencies to publish a VDP policy on their websites within 180 days, describing what systems it covers and how security researchers can report bugs. It also mandates timelines for acknowledging and dealing with each bug.  Government technology contractor Endyna will support the reporting platform under a one-year sof...

Rep. Ted Lieu, D-Calif., arrives on Capitol Hill on February 13, 2021 in Washington, DC. Lieu introduced a bill which would require vulnerability disclosures of fedreal contractors. (Photo by Stefani Reynolds – Pool/Getty Images) Rep. Ted Lieu, D-Calif., will announce Tuesday a bill that would require all federal contractors to have a vulnerability disclosure program.  The Improving Contractor Cybersecurity Act draws inspiration from the Department of Homeland Security’s Binding Operat...